
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6622/2E1AF8EE2E6D11F1880B3652A0833773/17A7C8FC2E6E11F19C0350ECA1833773.roa
File: 17A7C8FC2E6E11F19C0350ECA1833773.roa (raw, json)
Hash identifier: i8FETfXq1Y8iZof7Yc6viGSpLSiWQxZNMj2aAauVdfM=
Subject key identifier: 59:A7:90:4E:A4:92:87:12:FE:F8:62:07:EA:B6:7E:C6:E7:FA:D0:41
Certificate issuer: /CN=A91E6622/serialNumber=20D7BF105ED33E4489BBE299CDC1B5EE7EEF4294
Certificate serial: 04
Authority key identifier: 20:D7:BF:10:5E:D3:3E:44:89:BB:E2:99:CD:C1:B5:EE:7E:EF:42:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/INe_EF7TPkSJu-KZzcG17n7vQpQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6622/2E1AF8EE2E6D11F1880B3652A0833773/17A7C8FC2E6E11F19C0350ECA1833773.roa
Signing time: Thu 02 Apr 2026 08:33:26 +0000
ROA not before: Thu 02 Apr 2026 08:33:26 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 133139
IP address blocks: 43.251.44.0/22 maxlen: 24
103.252.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6622/2E1AF8EE2E6D11F1880B3652A0833773/INe_EF7TPkSJu-KZzcG17n7vQpQ.crl
rsync://rpki.apnic.net/member_repository/A91E6622/2E1AF8EE2E6D11F1880B3652A0833773/INe_EF7TPkSJu-KZzcG17n7vQpQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/INe_EF7TPkSJu-KZzcG17n7vQpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 08:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6622, serialNumber=20D7BF105ED33E4489BBE299CDC1B5EE7EEF4294
Validity
Not Before: Apr 2 08:33:26 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69ce29d6-a34c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5d:d1:1c:62:49:26:48:ae:55:d1:7f:5f:a5:
e5:7e:f8:47:66:f0:79:e8:49:69:70:e5:17:0b:88:
4b:8f:4f:a5:00:19:ad:90:0d:9e:c2:c8:f2:72:7f:
62:47:41:8e:76:1d:cc:86:db:b3:4a:5f:98:0c:c7:
d8:16:19:fa:06:de:e7:c2:d2:df:e8:66:81:9d:b3:
ae:09:12:bb:00:a0:f6:b6:62:e1:8f:7d:cc:3a:46:
d7:41:46:56:33:c4:94:cd:a7:c1:62:b4:99:d9:ee:
c5:3b:18:12:0d:2b:ed:59:1e:81:18:f7:e1:54:ec:
df:ea:6f:e3:7e:69:f7:ba:4f:73:1c:78:35:40:68:
fd:4c:20:85:7c:5b:b0:54:f9:76:ae:19:1b:4e:07:
48:b4:4b:a2:ac:d9:82:27:8e:3a:be:ca:87:5b:37:
97:66:3f:b3:0e:fb:12:17:29:b1:30:84:e1:5c:b8:
5f:56:d6:1c:2e:62:42:d4:db:81:e5:28:86:1e:de:
d4:bd:13:f6:79:fc:f4:5d:6b:7d:ae:a4:05:da:bd:
79:79:ea:7f:5c:db:4a:34:40:31:94:84:39:f4:91:
5b:3b:2e:f0:e6:4b:1b:bb:79:3d:24:0a:d6:1a:9e:
0f:08:12:18:38:8e:5e:04:48:b3:98:f9:fc:f6:33:
73:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A7:90:4E:A4:92:87:12:FE:F8:62:07:EA:B6:7E:C6:E7:FA:D0:41
X509v3 Authority Key Identifier:
keyid:20:D7:BF:10:5E:D3:3E:44:89:BB:E2:99:CD:C1:B5:EE:7E:EF:42:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6622/2E1AF8EE2E6D11F1880B3652A0833773/INe_EF7TPkSJu-KZzcG17n7vQpQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/INe_EF7TPkSJu-KZzcG17n7vQpQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6622/2E1AF8EE2E6D11F1880B3652A0833773/17A7C8FC2E6E11F19C0350ECA1833773.roa
sbgp-ipAddrBlock: critical
IPv4:
43.251.44.0/22
103.252.132.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:62:f7:9e:0a:f5:8e:5f:53:74:a8:bc:da:ea:46:04:e6:05:
b5:24:9d:83:c4:a7:9a:67:f7:82:fe:0e:12:66:3a:42:8f:bf:
a7:f0:a1:57:bf:00:bc:ce:85:2b:ae:39:b7:17:86:78:3a:95:
b8:dd:36:fd:1e:5b:c2:1f:be:9d:8b:aa:99:e8:a7:34:82:a8:
2b:c3:81:7b:d1:c2:3a:26:ff:4a:a1:29:18:4d:bf:cd:8e:62:
26:25:c4:3e:51:72:54:25:72:05:fd:87:7b:2a:47:2b:12:07:
79:12:0b:c8:96:ff:29:44:46:6f:54:c7:06:e2:49:8d:87:0a:
f8:83:64:f3:09:cb:e9:a2:ea:9d:44:e3:01:a9:41:8e:4a:29:
d3:4e:cc:02:2b:8c:c1:db:79:18:c3:77:cf:06:29:6f:61:0f:
64:36:15:d0:9b:30:5e:7d:2d:4b:95:f7:f7:de:b4:18:3d:43:
d4:a0:3a:c0:00:b4:38:03:e9:b6:9c:fd:aa:4d:de:b1:36:dc:
2f:cf:ac:6e:f6:92:c4:3a:d5:fc:d9:ed:82:84:be:57:c9:03:
60:10:f2:bb:b3:ab:45:47:40:61:76:2d:3b:36:f1:d4:0c:8c:
cc:95:4b:50:83:b5:4e:a4:5e:41:c4:cb:13:59:f7:4e:01:14:
01:81:09:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 22:22:11 2026 by rpki-client