
$ rpki-client -vvf rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/EE44E774314411EF956C0046C4F9AE02.roa
File: EE44E774314411EF956C0046C4F9AE02.roa (raw, json)
Hash identifier: mSB8uynASz5JULPqU2um7D00gtNkbXdaEHU3YnsuCGU=
Subject key identifier: 90:D5:32:53:96:18:C5:EB:68:6A:16:EC:5B:29:02:2B:4F:F0:10:20
Certificate issuer: /CN=A91229A5/serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA
Certificate serial: 01D8
Authority key identifier: 56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/EE44E774314411EF956C0046C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:04:29 +0000
ROA not before: Sat 07 Jun 2025 04:32:58 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 61414
IP address blocks: 103.93.76.0/22 maxlen: 22
103.93.76.0/24 maxlen: 24
103.93.77.0/24 maxlen: 24
103.93.78.0/24 maxlen: 24
103.93.79.0/24 maxlen: 24
103.225.68.0/23 maxlen: 23
123.253.108.0/22 maxlen: 22
123.253.108.0/24 maxlen: 24
123.253.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl
rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 18 Mar 2026 02:54:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91229A5, serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA
Validity
Not Before: Jun 7 04:32:58 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4395d-03cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1a:e2:40:4c:1d:e8:56:be:aa:c1:0e:77:e3:
fb:f6:08:be:77:00:78:f9:61:ca:09:a7:44:fd:95:
ab:2e:ea:13:f9:f6:e1:e2:6c:6f:e6:4d:97:38:3a:
0d:9a:21:18:35:f2:87:45:17:2b:6c:79:d9:8f:a3:
be:92:6e:a1:93:15:5f:d9:8d:4d:70:68:5e:96:d0:
45:07:91:ef:05:8e:53:d0:af:2f:9f:dc:c4:15:ef:
20:6b:aa:e2:64:a3:fc:99:f2:92:71:45:c2:7e:68:
3f:23:f4:e1:0d:94:67:ef:31:8c:00:4b:be:e9:ea:
4b:3b:61:a8:a6:cf:48:a3:27:aa:d7:ac:57:95:ce:
eb:1b:53:19:70:10:72:5e:4a:fc:13:66:e7:3b:66:
0e:bd:5d:ff:1e:49:59:50:19:ce:b2:6a:58:20:56:
54:12:da:7d:39:8e:e6:75:65:1b:a5:c4:cf:e4:a3:
b3:e3:7c:69:8f:ac:6b:55:a2:56:d1:90:6d:c9:ae:
06:92:75:ac:48:65:23:c4:0e:df:1b:c0:e4:fa:d9:
f5:02:2f:88:a2:32:0b:8f:a1:6c:ba:d8:2b:20:17:
83:0d:97:bb:95:90:f2:1b:4d:1c:87:44:f7:9b:cc:
cd:7a:01:0b:cb:f7:1f:a8:e0:c1:b3:91:f9:c6:50:
20:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D5:32:53:96:18:C5:EB:68:6A:16:EC:5B:29:02:2B:4F:F0:10:20
X509v3 Authority Key Identifier:
keyid:56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/EE44E774314411EF956C0046C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.93.76.0/22
103.225.68.0/23
123.253.108.0/22
Signature Algorithm: sha256WithRSAEncryption
34:ce:7c:36:32:af:31:f6:04:53:50:20:de:98:1a:5d:8a:c6:
70:56:1c:58:f8:96:c6:46:70:a6:4b:e5:9d:d4:45:27:33:a7:
c7:47:a0:57:e9:ff:da:7f:1a:38:89:f8:f9:ff:45:39:de:59:
20:3f:39:48:a0:7f:84:ef:d3:fd:34:6f:63:85:69:96:74:26:
a4:9f:3f:d5:93:0d:4c:c6:11:d6:33:9b:f9:23:09:7f:ce:12:
aa:f1:1f:89:d4:bd:c7:ab:21:27:1f:a4:32:40:ca:a1:b2:b8:
90:1b:d0:17:f1:18:84:a9:d8:2b:7a:22:93:93:0d:57:d3:23:
d6:96:69:eb:81:5f:ff:25:b3:64:03:11:38:b3:95:7e:b2:df:
87:e8:22:e1:fc:d5:71:6b:fa:0b:a4:83:4b:cc:8e:3c:02:11:
fd:25:36:69:64:7e:98:1d:6b:ce:b4:54:9c:77:46:a7:be:43:
8f:96:24:1d:de:fc:3f:cf:7d:8b:94:dc:be:bd:04:d7:0b:46:
d1:1d:e3:d1:41:60:f6:ef:93:29:03:cd:b7:1d:66:3c:0f:ce:
8e:d8:0f:c6:ac:0e:7c:02:08:f8:3a:ed:c6:55:d1:90:89:d8:
38:c1:da:27:5a:03:6c:57:e9:d0:00:c5:c0:be:db:1b:6b:73:
ea:35:32:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 09:34:31 2026 by rpki-client