
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF92B/DED15A084B5E11F1A31B6DE9AF833773/4B7CEF5A4B5F11F19135E42BB0833773.roa
File: 4B7CEF5A4B5F11F19135E42BB0833773.roa (raw, json)
Hash identifier: j9oLKt21URlcYaAs/2+sCC08EJUvzOERXy2T9IPR3BM=
Subject key identifier: 45:DE:A7:4A:30:C3:2C:E6:63:EE:BD:29:79:1D:57:87:8E:45:69:7D
Certificate issuer: /CN=A91DF92B/serialNumber=FB0EE48EB0836A3A87F3DB84C90D0D9974183BBC
Certificate serial: 02
Authority key identifier: FB:0E:E4:8E:B0:83:6A:3A:87:F3:DB:84:C9:0D:0D:99:74:18:3B:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-w7kjrCDajqH89uEyQ0NmXQYO7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF92B/DED15A084B5E11F1A31B6DE9AF833773/4B7CEF5A4B5F11F19135E42BB0833773.roa
Signing time: Sat 09 May 2026 04:26:49 +0000
ROA not before: Sat 09 May 2026 04:26:49 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 133139
IP address blocks: 103.226.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF92B/DED15A084B5E11F1A31B6DE9AF833773/-w7kjrCDajqH89uEyQ0NmXQYO7w.crl
rsync://rpki.apnic.net/member_repository/A91DF92B/DED15A084B5E11F1A31B6DE9AF833773/-w7kjrCDajqH89uEyQ0NmXQYO7w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-w7kjrCDajqH89uEyQ0NmXQYO7w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 09:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF92B, serialNumber=FB0EE48EB0836A3A87F3DB84C90D0D9974183BBC
Validity
Not Before: May 9 04:26:49 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69feb789-5484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5e:cd:13:90:ff:bf:73:b4:e6:3a:d9:53:2a:
c8:fe:4a:82:f0:93:68:c3:08:7f:36:9e:f1:a4:87:
13:a6:8f:29:55:85:a6:fb:2a:05:c7:fe:89:16:b2:
16:74:0f:31:c0:59:89:b4:aa:d4:33:f9:34:09:36:
66:f4:ed:6d:78:c0:2b:f4:b1:c4:92:9e:53:8f:a6:
92:48:a9:23:99:b4:2b:24:59:e1:f7:fd:a7:ec:89:
2a:23:81:16:59:ee:be:70:32:7b:96:f3:a2:25:4b:
fa:12:65:96:a1:9b:35:b8:7b:b5:f1:c1:89:cc:fe:
4b:d6:60:e7:08:df:3f:da:35:91:bb:13:bb:81:c3:
5d:28:f0:91:30:b5:f6:bf:2f:7f:e4:f3:b3:58:c0:
8c:75:28:8c:49:83:7b:8e:ef:46:b5:28:6c:0b:86:
64:1d:54:c4:c4:6a:c1:33:c3:90:64:ad:12:e7:03:
26:18:63:cf:00:39:8f:4e:95:e0:d3:d3:aa:53:6c:
18:b0:54:69:52:24:24:47:1a:8e:97:de:f3:26:6b:
24:6c:32:65:54:ba:d9:42:6c:d2:a4:4e:6b:67:a4:
93:e0:49:4d:6b:91:f5:84:97:77:23:a1:6e:10:13:
09:c4:17:73:b2:1f:80:b4:52:d9:40:f7:01:9e:e2:
f4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DE:A7:4A:30:C3:2C:E6:63:EE:BD:29:79:1D:57:87:8E:45:69:7D
X509v3 Authority Key Identifier:
keyid:FB:0E:E4:8E:B0:83:6A:3A:87:F3:DB:84:C9:0D:0D:99:74:18:3B:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF92B/DED15A084B5E11F1A31B6DE9AF833773/-w7kjrCDajqH89uEyQ0NmXQYO7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-w7kjrCDajqH89uEyQ0NmXQYO7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF92B/DED15A084B5E11F1A31B6DE9AF833773/4B7CEF5A4B5F11F19135E42BB0833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.226.150.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:a6:ea:e1:e4:09:3e:c3:ee:fb:b1:94:ff:62:32:96:09:43:
4b:9c:14:92:50:6a:5b:db:ec:2c:51:4e:85:21:dc:a4:d0:e4:
48:b9:f2:0c:7a:70:06:c3:83:1c:14:d4:d0:e0:24:50:32:5f:
cc:9a:4e:5c:80:84:4d:4f:e2:44:e9:8f:4d:9c:84:26:b0:4b:
d9:03:ce:70:05:aa:aa:1d:17:5a:d6:20:a9:54:19:f4:a4:6b:
74:2f:53:f5:37:41:27:9e:df:36:ec:b3:f9:2d:21:61:e8:df:
e0:d7:7d:62:46:e7:13:36:73:6b:69:1c:06:72:00:e9:80:dc:
df:98:09:ab:08:30:79:94:1c:46:66:b5:82:5a:94:5a:a8:fa:
b9:8c:7e:58:02:d3:d2:fe:d4:44:32:a1:05:57:79:aa:0c:33:
fe:d5:e3:f1:5c:e8:e5:c7:dd:a7:41:c8:72:ae:03:7d:86:09:
33:d5:66:f3:63:8d:a2:3d:cb:fc:1d:b0:d1:64:29:f6:1a:ac:
e8:55:1d:70:88:2d:ee:6f:dc:1d:94:a8:80:91:9a:2c:7e:f8:
0e:47:c0:94:f9:cc:ab:4f:2e:0e:53:83:1e:88:05:81:d5:3b:
e9:4e:e5:97:64:07:00:56:b8:4d:e0:8e:f3:b0:3b:fd:e1:c8:
dd:b3:cb:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 07:57:07 2026 by rpki-client