
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/738240A246DC11EEAF1D2C1DC4F9AE02.roa
File: 738240A246DC11EEAF1D2C1DC4F9AE02.roa (raw, json)
Hash identifier: mgVey14qS3blWfe2a8Jc4qKwijvYP/VH5umYVNkw2S4=
Subject key identifier: 68:62:D6:A8:1E:79:86:EE:28:E7:11:41:31:50:AD:3E:AC:F7:0A:9D
Certificate issuer: /CN=A91D477A/serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF
Certificate serial: 0ACF
Authority key identifier: 11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/738240A246DC11EEAF1D2C1DC4F9AE02.roa
Signing time: Fri 08 May 2026 20:24:05 +0000
ROA not before: Fri 08 May 2026 20:24:05 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 137551
IP address blocks: 103.112.240.0/22 maxlen: 24
103.120.120.0/22 maxlen: 22
103.120.120.0/24 maxlen: 24
103.120.121.0/24 maxlen: 24
103.120.122.0/24 maxlen: 24
103.120.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl
rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2767 (0xacf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D477A, serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF
Validity
Not Before: May 8 20:24:05 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69fe4665-9c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2e:c4:2e:3f:45:58:7a:87:49:be:74:24:37:
db:27:69:92:df:c5:4c:6f:0d:97:a1:d0:23:1e:e1:
ac:39:3e:b7:19:db:17:06:3c:64:65:86:a2:c6:59:
d6:37:4f:d4:9c:0c:68:16:a6:61:74:f1:24:32:31:
9f:34:9c:16:f2:2d:24:a4:38:7f:e0:ff:cb:06:26:
5e:70:d7:cc:77:ee:07:59:db:3f:07:23:c6:ee:fd:
c8:0b:9a:62:00:8a:7e:38:1e:3d:03:28:3d:d5:5c:
8b:02:c4:97:7f:27:64:ae:ac:b9:d8:04:81:8c:44:
b7:22:7b:5f:72:f8:3a:37:95:cf:e2:b7:6c:91:64:
c9:28:68:69:4d:48:6a:39:b4:9b:dc:20:53:60:fb:
28:a2:0e:27:e6:d1:0d:c3:63:99:a5:72:79:e0:d2:
ca:42:a5:77:46:b8:86:d6:70:5e:cb:1e:06:97:35:
d4:d3:f5:66:6c:38:c5:ad:6a:23:6f:a3:fa:d3:ab:
e1:16:36:d2:a0:6f:de:ee:51:e5:b6:72:57:d8:d0:
85:36:7d:d3:9d:3b:b8:68:73:87:5f:0d:56:06:9d:
de:56:c3:b1:d0:3a:da:52:d6:17:44:fd:52:c4:87:
2a:17:f4:29:8e:ef:ba:45:01:32:8b:89:3e:66:7d:
28:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:62:D6:A8:1E:79:86:EE:28:E7:11:41:31:50:AD:3E:AC:F7:0A:9D
X509v3 Authority Key Identifier:
keyid:11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/738240A246DC11EEAF1D2C1DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.112.240.0/22
103.120.120.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:fe:f2:f2:ab:e5:c8:82:a9:ae:da:5e:5d:fe:c0:be:3b:b0:
68:af:c6:b4:27:d4:26:c5:3b:66:d0:b8:b1:95:3e:a9:71:98:
af:8d:1d:f0:c3:ac:53:5f:d9:33:9e:a6:6a:30:ce:42:0d:f8:
d1:63:73:5d:79:2d:42:bf:84:59:25:0b:2f:5a:23:b6:e5:89:
76:1e:f4:03:52:b7:8f:9e:28:a9:cc:e8:23:02:3a:8a:f1:5a:
71:b2:d1:32:0b:96:c1:a2:0f:4a:a8:f0:c6:10:93:ea:5d:34:
f4:c2:5d:50:12:3f:0f:49:95:7a:32:46:63:38:03:ee:af:a4:
03:0d:86:86:e6:7f:85:0d:b2:e5:b0:1c:e3:8e:fa:b1:70:f7:
fd:13:ac:06:d2:6e:21:04:04:9f:4d:8e:80:31:65:cc:75:f4:
b3:e7:80:1e:54:46:e3:7c:c6:50:36:5b:ea:c0:70:6e:89:23:
cc:a9:c5:3c:82:e3:01:f8:20:b0:d6:bb:d5:e7:ee:14:63:f8:
b5:45:9c:35:b5:bf:5e:89:3b:38:d4:1b:76:d7:23:5b:4d:ad:
29:90:77:ec:a0:89:a9:ed:7c:73:33:bc:cc:6e:44:3a:71:4d:
fa:8b:7e:39:06:2a:ff:cc:ac:0e:ed:8a:0d:d3:f7:95:df:b2:
53:2a:ab:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:12:14 2026 by rpki-client