
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/6445C13C2D1511F18C0F846BB3833773.roa
File: 6445C13C2D1511F18C0F846BB3833773.roa (raw, json)
Hash identifier: PLgXnUtV5/qDMTfK+s5CXVumrPmYkILffVNAYNUoLk4=
Subject key identifier: 07:35:50:C6:20:DC:45:9F:36:2A:A6:0D:A7:F7:29:F4:D0:F4:C0:A7
Certificate issuer: /CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
Certificate serial: 022B
Authority key identifier: 96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/6445C13C2D1511F18C0F846BB3833773.roa
Signing time: Tue 05 May 2026 03:28:44 +0000
ROA not before: Tue 05 May 2026 03:28:44 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 132883
IP address blocks: 103.144.241.0/24 maxlen: 24
103.145.190.0/23 maxlen: 23
103.145.190.0/24 maxlen: 24
103.145.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl
rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 555 (0x22b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F20F8, serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
Validity
Not Before: May 5 03:28:44 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69f963ec-544c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8a:15:c4:68:e7:67:71:39:08:bd:69:9f:da:
c6:5b:e3:24:60:15:e4:d8:14:68:f3:a9:7b:10:eb:
c4:c1:59:d0:ba:bc:40:e9:f7:e0:43:d1:25:0e:d0:
58:2b:d3:bf:d1:12:ea:8d:fc:02:b2:34:f6:6c:95:
ea:be:53:dc:2a:b1:e4:22:85:a7:7a:5e:d2:34:a4:
0d:15:8f:16:3b:15:10:5b:33:96:8e:84:49:18:c1:
f2:7e:6c:7b:3e:e8:44:27:90:5f:b6:26:1a:23:62:
01:73:b9:73:37:8b:74:06:be:9a:c2:65:26:99:7b:
6b:d8:83:1b:e6:aa:90:dc:5e:53:37:07:05:2f:2c:
f7:04:12:c0:83:2f:11:e5:2e:2a:a9:f2:5a:cf:2e:
c7:84:56:d5:50:cb:a1:f1:5b:69:29:b7:73:83:ea:
34:58:4c:3b:a5:db:6d:d4:48:0b:cd:da:d6:f3:dc:
4d:1f:b9:eb:12:d4:da:c3:bd:da:80:50:05:e1:09:
bf:73:00:07:55:b0:e5:48:56:52:8d:04:ad:1e:b9:
d9:92:af:cb:6f:3a:fb:1d:a4:62:f0:21:3a:ea:af:
55:a3:de:ad:ed:d4:88:43:57:a1:cd:50:99:12:f2:
d4:21:bd:27:77:4d:1d:1f:0a:6c:61:9d:97:ee:9b:
db:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:35:50:C6:20:DC:45:9F:36:2A:A6:0D:A7:F7:29:F4:D0:F4:C0:A7
X509v3 Authority Key Identifier:
keyid:96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/6445C13C2D1511F18C0F846BB3833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.144.241.0/24
103.145.190.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:ac:e5:13:15:e3:9d:2b:fd:ad:63:b1:75:43:33:82:5b:e2:
25:42:d3:eb:eb:09:0f:b4:fa:65:8a:51:b4:cf:31:30:99:62:
a4:21:ae:43:eb:a8:16:eb:62:97:59:6f:a5:06:27:f5:07:45:
19:53:08:9e:c4:2f:9b:cd:99:88:88:c8:73:19:9c:62:da:35:
e6:ed:e2:0f:d5:17:b2:60:43:1f:fd:6e:3a:45:49:2b:2f:3c:
83:21:2f:17:dd:19:bc:84:e7:28:72:2d:89:46:cc:ac:32:01:
57:ee:46:cc:b0:d4:84:f1:03:60:17:01:81:3a:59:4e:3f:10:
1f:d5:b7:9c:da:b1:61:b6:3e:35:04:d7:f0:ce:6e:4a:62:86:
f1:2a:ac:59:bb:1b:b2:2e:f4:51:0b:23:4f:c6:c5:e8:e2:98:
d1:a9:7d:64:b5:80:20:5f:59:c8:37:e9:93:29:0a:14:f0:25:
83:ac:51:7a:d9:8e:d3:27:67:b1:52:be:53:02:11:94:39:a0:
07:0f:e9:08:e2:8f:c4:5f:25:1e:af:ef:a1:2c:42:84:e5:b2:
e3:65:fb:60:93:74:2c:76:8a:2e:49:58:5e:f8:70:ff:bd:96:
e0:ca:7a:f6:e4:c7:06:7f:ff:7b:e1:ec:8a:0f:74:e1:26:40:
26:ff:c2:a8
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjIwRjgxMTAvBgNVBAUTKDk2MzNGNjJGRkIyMTg2NzZFQkM5M0YxQzM3Njk2NDlD
MEM1RDg0REYwHhcNMjYwNTA1MDMyODQ0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWY5NjNlYy01NDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxYoVxGjnZ3E5CL1pn9rGW+MkYBXk2BRo86l7EOvEwVnQurxA6ffgQ9ElDtBY
K9O/0RLqjfwCsjT2bJXqvlPcKrHkIoWnel7SNKQNFY8WOxUQWzOWjoRJGMHyfmx7
PuhEJ5BftiYaI2IBc7lzN4t0Br6awmUmmXtr2IMb5qqQ3F5TNwcFLyz3BBLAgy8R
5S4qqfJazy7HhFbVUMuh8VtpKbdzg+o0WEw7pdtt1EgLzdrW89xNH7nrEtTaw73a
gFAF4Qm/cwAHVbDlSFZSjQStHrnZkq/Lbzr7HaRi8CE66q9Vo96t7dSIQ1ehzVCZ
EvLUIb0nd00dHwpsYZ2X7pvbjwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFAc1UMYg
3EWfNiqmDaf3KfTQ9MCnMB8GA1UdIwQYMBaAFJYz9i/7IYZ268k/HDdpZJwMXYTf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjBGOC9CMDZGQUUyRTE5
N0MxMUVFQkQyMUJCNENDNEY5QUUwMi9salAyTF9zaGhuYnJ5VDhjTjJsa25BeGRo
TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xqUDJMX3NoaG5icnlUOGNOMmxrbkF4ZGhOOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjIwRjgvQjA2RkFFMkUxOTdDMTFFRUJEMjFCQjRDQzRGOUFFMDIvNjQ0NUMxM0My
RDE1MTFGMThDMEY4NDZCQjM4MzM3NzMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ5DxAwQBZ5G+MA0GCSqGSIb3DQEBCwUAA4IBAQDIrOUTFeOdK/2t
Y7F1QzOCW+IlQtPr6wkPtPplilG0zzEwmWKkIa5D66gW62KXWW+lBif1B0UZUwie
xC+bzZmIiMhzGZxi2jXm7eIP1ReyYEMf/W46RUkrLzyDIS8X3Rm8hOcoci2JRsys
MgFX7kbMsNSE8QNgFwGBOllOPxAf1bec2rFhtj41BNfwzm5KYobxKqxZuxuyLvRR
CyNPxsXo4pjRqX1ktYAgX1nIN+mTKQoU8CWDrFF62Y7TJ2exUr5TAhGUOaAHD+kI
4o/EXyUer++hLEKE5bLjZftgk3QsdoouSVhe+HD/vZbgynr25McGf/974eyKD3Th
JkAm/8Ko
-----END CERTIFICATE-----
Generated at Wed May 13 07:10:58 2026 by rpki-client