
$ rpki-client -vvf rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/E7DBE2945B6A11EE8C05CA59C4F9AE02.roa
File: E7DBE2945B6A11EE8C05CA59C4F9AE02.roa (raw, json)
Hash identifier: EOojy2+JzC+p+QaVV3QkjR8Q0Zfn9YjNT084DP1KFTs=
Subject key identifier: 98:10:46:DD:8B:A9:C8:E4:B9:3A:23:EF:41:2C:15:43:AB:F1:39:CF
Certificate issuer: /CN=A91374BB/serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9
Certificate serial: 01DE
Authority key identifier: B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/E7DBE2945B6A11EE8C05CA59C4F9AE02.roa
Signing time: Fri 27 Mar 2026 03:37:18 +0000
ROA not before: Fri 27 Mar 2026 03:37:18 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 132170
IP address blocks: 103.6.163.0/24 maxlen: 24
103.26.44.0/24 maxlen: 24
103.26.45.0/24 maxlen: 24
103.26.46.0/24 maxlen: 24
2001:df0:2a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl
rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478 (0x1de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91374BB, serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9
Validity
Not Before: Mar 27 03:37:18 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69c5fb6e-eb5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c6:c8:c4:c9:7e:ed:63:88:44:94:cd:63:57:
a5:90:3b:c3:90:dc:b2:51:c4:74:67:e1:49:d2:a7:
1e:c7:41:29:c6:23:4c:f1:11:80:10:1b:42:1f:97:
90:f4:e2:fa:a4:fc:a3:06:d7:a1:db:78:dd:3f:d3:
e4:6e:09:4d:f1:a5:8d:62:19:f7:5e:fc:8c:94:6f:
b5:53:83:26:06:d1:51:ec:2f:9c:d6:f9:d9:04:7f:
6a:4c:6f:aa:63:57:fe:92:e3:61:b6:02:e9:ad:05:
bc:28:95:79:78:e4:21:60:81:f5:25:44:90:5c:85:
e9:84:9d:c3:59:2d:5c:b2:63:db:41:fb:6c:cc:6e:
f8:8f:d5:b3:ce:78:cf:23:42:3e:1a:f5:9b:88:27:
ac:ae:d3:7a:0d:1b:08:05:07:9e:14:6b:5f:8d:fd:
48:95:62:08:78:83:77:a7:e2:f4:31:cb:ac:32:f7:
36:dd:fe:03:b7:7e:db:9b:3e:04:2c:16:1d:5a:24:
5d:aa:7a:a4:fa:b9:ea:e3:87:b8:e6:a4:60:9c:27:
d6:12:54:37:30:f6:b5:d1:8a:00:6e:45:85:6a:d4:
2e:75:67:df:b8:c6:18:3d:6a:cf:b0:75:ed:06:36:
49:91:d0:21:06:b6:67:83:b5:b6:81:08:c3:f3:82:
7b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:10:46:DD:8B:A9:C8:E4:B9:3A:23:EF:41:2C:15:43:AB:F1:39:CF
X509v3 Authority Key Identifier:
keyid:B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/E7DBE2945B6A11EE8C05CA59C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.6.163.0/24
103.26.44.0-103.26.46.255
IPv6:
2001:df0:2a0::/48
Signature Algorithm: sha256WithRSAEncryption
46:2c:cb:e5:9c:dd:9c:47:51:af:a9:33:c5:2b:2f:27:58:d2:
38:6e:a1:36:ad:55:d2:7a:fa:ca:02:b6:8d:e2:bf:30:dd:51:
7d:1f:a0:86:b6:9f:56:97:24:94:3d:2e:dc:69:e7:79:61:98:
4e:34:de:95:99:af:15:c1:2e:78:47:52:73:61:02:c3:cb:e1:
69:f0:93:78:8e:8c:e4:73:f4:49:d2:3a:18:98:d2:4c:c2:39:
cc:63:32:67:c6:3b:41:85:6b:08:67:7c:f1:08:d9:9b:52:94:
70:d0:b8:a8:3a:63:a5:08:fd:ee:34:c1:ec:6a:1a:fc:bf:1f:
c6:32:eb:79:15:b5:f3:59:17:eb:f7:16:a9:7f:e7:bc:5b:04:
37:fb:3b:2e:3b:87:f7:f5:c3:6e:71:f7:8b:1e:20:4f:22:9a:
b5:51:7e:0e:18:8e:cd:13:c3:14:1f:c3:07:f8:1c:0e:90:8c:
8e:17:73:4b:a5:aa:c1:42:05:b4:86:0a:8a:4f:de:bf:b4:fb:
69:a2:29:1f:5d:1b:a1:20:c9:9d:d4:6d:68:10:7f:6b:66:86:
65:59:64:16:ee:46:97:2e:43:91:af:73:67:89:d0:b8:91:7f:
a4:f5:ad:05:da:0b:0a:76:66:60:6c:64:f3:b8:1e:40:8f:f2:
66:d7:b5:e9
-----BEGIN CERTIFICATE-----
MIIFWzCCBEOgAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzc0QkIxMTAvBgNVBAUTKEIzMTJDMjJGM0QwQjk3QkFBRjMyNzNFNUM2NkI4RjE0
MDIwM0UyRjkwHhcNMjYwMzI3MDMzNzE4WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWM1ZmI2ZS1lYjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmcbIxMl+7WOIRJTNY1elkDvDkNyyUcR0Z+FJ0qcex0EpxiNM8RGAEBtCH5eQ
9OL6pPyjBteh23jdP9PkbglN8aWNYhn3XvyMlG+1U4MmBtFR7C+c1vnZBH9qTG+q
Y1f+kuNhtgLprQW8KJV5eOQhYIH1JUSQXIXphJ3DWS1csmPbQftszG74j9WzznjP
I0I+GvWbiCesrtN6DRsIBQeeFGtfjf1IlWIIeIN3p+L0McusMvc23f4Dt37bmz4E
LBYdWiRdqnqk+rnq44e45qRgnCfWElQ3MPa10YoAbkWFatQudWffuMYYPWrPsHXt
BjZJkdAhBrZng7W2gQjD84J78QIDAQABo4ICfzCCAnswHQYDVR0OBBYEFJgQRt2L
qcjkuToj70EsFUOr8TnPMB8GA1UdIwQYMBaAFLMSwi89C5e6rzJz5cZrjxQCA+L5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzRCQi82NDg1NDJDODVC
NkExMUVFODBEMzZCNTRDNEY5QUUwMi9zeExDTHowTGw3cXZNblBseG11UEZBSUQ0
dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3N4TENMejBMbDdxdk1uUGx4bXVQRkFJRDR2ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mzc0QkIvNjQ4NTQyQzg1QjZBMTFFRTgwRDM2QjU0QzRGOUFFMDIvRTdEQkUyOTQ1
QjZBMTFFRThDMDVDQTU5QzRGOUFFMDIucm9hMD4GCCsGAQUFBwEHAQH/BC8wLTAa
BAIAATAUAwQAZwajMAwDBAJnGiwDBABnGi4wDwQCAAIwCQMHACABDfACoDANBgkq
hkiG9w0BAQsFAAOCAQEARizL5ZzdnEdRr6kzxSsvJ1jSOG6hNq1V0nr6ygK2jeK/
MN1RfR+ghrafVpcklD0u3GnneWGYTjTelZmvFcEueEdSc2ECw8vhafCTeI6M5HP0
SdI6GJjSTMI5zGMyZ8Y7QYVrCGd88QjZm1KUcNC4qDpjpQj97jTB7Goa/L8fxjLr
eRW181kX6/cWqX/nvFsEN/s7LjuH9/XDbnH3ix4gTyKatVF+DhiOzRPDFB/DB/gc
DpCMjhdzS6WqwUIFtIYKik/ev7T7aaIpH10boSDJndRtaBB/a2aGZVlkFu5Gly5D
ka9zZ4nQuJF/pPWtBdoLCnZmYGxk87geQI/yZte16Q==
-----END CERTIFICATE-----
Generated at Mon Apr 6 12:27:05 2026 by rpki-client