
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/B245BA601C4311F08254DE40C4F9AE02.roa
File: B245BA601C4311F08254DE40C4F9AE02.roa (raw, json)
Hash identifier: dWmVj4jtVJHc4wNWMusSMHmYNjBn61d8/+MaIxcv/eU=
Subject key identifier: 42:33:6B:03:19:BC:73:AC:13:D9:19:85:F6:7C:D0:11:DC:FE:53:12
Certificate issuer: /CN=A91DF856/serialNumber=5F699186A2EBCD45B1FF6A0A4AF60606F3B3D08D
Certificate serial: F2
Authority key identifier: 5F:69:91:86:A2:EB:CD:45:B1:FF:6A:0A:4A:F6:06:06:F3:B3:D0:8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mRhqLrzUWx_2oKSvYGBvOz0I0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/B245BA601C4311F08254DE40C4F9AE02.roa
Signing time: Mon 06 Jul 2026 04:38:57 +0000
ROA not before: Mon 06 Jul 2026 04:38:57 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 140096
IP address blocks: 103.55.4.0/23 maxlen: 24
2400:cca0:2101::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.crl
rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mRhqLrzUWx_2oKSvYGBvOz0I0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:05:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF856, serialNumber=5F699186A2EBCD45B1FF6A0A4AF60606F3B3D08D
Validity
Not Before: Jul 6 04:38:57 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6a4b3161-19d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cb:a4:87:7a:1f:5b:ef:99:b9:3a:a4:a1:38:
c8:46:dc:b7:fc:31:42:5b:b3:04:c2:3b:9b:d7:a6:
ed:d6:37:d5:4f:d8:ae:c0:f9:53:9c:f3:91:2a:96:
af:f3:bb:6b:b5:61:26:eb:92:60:76:f9:0d:be:3b:
7b:82:5b:00:79:f5:62:d9:cc:8b:e4:b6:6f:7c:3e:
9d:40:df:ea:d3:c4:7a:32:2a:a4:95:54:8a:54:1c:
9e:73:db:bd:ab:24:26:16:11:8f:bf:f5:2b:a3:f4:
89:fd:51:1f:76:6c:26:1e:4b:5e:68:2e:28:3f:0b:
83:ab:7b:b0:11:3a:30:af:01:93:f1:d8:95:99:25:
fd:26:91:8a:bf:07:ce:2d:1e:05:31:60:60:23:bd:
8d:97:89:91:75:ff:bf:41:c8:64:08:56:99:b1:29:
9f:8a:49:ca:37:2c:3a:fe:5a:be:71:86:11:94:c0:
81:bd:86:53:c5:76:77:f3:0b:ba:a0:a4:2f:65:ef:
1d:f8:97:b8:28:0c:07:83:b1:e8:55:a9:e4:4d:47:
e5:b3:0f:31:5d:96:a8:0d:9b:ff:63:57:85:bb:3f:
49:99:5d:99:5d:7f:af:e9:cb:7f:54:02:68:56:c1:
fe:a8:fb:44:d7:76:13:a0:a7:e7:ec:5d:e1:30:23:
5a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:33:6B:03:19:BC:73:AC:13:D9:19:85:F6:7C:D0:11:DC:FE:53:12
X509v3 Authority Key Identifier:
keyid:5F:69:91:86:A2:EB:CD:45:B1:FF:6A:0A:4A:F6:06:06:F3:B3:D0:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mRhqLrzUWx_2oKSvYGBvOz0I0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/B245BA601C4311F08254DE40C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.55.4.0/23
IPv6:
2400:cca0:2101::/48
Signature Algorithm: sha256WithRSAEncryption
48:8b:47:40:81:44:1d:b7:b6:03:e1:ed:c1:7e:12:1d:36:f7:
4c:a3:72:3d:33:ed:95:40:2c:90:7b:22:34:0e:b4:ce:6b:45:
37:68:2b:63:2b:80:e6:80:db:06:1b:e2:e6:82:49:c1:b6:f6:
a3:c5:5e:f6:10:7c:9a:cd:5c:0e:77:4d:93:fc:93:6d:cc:9d:
72:ff:ab:2f:35:63:71:16:80:1a:0f:4c:7e:85:e3:03:ee:f0:
24:bd:18:07:37:d5:00:f4:01:e9:6f:7d:ed:b6:fc:c5:82:d8:
59:5e:a0:aa:a8:79:57:6e:10:97:34:67:1d:84:9d:ad:b0:d6:
bf:27:2a:86:f4:7c:8a:f1:96:5d:3b:6d:4f:c7:ef:e7:7f:b1:
76:69:e9:25:27:bd:9b:67:1b:0e:a4:9f:39:62:a3:c5:7f:82:
9e:4a:7a:e6:00:d4:4f:0a:d1:b3:8a:31:69:9c:73:ea:00:fb:
da:22:2d:56:09:53:20:d3:62:ec:9c:24:e7:f1:b7:c9:d9:6b:
c5:61:d0:3c:bb:4c:59:c6:3f:a2:44:5b:ee:2f:5f:27:f4:6e:
d4:08:9d:d1:8d:1e:db:82:f7:10:9d:d9:3f:9b:1c:b2:13:8b:
21:52:c4:45:a3:7f:6c:1d:c2:8e:fb:b6:14:42:2e:16:c0:1e:
d6:6c:ed:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:12:02 2026 by rpki-client