
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/13F5D28685B111ECB675B552C4F9AE02.roa
File: 13F5D28685B111ECB675B552C4F9AE02.roa (raw, json)
Hash identifier: 8DwKhTLQgcVtWWSBgA/0ZZCOJM+cAX3WN6qSs2I9zAc=
Subject key identifier: 4E:10:57:C1:0D:96:3F:35:9B:2D:AD:72:27:C0:D8:34:93:B7:4B:44
Certificate issuer: /CN=A91DFC30/serialNumber=947CB674A858CD91AEA5526BA3668A11E49ECB93
Certificate serial: 046E
Authority key identifier: 94:7C:B6:74:A8:58:CD:91:AE:A5:52:6B:A3:66:8A:11:E4:9E:CB:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/13F5D28685B111ECB675B552C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:00:47 +0000
ROA not before: Tue 25 Mar 2025 00:36:28 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 134732
IP address blocks: 103.181.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.crl
rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1134 (0x46e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFC30, serialNumber=947CB674A858CD91AEA5526BA3668A11E49ECB93
Validity
Not Before: Mar 25 00:36:28 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a40e4f-3d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b2:c7:2c:3e:44:e2:e1:55:e7:e6:1b:ee:be:
53:d7:33:a1:67:33:67:6d:85:69:2d:37:f3:df:48:
4a:2c:72:3c:03:06:3a:b4:bc:cd:8b:f2:2d:46:fe:
68:0f:c1:ac:fe:80:26:bb:f8:b0:33:2f:63:90:b9:
d0:3a:d2:3b:1e:bb:50:a9:df:74:2d:3b:30:2f:52:
c4:62:48:11:a7:5d:bd:b0:d1:de:a8:69:78:29:46:
24:c6:6c:3c:8f:01:fe:a2:c3:5b:e5:d9:77:ea:a2:
dc:d7:43:0d:2c:50:b5:25:93:63:22:61:5f:9c:67:
10:34:c1:77:98:22:82:4c:aa:82:07:81:15:d5:d3:
a4:50:21:71:cf:7c:3a:7b:da:ef:91:73:7c:4a:68:
f8:d2:8f:50:a8:e7:55:e5:a4:84:c7:62:6a:27:89:
72:17:65:29:14:2a:fa:3e:df:ad:3d:f9:85:51:79:
d8:cb:ad:d1:2c:77:3e:99:6f:be:9a:a7:86:2c:a7:
20:61:fa:47:c1:51:46:6e:3f:b9:0e:83:53:63:ad:
c9:b2:be:82:53:d5:e8:e4:9a:9b:6b:e2:e9:9a:3f:
cc:74:71:2d:d4:1f:06:7a:86:03:e3:d5:02:94:e5:
5e:29:49:a3:8d:9b:03:3c:27:fa:9a:4d:ca:64:6f:
21:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:10:57:C1:0D:96:3F:35:9B:2D:AD:72:27:C0:D8:34:93:B7:4B:44
X509v3 Authority Key Identifier:
keyid:94:7C:B6:74:A8:58:CD:91:AE:A5:52:6B:A3:66:8A:11:E4:9E:CB:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/lHy2dKhYzZGupVJro2aKEeSey5M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHy2dKhYzZGupVJro2aKEeSey5M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC30/112AF1AC85AD11ECB36F414DC4F9AE02/13F5D28685B111ECB675B552C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.181.42.0/24
Signature Algorithm: sha256WithRSAEncryption
44:93:d2:51:03:00:df:c1:12:bb:56:85:20:0d:42:17:27:69:
81:39:95:c6:2f:2b:6b:d4:a3:53:11:6e:a8:b2:e9:cc:72:e2:
af:c6:a3:41:fd:03:21:90:bb:3c:a0:c5:5e:03:c9:68:7e:40:
30:11:ca:35:91:26:3f:86:f9:82:e4:a8:14:ed:10:e1:86:dd:
5b:c4:4f:55:5b:00:77:7c:6a:88:8d:24:9b:60:a3:5f:93:ec:
10:87:b6:9a:d1:0e:64:b5:b5:23:89:96:2f:b2:82:51:ed:e7:
35:31:18:f6:23:8f:6c:dc:87:2c:33:f8:7b:c8:0e:35:9a:6a:
ff:44:84:d7:b9:dc:c7:be:7d:a8:03:11:2d:d8:e5:70:7c:54:
c2:4a:98:73:36:89:71:29:a3:f2:64:6e:3c:1f:d9:3a:ed:c7:
ec:73:27:35:1d:2d:ed:df:69:ff:9f:7e:e4:a4:41:f4:04:c1:
9c:f7:8e:73:c9:aa:15:c9:65:1c:42:55:5d:ef:b3:40:dc:9e:
14:a2:c6:4f:2b:04:2e:35:e2:70:3a:0f:32:c3:7c:b2:9b:82:
82:cb:73:46:2a:7e:71:31:a9:bc:6f:f0:e6:99:bc:8e:7d:ea:
2d:3b:60:9f:31:2d:6c:b9:c3:03:a7:0e:42:43:e4:50:a2:79:
b5:7b:d2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:22:32 2026 by rpki-client