
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/4DD5897E501911F1B9231017C2833773.roa
File: 4DD5897E501911F1B9231017C2833773.roa (raw, json)
Hash identifier: 74iwg4T3jS20u81MSENAOAD9vyDefXzwbL5rlNQ4X/0=
Subject key identifier: 4A:7F:48:1E:2D:00:AA:E5:81:3E:E3:56:A3:69:59:CD:E8:BB:75:DA
Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
Certificate serial: 0474
Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/4DD5897E501911F1B9231017C2833773.roa
Signing time: Fri 15 May 2026 04:48:24 +0000
ROA not before: Fri 15 May 2026 04:48:24 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 8126
IP address blocks: 103.91.219.0/24 maxlen: 24
103.95.207.0/24 maxlen: 24
103.101.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl
rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 00:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1140 (0x474)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
Validity
Not Before: May 15 04:48:24 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a06a597-9dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:68:4f:50:ae:ad:5e:80:0f:3f:32:0d:33:95:
ca:02:f6:29:4b:e0:38:80:03:48:db:33:94:2c:af:
2a:5a:9f:d9:e8:b3:7b:5b:fe:42:8e:51:b4:e3:6b:
bb:b2:6b:a0:c0:01:29:9f:ac:0d:c7:a1:92:49:38:
b1:30:55:2c:36:01:60:16:fb:11:f0:61:8a:11:d1:
f9:be:9d:c0:c2:d1:fb:66:82:56:ce:f5:29:4a:1c:
b8:76:8c:a1:bd:8f:50:60:74:50:be:4a:1b:d1:93:
d1:c9:6d:41:a8:f4:f1:53:98:be:e2:ea:2a:73:0b:
3e:51:ab:c4:ff:2f:7d:83:b2:74:db:5d:c9:aa:e2:
4a:0c:fc:12:96:18:40:3c:73:3b:f1:c7:87:d1:a7:
4d:8e:77:2b:4c:62:f9:69:f4:9e:68:ce:42:fc:15:
cb:1b:c4:e8:26:8b:9c:80:8d:cb:44:93:af:11:37:
41:89:a4:36:a3:56:5e:f4:eb:ab:a8:90:2d:cc:87:
95:54:9f:27:55:58:04:6e:b8:53:5a:c9:49:cc:66:
ec:43:4c:b3:85:b9:de:35:5f:d8:8c:62:d8:00:82:
72:e0:b7:d4:1c:4f:bc:f1:66:3f:d1:e2:87:e8:d1:
be:f8:9d:8d:dd:f4:62:cf:89:80:6e:e0:92:bb:23:
da:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7F:48:1E:2D:00:AA:E5:81:3E:E3:56:A3:69:59:CD:E8:BB:75:DA
X509v3 Authority Key Identifier:
keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/4DD5897E501911F1B9231017C2833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.91.219.0/24
103.95.207.0/24
103.101.153.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:a6:19:ca:24:f8:e4:e7:97:c8:04:f4:c8:c3:3b:ef:8e:bd:
0d:8c:8a:7b:a7:2a:1a:2b:3e:59:f1:d7:5e:00:91:d4:14:ed:
8c:4c:a3:f5:5d:ba:2a:3f:0c:10:3d:ce:43:73:16:37:5b:36:
5f:eb:95:69:31:8b:36:3f:ff:90:d8:16:16:af:b1:c3:23:d4:
39:e4:c1:b6:8f:39:94:b0:6e:44:78:37:47:d5:a5:35:ec:63:
21:fa:0d:dd:f1:28:70:5e:0b:c0:0c:a8:84:2d:f3:58:aa:da:
81:75:dd:9a:3d:46:04:b6:83:4a:4a:ee:0d:d1:d7:15:96:18:
b8:ae:4b:53:9e:1f:25:01:22:e2:41:a1:d8:86:4c:5f:b6:0c:
c4:27:1d:c4:21:08:88:ff:f3:3d:01:90:e6:c2:fe:a1:50:f5:
4b:2a:f0:19:2b:cc:d1:d8:ed:b4:41:c9:a1:23:53:e0:54:7a:
f8:8f:b1:b7:fe:5d:d3:f9:97:b2:b9:bd:34:d4:3d:11:4b:7e:
d8:04:47:30:21:6e:a0:ce:9c:dd:88:d2:bb:ab:41:8e:1f:9e:
60:7b:06:9b:29:b2:20:e5:8a:b5:5a:f6:08:12:a7:f2:a2:10:
a1:0a:df:79:de:0a:52:9e:d1:4d:07:20:87:5f:bc:dd:10:23:
df:1a:33:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 15:23:34 2026 by rpki-client