
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/4BF18842284611F1B6B4839A93833773.roa
File: 4BF18842284611F1B6B4839A93833773.roa (raw, json)
Hash identifier: mfFOdjQtIP/R+cw7T58yWpJ33Vz+R8NefNOQF1rRW/8=
Subject key identifier: B6:4D:BB:BB:88:CD:03:D3:09:C2:FA:4E:62:41:DD:FC:EE:2D:36:B3
Certificate issuer: /CN=A91D41AC/serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377
Certificate serial: 0106
Authority key identifier: BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/4BF18842284611F1B6B4839A93833773.roa
Signing time: Wed 25 Mar 2026 12:29:41 +0000
ROA not before: Wed 25 Mar 2026 12:29:41 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 38790
IP address blocks: 203.153.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl
rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 12:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D41AC, serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377
Validity
Not Before: Mar 25 12:29:41 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69c3d535-3932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:90:40:fc:cf:8e:01:c2:b7:69:ce:cd:a5:43:
a3:5b:e8:b5:8a:5a:9d:60:6b:ab:19:59:1b:00:f1:
62:9a:de:b4:99:0a:cb:e5:a0:49:82:d8:89:6f:25:
d9:e8:1f:67:b0:d8:44:a9:fa:77:ad:6e:86:f3:71:
a3:ec:bc:23:cd:d4:f2:9f:4b:8c:13:1a:b0:53:a1:
d6:f9:6d:55:71:7b:2e:f9:8d:8f:8c:27:2d:7e:1b:
b2:97:0a:11:61:af:f8:78:c2:24:0b:39:5a:45:b4:
c3:92:2d:0d:58:4e:b6:a3:af:e5:cc:93:2d:f6:e0:
1a:35:07:da:c5:c1:1b:f7:2d:3d:4b:ef:d1:6e:ed:
c0:41:0e:02:ff:9d:6f:96:3c:eb:b9:81:f2:66:1f:
62:26:2b:59:24:92:ec:32:0a:3c:98:82:6c:b2:35:
47:7c:2f:5d:85:2f:40:c3:b4:0e:93:7b:8e:e4:8e:
fd:84:26:e3:47:b8:8d:1b:47:34:af:ef:cc:00:fa:
0b:45:f0:77:c2:80:bd:84:68:ff:18:1b:8c:bf:e4:
38:a5:76:62:70:77:c6:36:75:1a:d3:a5:58:7f:f8:
5e:5b:2f:35:50:cb:9e:11:db:5b:ad:77:3d:57:f3:
05:47:15:90:19:e2:5f:d5:2d:29:fb:f4:46:2c:fa:
87:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4D:BB:BB:88:CD:03:D3:09:C2:FA:4E:62:41:DD:FC:EE:2D:36:B3
X509v3 Authority Key Identifier:
keyid:BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/4BF18842284611F1B6B4839A93833773.roa
sbgp-ipAddrBlock: critical
IPv4:
203.153.192.0/20
Signature Algorithm: sha256WithRSAEncryption
8b:72:63:7c:d9:99:aa:81:27:63:9d:a5:4e:bc:45:75:04:82:
0d:ed:e4:20:2b:a3:65:4a:47:23:e3:a6:27:e0:9e:68:54:85:
b3:58:d4:b1:5e:2f:80:f3:5d:7c:92:8a:5d:76:c1:5d:a9:f1:
86:2a:7d:2e:fb:3c:41:5f:f9:8e:f3:83:7e:32:b7:b7:51:2c:
a0:e0:be:0c:e1:ae:d4:9d:04:91:73:58:10:a2:b9:1c:fe:9e:
eb:8a:2d:78:a2:48:20:aa:88:fb:7d:02:22:d7:9d:87:db:01:
c7:e7:29:bc:30:13:1a:b4:9e:fc:93:4e:f7:81:40:ee:73:f9:
f3:e5:46:2e:19:30:8e:06:35:7f:af:d1:24:44:86:89:92:1a:
23:3e:4d:6a:a3:c8:54:49:12:0b:40:10:13:eb:9b:82:bf:c6:
20:3f:2a:b8:8a:ba:12:99:7f:b5:4f:84:c0:04:1b:a6:ef:87:
7b:27:38:99:59:62:cd:68:33:fa:33:33:eb:30:f4:c4:5f:fa:
c5:9b:43:02:32:84:3f:b9:56:79:ab:2d:ba:28:65:19:b3:ac:
e4:98:2e:8b:44:f1:7a:81:b7:99:ea:51:2c:87:a8:c7:0c:77:
ee:f6:30:ba:c9:88:c8:ca:8e:6c:50:4f:f1:cd:c4:4e:10:15:
f5:9e:81:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:44:37 2026 by rpki-client