
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/F4777FBEEDDA11EF9731160CC4F9AE02.roa
File: F4777FBEEDDA11EF9731160CC4F9AE02.roa (raw, json)
Hash identifier: sZTUTJvgxgWJhUoK93A1p1nM08bMCHTb48BCqzgU1N4=
Subject key identifier: EB:C5:11:31:2A:45:EE:DF:44:FB:A7:44:B6:99:AE:EE:65:41:96:8D
Certificate issuer: /CN=A91C8347/serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083
Certificate serial: 0194
Authority key identifier: 2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/F4777FBEEDDA11EF9731160CC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:36:04 +0000
ROA not before: Sun 15 Jun 2025 04:54:35 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 63150
IP address blocks: 103.219.192.0/24 maxlen: 24
103.219.193.0/24 maxlen: 24
103.219.194.0/24 maxlen: 24
103.219.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl
rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404 (0x194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8347, serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083
Validity
Not Before: Jun 15 04:54:35 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a59244-5203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ee:eb:3a:d5:30:3f:c3:b3:64:29:8c:2c:8d:
18:ff:6f:78:07:c5:fc:ea:12:bc:f2:4b:e7:89:d9:
49:0b:55:30:25:52:22:73:89:05:fa:27:4a:9d:bc:
67:78:9e:0b:2f:36:b2:d3:b6:5b:52:64:8e:d5:79:
27:44:b4:db:eb:8c:13:e6:c8:dd:88:03:03:83:2d:
69:db:87:b3:38:90:0a:15:8a:85:c2:6a:94:81:6a:
ff:cc:7d:61:ef:0e:df:ed:1b:7e:22:02:e8:cf:c0:
c0:a1:58:88:03:79:6d:0e:b7:2f:c7:ab:b3:90:54:
51:93:2c:5c:70:50:89:b5:05:82:2a:c7:c6:bc:a8:
7b:1e:3d:ff:82:4d:fd:25:06:12:bb:66:9e:69:8f:
40:dd:9f:7c:64:fd:8b:ac:ef:1e:16:4d:ff:55:03:
93:26:79:f7:1c:9f:6c:b2:d6:ad:fc:c8:04:ad:d8:
3c:6a:36:1b:bd:79:33:ce:e2:22:c0:17:21:46:eb:
f0:2a:b8:aa:f3:d7:91:e3:ed:4e:54:62:0d:cb:b1:
06:af:db:a6:78:42:bc:9b:d6:1f:6f:6d:27:d6:b7:
18:ac:b1:5f:e2:07:ef:77:eb:b0:0f:50:18:5d:4a:
a5:70:e6:b1:dd:be:72:cb:7f:8c:cd:a0:51:28:9d:
b9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C5:11:31:2A:45:EE:DF:44:FB:A7:44:B6:99:AE:EE:65:41:96:8D
X509v3 Authority Key Identifier:
keyid:2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/F4777FBEEDDA11EF9731160CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.219.192.0/22
Signature Algorithm: sha256WithRSAEncryption
04:d3:ef:ef:5d:0a:9d:50:bf:98:9a:94:6d:6d:9e:68:9d:ca:
d4:fe:89:f9:c8:b8:77:6b:d9:b8:e6:ef:52:8c:01:4b:22:1b:
b8:85:03:a0:d0:34:1c:0f:9f:9b:3f:50:12:0d:69:4c:cf:c7:
fa:0a:a8:35:a4:8b:2f:b5:68:0b:86:42:44:67:0e:56:bf:f1:
90:cf:ad:58:60:ff:3b:4b:0e:1e:92:c8:32:b9:2e:e6:73:b9:
b3:f0:6e:7d:d4:99:4c:9b:a3:70:0a:58:ad:86:98:53:fc:9a:
42:86:c2:c4:aa:4b:ba:d9:ff:b4:ca:34:64:b7:1a:5e:61:c7:
a5:37:ca:14:6a:95:5f:e2:32:b5:8e:e7:2e:5b:07:57:e1:c9:
f6:36:98:e2:53:c0:3c:a6:2b:6e:e7:e8:c2:bf:62:e7:27:8c:
26:f4:a9:00:73:c8:3c:3d:db:cd:57:93:a0:95:1e:c7:d5:d3:
c3:28:90:93:1b:25:ab:41:af:0e:04:29:bc:72:a9:eb:18:c7:
f2:49:5f:09:ca:ae:fc:72:c0:92:22:eb:cc:08:b9:20:17:ce:
84:2b:a0:1f:26:9d:99:c3:e7:98:32:d2:39:4e:7c:a3:11:11:
a4:78:24:22:87:88:e6:6e:2f:0b:c4:b4:94:bc:5d:3d:cb:87:
85:b9:80:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:10 2026 by rpki-client