
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/D79607EEDCDD11EE85DBEB12C4F9AE02.roa
File: D79607EEDCDD11EE85DBEB12C4F9AE02.roa (raw, json)
Hash identifier: 8+4nPBH0mKjruMVqsF1eFTkdvjJp7WM7Sk6y7pERmRQ=
Subject key identifier: 4F:8C:95:18:83:D5:26:A8:29:86:CC:68:CA:9C:44:B5:9C:00:3C:0C
Certificate issuer: /CN=A91CE978/serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
Certificate serial: 3603
Authority key identifier: 6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/D79607EEDCDD11EE85DBEB12C4F9AE02.roa
Signing time: Tue 12 May 2026 15:13:00 +0000
ROA not before: Tue 12 May 2026 15:13:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132509
IP address blocks: 103.244.180.0/24 maxlen: 24
103.244.181.0/24 maxlen: 24
103.244.182.0/24 maxlen: 24
103.244.183.0/24 maxlen: 24
2405:f900::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl
rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:13:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13827 (0x3603)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE978, serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
Validity
Not Before: May 12 15:13:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a03437c-1533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:15:38:73:a4:98:b4:ad:b3:f2:ae:50:73:4b:
04:60:31:96:b3:b5:16:79:44:60:d1:25:d7:46:68:
80:a6:b9:28:b7:3a:38:da:f2:b5:91:f0:1c:d4:1e:
86:89:45:82:ab:c9:fc:63:b6:c9:31:c6:9d:e8:89:
65:88:3d:86:23:76:eb:7e:92:4b:da:54:e6:9a:dd:
bc:40:ab:85:02:0a:c9:4f:50:33:d4:4a:18:2d:51:
e9:7f:03:7c:63:3d:77:81:2e:48:de:7f:05:d4:ff:
e9:1c:1c:e3:78:8e:d2:98:7a:e6:62:a8:46:15:d3:
e6:ce:9b:13:58:67:57:6b:db:48:a0:48:07:2e:a9:
02:92:18:cb:fd:84:ad:6b:ab:95:56:e6:6e:f3:15:
8a:a6:ab:c6:02:1f:6a:96:ac:e9:46:ae:39:09:3d:
c7:11:c1:2c:ba:72:c9:28:31:c8:9e:ed:d2:46:52:
00:43:30:b0:99:81:8c:b8:ee:45:d1:0f:fb:60:b8:
db:52:c9:05:33:09:cf:c5:b4:c0:d4:dd:53:12:b2:
ef:d8:26:9d:a0:d9:59:24:69:2e:d0:d2:05:bb:8b:
d6:4c:da:52:2c:92:ab:91:56:70:d4:f7:c5:44:a5:
de:ee:b3:ef:7b:a9:05:a4:81:8f:f7:fb:b1:8d:a3:
3b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8C:95:18:83:D5:26:A8:29:86:CC:68:CA:9C:44:B5:9C:00:3C:0C
X509v3 Authority Key Identifier:
keyid:6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/D79607EEDCDD11EE85DBEB12C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.244.180.0/22
IPv6:
2405:f900::/32
Signature Algorithm: sha256WithRSAEncryption
0e:63:3c:c9:3a:0e:a1:b5:67:dc:f6:86:b5:3b:5a:f3:be:39:
2b:37:3e:d7:27:49:63:00:f8:72:9d:90:b1:d2:a8:f9:3f:57:
1c:1e:8c:ee:6e:57:31:40:09:ad:9b:5d:16:e7:ec:f8:84:88:
77:c2:37:70:38:ec:58:bf:c4:65:d6:c2:6f:09:44:89:61:aa:
1b:1f:03:73:34:e1:2e:5d:b2:8c:29:2e:b8:0a:59:87:75:1b:
ca:71:14:a8:9f:c0:0c:08:ec:9a:b7:5c:3d:69:cf:a3:bb:1b:
59:e5:2c:3a:1f:59:96:67:27:19:8c:fd:cf:d5:64:22:84:e7:
d9:b0:b1:6a:b6:ef:a9:de:65:69:81:aa:5c:ed:bd:ca:29:a6:
39:96:dc:96:5b:8a:87:11:8e:2d:dd:29:f3:8e:55:53:7b:19:
d8:9f:c1:d5:3d:97:8c:bc:df:46:a1:60:c5:c1:16:46:41:e6:
95:a0:b6:c8:f8:3f:39:37:01:43:f6:d5:cb:19:74:c7:01:4d:
99:68:7b:1d:86:08:4d:3f:43:7a:da:92:bf:ce:94:65:23:aa:
20:eb:f7:52:1c:aa:63:43:0c:36:a1:38:2c:8d:72:03:fb:59:
f2:93:da:f5:30:52:d2:da:90:37:01:11:78:4c:ad:84:5a:3e:
9b:f9:0c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:46:31 2026 by rpki-client