
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A3583B2616B711ECBD752D47C4F9AE02.roa
File: A3583B2616B711ECBD752D47C4F9AE02.roa (raw, json)
Hash identifier: c6JJTbyii4kmmwmKTzsjdZQmeW/PESkjfx7KNoiOGac=
Subject key identifier: F9:16:1C:8B:CB:17:02:B7:98:0D:31:85:EC:7F:E2:5E:44:6E:A0:B6
Certificate issuer: /CN=A91D891D/serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
Certificate serial: 05E0
Authority key identifier: 41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A3583B2616B711ECBD752D47C4F9AE02.roa
Signing time: Tue 30 Jun 2026 22:26:32 +0000
ROA not before: Tue 30 Jun 2026 22:26:32 +0000
ROA not after: Fri 30 Oct 2026 00:00:00 +0000
asID: 55799
IP address blocks: 103.113.156.0/22 maxlen: 22
103.113.156.0/24 maxlen: 24
103.113.157.0/24 maxlen: 24
103.113.158.0/24 maxlen: 24
103.113.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl
rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:33:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1504 (0x5e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D891D, serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
Validity
Not Before: Jun 30 22:26:32 2026 GMT
Not After : Oct 30 00:00:00 2026 GMT
Subject: CN=6a444298-0475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7f:13:b4:49:c1:ba:53:ae:aa:b1:e9:77:b9:
39:b3:5f:bd:d6:47:ed:5f:2f:0a:41:61:71:2e:3f:
ef:a1:06:01:ee:0f:df:08:a3:fc:23:c2:95:77:dc:
c0:ed:26:32:91:11:95:85:5a:4f:29:2c:d3:8e:00:
d1:62:5f:06:4a:f0:bc:bd:78:a3:be:e8:d8:be:99:
d7:37:69:d3:04:a3:22:38:d3:fc:a5:9e:8d:61:ae:
81:36:59:68:12:d2:74:f1:ae:05:51:1e:fd:89:12:
0b:e8:0e:ca:48:c7:1e:58:75:d0:3d:f9:00:a9:60:
35:64:b8:00:3d:a5:e4:9e:78:51:58:b1:1d:77:e3:
95:cb:c6:ec:31:38:5c:20:58:48:7d:c4:cb:81:95:
c2:29:c7:6b:9c:2a:23:5c:75:fc:c0:1e:4a:32:c4:
51:7e:2b:1f:ca:4e:a5:53:b9:e5:89:d2:dd:1d:66:
60:90:e0:e6:56:09:d6:5a:5d:be:a5:19:91:0f:e7:
07:e1:7d:34:a5:2e:d2:92:77:2e:b2:58:e1:7d:65:
f8:77:05:12:09:88:27:10:00:36:f8:27:28:09:79:
17:71:de:e2:c6:b9:c0:f4:7d:27:9d:a8:64:67:91:
fb:39:3d:69:a4:34:57:af:27:fa:3a:38:bc:ae:30:
66:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:16:1C:8B:CB:17:02:B7:98:0D:31:85:EC:7F:E2:5E:44:6E:A0:B6
X509v3 Authority Key Identifier:
keyid:41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A3583B2616B711ECBD752D47C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.113.156.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:66:ec:29:e6:b6:f6:37:41:cb:2a:c2:2e:76:72:35:ee:89:
c9:62:ea:38:3b:27:d8:dd:07:8d:ae:1c:2f:fe:04:5d:c2:0f:
6e:26:28:0a:76:93:26:ed:28:4e:62:80:fe:7b:4d:71:b9:73:
56:3d:b1:43:c4:db:3f:f3:9f:89:06:d3:67:fa:7d:50:2f:f0:
62:8c:9c:b5:4b:ff:4e:aa:82:e0:8c:70:ce:e0:b5:a2:65:b2:
70:03:83:69:8c:73:3d:31:6a:f7:fb:77:1d:20:95:87:c1:ca:
2e:1a:dc:58:b2:d7:37:c2:05:2a:84:e9:a5:a0:4b:b7:c1:54:
87:0b:dc:07:db:74:f4:c8:38:29:6d:b8:07:5a:d3:6e:80:bd:
1c:0a:a0:7d:2e:06:98:39:af:e7:b9:a3:71:5c:8f:5d:91:0a:
29:03:4a:4d:23:64:7c:c1:31:04:ff:2b:69:eb:f6:ef:88:dd:
32:c1:c9:7b:1f:38:7b:75:b6:f2:e6:d6:f4:54:cc:8b:ac:82:
f5:6a:9f:95:bf:c6:ca:f0:01:19:40:c6:10:16:ec:3d:17:1d:
c5:04:c2:59:8d:8a:9b:00:ec:a1:d7:47:18:72:34:89:07:92:
a0:9d:ca:30:d6:75:f0:ab:6a:0f:1d:15:b3:cd:8d:fd:4f:10:
a9:2b:41:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:28:08 2026 by rpki-client