
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/4EC550229F7911F0892F6680C4F9AE02.roa
File: 4EC550229F7911F0892F6680C4F9AE02.roa (raw, json)
Hash identifier: gKh2lmx6ZZYyw96B7i0NN7NG7ZPJA6ncWMPAGGPkE84=
Subject key identifier: 78:3A:46:28:7E:01:BB:A9:61:F4:03:0D:9D:AE:3D:4E:25:0D:26:2F
Certificate issuer: /CN=A91DFD4C/serialNumber=63833A241E3E4959EBA19C701D04887DB4B1FC74
Certificate serial: 6D
Authority key identifier: 63:83:3A:24:1E:3E:49:59:EB:A1:9C:70:1D:04:88:7D:B4:B1:FC:74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/4EC550229F7911F0892F6680C4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:54:27 +0000
ROA not before: Thu 02 Oct 2025 10:19:41 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 133605
IP address blocks: 103.252.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl
rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109 (0x6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFD4C, serialNumber=63833A241E3E4959EBA19C701D04887DB4B1FC74
Validity
Not Before: Oct 2 10:19:41 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a58883-0ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:73:56:f7:c7:b4:df:1c:39:41:2e:3d:6f:17:
7b:1c:5b:79:80:1e:1b:67:dc:69:82:02:67:80:87:
40:40:56:44:fc:15:c6:dc:9f:dc:4d:f7:a8:d3:9a:
d6:ae:d8:a6:ac:19:19:05:23:77:d6:bd:8e:2e:34:
4b:e8:c6:4f:6e:d3:6e:16:d1:cf:d1:06:6d:cd:6f:
14:c4:07:ed:43:6c:c8:0e:9c:7e:b9:e7:03:5e:1f:
ef:e5:03:6c:70:1f:c0:45:43:cf:6b:01:32:1d:47:
9f:79:02:fd:cf:e2:d6:49:da:8d:e4:83:f6:a7:2d:
d0:40:b9:8a:5d:6a:44:b7:6d:9b:28:b9:45:45:25:
cd:df:65:77:b1:a4:79:00:68:5c:72:f3:d5:61:85:
8a:37:15:1a:35:73:ee:1b:a9:96:e8:2b:4b:18:91:
13:4d:1d:e4:ba:2b:72:d6:e2:a8:4d:15:3e:6f:90:
20:26:1f:b0:15:71:03:3c:8c:8d:e0:93:d6:ec:a2:
46:e1:30:b7:33:70:08:db:c5:73:6e:8b:91:98:e4:
1a:ed:1e:ae:20:5b:39:27:84:08:4a:73:e6:84:4c:
a7:4c:2d:97:fd:c3:5f:d7:7f:59:6a:71:0a:93:86:
be:ee:df:7d:d5:26:c1:c2:40:86:65:dc:38:fc:81:
e2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3A:46:28:7E:01:BB:A9:61:F4:03:0D:9D:AE:3D:4E:25:0D:26:2F
X509v3 Authority Key Identifier:
keyid:63:83:3A:24:1E:3E:49:59:EB:A1:9C:70:1D:04:88:7D:B4:B1:FC:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/4EC550229F7911F0892F6680C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.252.127.0/24
Signature Algorithm: sha256WithRSAEncryption
53:cb:ac:bc:81:45:da:b7:d0:2c:52:39:63:09:e0:0b:7e:c2:
0e:68:d3:c3:14:a1:e6:49:a3:c3:c5:d0:ab:5c:a3:35:a8:5b:
cf:19:69:ed:92:b8:80:6d:28:d8:07:fb:cc:6f:a4:26:a6:22:
51:27:4e:d3:8e:9c:a2:8e:3e:d0:94:6f:64:b4:38:56:a2:40:
f5:99:a5:86:d5:ac:79:92:2f:90:11:ce:56:10:6a:ce:97:2f:
6a:5e:f4:f1:40:8a:37:fd:29:8f:69:c7:1e:93:f4:74:55:dc:
c4:bf:9a:37:30:5e:13:59:90:4f:8c:6d:b5:9c:42:74:bb:8f:
a0:93:2f:ff:a1:d3:64:b3:fe:1f:f1:72:06:b7:46:ee:b9:98:
3d:18:05:42:ea:dc:13:64:67:ea:7a:3e:92:18:fd:10:f0:5b:
4d:62:10:33:2e:70:90:40:94:f8:d7:64:20:7a:df:f3:6d:d0:
ce:1c:15:a2:4f:83:c2:b2:45:28:e4:f5:49:37:ab:9d:c5:bf:
dc:c2:9f:46:36:e2:86:71:f7:85:68:a5:d1:76:2a:62:36:d7:
2a:d6:11:9f:85:94:d6:60:09:fb:49:63:fc:09:c8:ec:95:25:
65:3e:49:b1:25:51:3b:0a:4d:9c:ec:c7:93:13:04:43:58:6f:
bb:2d:fd:5c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:47:45 2026 by rpki-client