
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/44D508E43C8311ECA86D031EC4F9AE02.roa
File: 44D508E43C8311ECA86D031EC4F9AE02.roa (raw, json)
Hash identifier: rZFImRO/Vy8e5yykJWKF1dr0wOjqLGabp1PeBFJ1rpQ=
Subject key identifier: 52:FE:EC:F4:24:56:1C:F6:CE:CC:2A:A4:AD:06:EF:B0:25:30:A2:81
Certificate issuer: /CN=A91CA559/serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E
Certificate serial: 053B
Authority key identifier: 21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/44D508E43C8311ECA86D031EC4F9AE02.roa
Signing time: Thu 05 Feb 2026 09:23:58 +0000
ROA not before: Thu 05 Feb 2026 09:23:58 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 45753
IP address blocks: 103.147.224.0/23 maxlen: 24
103.231.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl
rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 22:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1339 (0x53b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA559, serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E
Validity
Not Before: Feb 5 09:23:58 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=698461ae-4c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ba:0e:5d:46:ee:15:6c:41:45:32:ff:6e:20:
2d:aa:e7:92:a1:df:b4:15:b7:e6:ab:3c:0a:41:1d:
66:f4:21:f1:af:c7:93:00:fa:4f:4d:4e:42:dd:7a:
43:c2:d0:1a:5e:ec:50:46:de:e9:ab:87:a9:26:b7:
47:cf:b1:21:3f:6b:3f:b1:bb:6e:43:11:a6:e1:ac:
44:c8:91:ad:7d:17:69:00:a2:a4:e6:b3:3e:a4:ad:
6f:28:9e:f5:21:ae:3f:11:b5:35:61:f4:72:fa:cc:
d5:32:a2:c6:f5:3d:4b:f9:da:0c:c8:ef:36:09:2b:
53:99:ac:5c:d8:32:e9:fe:3d:ae:6b:b4:32:f3:60:
a8:53:93:08:17:e1:da:ad:ef:16:fa:29:41:86:c4:
05:86:87:32:36:72:50:d8:02:e5:65:23:71:6b:a3:
c4:23:b6:a3:04:d5:67:c0:bb:1a:e8:2d:ab:5d:22:
4a:f0:64:7c:3b:b9:e6:b3:e4:44:23:08:70:e0:39:
b8:48:76:6a:fb:9a:b1:af:46:05:3e:e2:c4:11:d6:
2f:5b:85:f6:00:58:97:1d:74:11:67:66:ce:9d:26:
13:ca:55:e5:e5:a2:45:c0:e7:38:b8:e5:bc:ca:7b:
87:f6:e0:6d:16:8e:7a:72:03:c2:12:43:4d:0e:7b:
f1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FE:EC:F4:24:56:1C:F6:CE:CC:2A:A4:AD:06:EF:B0:25:30:A2:81
X509v3 Authority Key Identifier:
keyid:21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/44D508E43C8311ECA86D031EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.147.224.0/23
103.231.172.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:f6:33:65:dc:a5:46:44:c6:2e:b3:9e:f8:73:c5:97:66:3c:
68:35:12:ab:cd:fd:0f:f5:34:66:42:bf:8b:b1:f3:af:c9:2c:
02:ce:35:a5:f9:a5:fc:36:5e:1f:84:bb:df:73:50:68:90:39:
17:21:17:e1:78:94:76:e2:38:82:33:90:30:df:19:d4:b9:60:
5a:5e:04:26:b5:d1:7b:fd:e1:4c:27:95:cc:9a:4d:14:6f:17:
46:75:7d:89:fb:f8:8d:8f:8a:a0:6c:24:b9:d7:72:a4:8b:ca:
04:19:69:1c:a0:18:18:3a:6a:89:7b:c5:9e:9d:47:d3:12:52:
51:ee:99:92:3d:e0:1b:65:4e:c3:ac:48:1e:71:05:ad:fa:22:
8f:19:f7:da:9a:2a:a6:6d:84:d2:29:95:93:dd:a9:4c:07:82:
a9:72:b9:68:46:e7:1d:cf:88:01:b1:a0:20:58:d2:e4:d9:d5:
6c:7f:93:d5:1a:ff:8f:cd:73:75:ff:2f:20:5a:90:9c:86:24:
12:f5:4e:c8:6e:d4:cc:e4:11:9b:1c:d3:eb:08:45:80:13:20:
83:99:2d:a1:08:cb:99:17:25:de:e5:21:cd:59:90:c1:e1:49:
b1:5c:74:b1:33:c8:95:d4:2c:90:84:fe:c4:41:d6:34:07:1f:
5e:45:d6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:27:02 2026 by rpki-client