
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4CC0341641A311EABAADCE0AC4F9AE02.roa
File: 4CC0341641A311EABAADCE0AC4F9AE02.roa (raw, json)
Hash identifier: K1S8Q65Z3w1SElyF5atmBbQ9pOqRtecrW95mrmJVLwg=
Subject key identifier: D2:67:01:E2:34:91:F6:E1:8E:CF:D8:E7:34:46:AF:2E:67:12:F6:7F
Certificate issuer: /CN=A91D9E49/serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A
Certificate serial: 0BAA
Authority key identifier: E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4CC0341641A311EABAADCE0AC4F9AE02.roa
Signing time: Tue 10 Mar 2026 19:24:52 +0000
ROA not before: Tue 10 Mar 2026 19:24:51 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 59321
IP address blocks: 103.213.28.0/23 maxlen: 24
103.226.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl
rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:50:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2986 (0xbaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9E49, serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A
Validity
Not Before: Mar 10 19:24:51 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69b07003-2446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2e:75:8c:d7:68:a0:c4:67:18:0e:a8:18:d8:
97:c6:ef:04:93:b1:84:38:f7:23:99:2a:96:a5:48:
ec:05:23:0f:86:30:1b:64:76:96:69:87:f5:b0:33:
3d:a6:84:4e:0b:04:b4:ee:cf:43:a9:98:d6:5f:08:
36:c3:3f:89:3f:78:42:fd:a0:bd:58:7d:a7:5a:e7:
fe:09:97:b7:4e:91:39:00:ba:ee:fb:72:5f:d2:69:
4b:c5:2a:d1:45:ae:24:87:97:0c:35:d8:a9:63:00:
7e:d4:a4:de:d7:47:6e:41:43:07:ca:71:50:df:09:
1f:20:eb:7b:7a:0e:ff:f0:8e:d9:f9:d3:d4:00:d0:
77:da:dc:2a:4e:3b:58:a9:f9:72:22:2b:54:4c:74:
b6:1d:92:ce:3c:74:b8:e1:66:13:d2:93:f4:39:36:
d1:8b:ac:67:1a:ba:a8:ca:28:70:17:38:ba:55:9c:
89:e0:c6:a9:80:92:d6:08:30:b4:f1:a5:69:ac:5d:
6e:68:42:cc:01:f3:ee:f6:f9:2d:28:29:82:4b:0f:
cd:73:ba:8a:0a:ec:01:09:43:30:da:61:b4:23:99:
4f:c0:56:64:02:3c:4d:d7:68:6e:f5:a7:e1:2a:85:
6d:4b:be:5f:3d:53:ab:78:90:5b:c2:2c:c0:98:9a:
38:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:67:01:E2:34:91:F6:E1:8E:CF:D8:E7:34:46:AF:2E:67:12:F6:7F
X509v3 Authority Key Identifier:
keyid:E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4CC0341641A311EABAADCE0AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.213.28.0/23
103.226.122.0/24
Signature Algorithm: sha256WithRSAEncryption
96:21:87:50:e0:3d:5c:ef:f1:53:1d:29:4b:ce:ad:9a:2e:2c:
5b:6f:8d:e6:d9:2f:41:94:ca:e7:29:6a:ad:a4:18:f5:f8:4d:
31:9a:4e:1e:f9:fa:62:35:8d:c3:76:dc:a1:21:ec:51:49:98:
4d:d4:0d:b0:16:d2:64:b6:f0:23:ac:28:4f:2e:87:69:fe:47:
54:d3:dd:ae:f1:d2:f3:36:56:77:e6:ea:e3:22:06:0e:d7:32:
f0:ea:31:3c:0e:ff:8b:0e:8f:32:4a:7c:73:6e:1f:2b:7a:66:
4d:5c:33:bd:d1:ac:3f:be:12:ce:96:00:f3:71:41:0c:3e:d5:
9d:ad:07:4f:97:d6:cf:49:f7:a6:66:0e:ef:ae:e0:32:75:df:
99:27:d7:b4:0e:c4:ad:90:ac:bd:91:6c:c9:52:7c:7f:8c:c3:
17:55:64:f8:ba:be:b4:2c:c0:4f:1d:73:04:44:96:ee:58:86:
2d:48:1e:a8:3c:f2:c0:54:cf:dc:c9:46:10:48:52:f8:12:60:
90:3c:3e:27:da:2e:44:fb:f7:f5:28:e1:3a:f9:2c:82:e1:52:
e7:dd:88:95:cc:37:d8:80:1f:e5:f4:cc:58:89:eb:c8:5e:0e:
cf:eb:66:5f:8d:c0:4a:ad:5a:90:e2:08:d8:75:2f:a8:0f:a8:
8b:4a:15:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:55:22 2026 by rpki-client