
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/4F7AD592169311EB89C20F1DC4F9AE02.roa
File: 4F7AD592169311EB89C20F1DC4F9AE02.roa (raw, json)
Hash identifier: UDUMRu2pdSi4EWa916F5NlabyEI2ZDnijsrefio3S+s=
Subject key identifier: B4:88:29:B0:F8:32:6E:AA:11:92:0E:FE:29:0E:5B:CC:7D:B0:92:8A
Certificate issuer: /CN=A91E77A1/serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A
Certificate serial: 0823
Authority key identifier: B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/4F7AD592169311EB89C20F1DC4F9AE02.roa
Signing time: Tue 31 Mar 2026 21:26:55 +0000
ROA not before: Tue 31 Mar 2026 21:26:55 +0000
ROA not after: Sat 01 Aug 2026 00:00:00 +0000
asID: 136986
IP address blocks: 103.149.39.0/24 maxlen: 24
103.162.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl
rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:52:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2083 (0x823)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E77A1, serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A
Validity
Not Before: Mar 31 21:26:55 2026 GMT
Not After : Aug 1 00:00:00 2026 GMT
Subject: CN=69cc3c1f-549f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7c:18:1b:4a:5c:80:f8:16:c9:a9:81:41:dc:
70:47:ff:4a:52:4b:86:99:79:b1:f0:2d:c4:b9:09:
11:1a:e4:60:f1:1e:f5:ac:9b:92:c1:ff:0d:ad:85:
31:d7:bc:a7:b3:16:ff:d8:3e:f2:bc:aa:57:9f:d3:
ad:90:3e:ff:8c:b4:3d:d5:99:ea:64:0b:cb:4f:b3:
67:a7:48:3f:e0:a9:c8:34:df:a3:d2:43:c3:35:8b:
65:02:32:76:08:6f:aa:d5:a4:21:fa:f2:f2:8e:24:
2a:48:e0:91:aa:f2:bc:74:89:ae:97:7e:fa:d3:99:
e0:20:33:a1:f0:bd:b1:b6:3c:22:30:4b:60:d9:78:
a3:36:30:a0:ed:49:c5:58:e5:9e:f0:4f:f6:36:49:
0b:a5:7a:ea:ab:3f:83:cf:29:50:6f:2a:10:07:af:
71:92:72:9f:d7:6e:97:8f:11:28:07:e1:4d:3d:79:
3a:da:99:06:55:ce:b1:c0:20:32:78:c7:35:10:bd:
9b:ff:9a:1d:44:16:50:6e:60:87:93:4d:91:2a:71:
d5:5e:9e:ba:2e:54:98:5c:2b:90:8a:97:44:3d:6b:
bb:32:f8:e6:5e:12:89:f4:5d:65:68:27:f7:90:c6:
bd:bc:81:ca:d0:0a:b3:8c:de:54:a7:2a:a4:52:ec:
ba:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:88:29:B0:F8:32:6E:AA:11:92:0E:FE:29:0E:5B:CC:7D:B0:92:8A
X509v3 Authority Key Identifier:
keyid:B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/4F7AD592169311EB89C20F1DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.149.39.0/24
103.162.126.0/24
Signature Algorithm: sha256WithRSAEncryption
25:1b:13:1f:2c:32:b2:9f:95:18:a9:1d:b3:e1:26:8e:b6:e7:
c9:e0:69:7f:f8:5f:ec:0c:62:dc:ae:23:03:9c:4f:bc:5f:49:
05:62:4a:6c:51:90:f1:14:40:dc:16:43:b5:92:9f:3a:89:bd:
b2:5b:67:6e:ef:3f:18:56:12:fc:b0:0e:7e:42:f4:47:f0:fa:
7b:c3:93:d6:e8:44:63:22:79:8f:a1:01:c6:c9:27:6f:77:69:
a8:05:a3:16:0d:b4:5d:5b:ea:c7:b6:26:c1:11:6e:a6:e4:25:
2b:84:ae:23:09:32:92:85:dd:2c:b8:3a:02:d3:05:b0:64:f2:
c2:b3:54:fb:01:cb:b6:71:a5:e4:fd:7a:ca:5b:dc:ee:4b:8d:
13:25:19:11:4f:2f:bc:1c:16:e0:9b:bf:57:44:49:17:54:06:
c9:fc:8a:42:db:a8:c1:2a:08:ed:b9:6e:27:49:05:22:10:fa:
0d:9b:b1:22:37:f3:21:d2:dc:db:55:0c:31:50:90:3e:ef:95:
a1:70:18:ff:47:69:ff:33:f2:98:a1:eb:17:c2:a7:44:93:44:
79:70:79:a7:09:a0:72:56:08:1f:54:e7:d3:2f:97:1b:5d:ee:
bc:74:09:9d:b7:1f:56:76:80:70:c4:c2:74:ac:20:63:0e:f3:
6d:73:d8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 23:50:54 2026 by rpki-client