
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/39EA203238DB11F1AA6C3EA5A2833773.roa
File: 39EA203238DB11F1AA6C3EA5A2833773.roa (raw, json)
Hash identifier: FIOERkFBxjFZZKgJ4C3oRsu/xDofXWARRAIpEemUT/Y=
Subject key identifier: 24:68:4F:22:46:B2:93:CC:02:66:18:C1:A6:6E:4E:88:4E:12:1F:9B
Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Certificate serial: 05EF
Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/39EA203238DB11F1AA6C3EA5A2833773.roa
Signing time: Fri 01 May 2026 04:29:10 +0000
ROA not before: Fri 01 May 2026 04:29:10 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 834
IP address blocks: 103.204.21.0/24 maxlen: 24
103.204.22.0/24 maxlen: 24
103.204.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl
rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:21:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1519 (0x5ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Validity
Not Before: May 1 04:29:10 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69f42c16-df60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:86:56:35:80:0a:96:22:02:31:7d:d6:db:
3f:f1:98:0e:96:5c:60:35:5e:89:9a:28:47:8a:f1:
79:04:6d:56:d7:29:3e:c5:86:56:73:97:de:82:88:
5e:2e:00:48:62:bf:e1:fd:21:26:6e:02:91:1d:7d:
5a:16:57:0b:d9:4a:26:0d:b3:1f:5b:ff:1e:45:13:
9d:06:21:91:e3:8d:f2:15:15:4c:8b:c1:38:ff:57:
58:1c:78:c8:1d:7e:0a:de:53:c3:1d:e8:26:51:da:
cf:3e:7b:a2:d1:0d:c5:fd:17:9a:1b:84:8b:18:49:
0b:13:98:98:fa:6d:6d:f3:8f:d4:f1:b4:d1:68:da:
a0:d8:a7:e3:a1:b7:81:36:92:cb:c0:1d:7c:bb:82:
16:46:96:aa:43:f5:79:a9:e0:48:c4:5c:5b:e0:46:
09:4a:d5:b6:80:40:06:cc:11:23:bf:9c:81:49:1d:
ca:02:8d:7b:7c:6b:db:e6:45:4e:4d:8b:a3:25:51:
fa:18:1d:f8:33:d8:d7:d6:c7:cf:d1:bc:6b:c4:ca:
af:59:cc:eb:ad:20:64:64:af:96:5f:f3:77:fe:49:
8d:e3:93:27:ac:37:f3:94:b9:30:4f:8f:c6:7c:bd:
15:3c:57:40:a5:45:2a:e2:08:59:fb:5b:18:4c:45:
aa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:68:4F:22:46:B2:93:CC:02:66:18:C1:A6:6E:4E:88:4E:12:1F:9B
X509v3 Authority Key Identifier:
keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/39EA203238DB11F1AA6C3EA5A2833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.204.21.0-103.204.23.255
Signature Algorithm: sha256WithRSAEncryption
75:90:44:08:09:50:77:46:1a:dc:07:83:58:28:5c:88:1c:b6:
18:45:ba:47:96:dc:47:5f:db:66:d5:34:37:59:e2:e8:cf:1b:
94:76:12:58:4c:b5:bb:e4:66:c8:6e:b6:ff:02:11:33:4a:c8:
02:4b:87:2d:c0:e3:e2:3f:40:0f:4b:1c:ea:94:1d:01:f8:f6:
43:bd:f6:e3:43:5e:7c:1f:6b:42:51:4c:11:55:85:92:08:6a:
91:af:1c:f3:7e:7e:8c:1b:8b:99:f1:c7:d4:1f:5b:57:57:b9:
c6:4a:fc:5f:70:3d:55:9b:f2:91:65:c4:9f:bc:54:51:b7:46:
ed:61:a0:a9:25:18:55:39:df:37:d5:1e:67:91:4f:7a:47:fe:
c8:e1:1a:c3:a8:ac:96:e4:5c:a0:b3:e9:c7:b2:50:99:16:c3:
bb:be:c4:f5:8e:9a:8b:17:d5:21:4c:7e:ea:0f:72:b2:35:95:
46:5b:67:f5:64:b6:eb:7a:7d:08:60:56:ad:f0:6a:01:aa:31:
b3:b5:a0:35:7d:a9:aa:5d:75:49:26:f9:d7:26:01:4e:6f:a2:
da:f9:2a:39:99:20:93:cb:4b:d7:e6:3e:36:60:07:e4:35:d0:
be:d5:be:b6:45:bb:1c:1c:8f:36:b3:27:6e:c6:64:87:84:3b:
0a:d7:51:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:23:16 2026 by rpki-client