
$ rpki-client -vvf rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/4AC14C4AC6CB11ECB185E43EC4F9AE02.roa
File: 4AC14C4AC6CB11ECB185E43EC4F9AE02.roa (raw, json)
Hash identifier: 8sYcPsbiw5zP7b8gIQawA14VC0P46MJxFwXY502uCtY=
Subject key identifier: FD:5E:28:DD:3C:5F:1B:3A:39:C7:B2:12:CB:B1:C0:02:9F:5C:F2:15
Certificate issuer: /CN=A91400CC/serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C
Certificate serial: 03C7
Authority key identifier: 27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/4AC14C4AC6CB11ECB185E43EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:25:05 +0000
ROA not before: Sat 11 Oct 2025 03:27:51 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 132742
IP address blocks: 43.248.60.0/22 maxlen: 24
103.39.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl
rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 00:06:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 967 (0x3c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91400CC, serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C
Validity
Not Before: Oct 11 03:27:51 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a44c41-9711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:65:90:27:7f:17:9b:3d:df:90:8f:76:2b:86:
54:8f:db:6c:dd:c9:6c:af:94:be:04:68:06:8b:5b:
a3:aa:ef:7a:ef:22:f6:c7:b4:a2:ea:6d:90:a4:e2:
20:cd:c8:9c:e3:b1:08:cb:84:10:d7:65:44:83:13:
6e:80:11:1e:ec:ec:99:01:e0:fa:f2:9d:34:3d:c7:
b5:67:be:cb:71:9e:08:67:9e:66:75:9a:87:14:c0:
eb:89:6d:0e:ab:f5:d9:75:2c:81:83:64:8d:6a:13:
04:d1:40:19:51:a6:e8:c4:58:ef:78:5c:6c:20:02:
3d:1b:34:aa:84:f0:f2:8c:98:14:be:02:70:c8:6e:
52:64:3a:63:f4:25:cf:db:c1:db:91:89:74:7d:4d:
91:2b:48:d5:60:4d:68:ab:11:93:1f:fa:dd:44:c1:
4b:b2:45:6b:69:48:7a:8c:d0:23:18:fc:c3:83:bd:
23:cd:71:0c:60:66:da:c7:ac:03:1c:91:aa:fd:55:
ce:45:78:ee:e3:58:85:45:45:4d:e4:da:f0:b7:97:
97:c0:a1:f2:8a:8e:6f:84:6b:29:dc:31:f1:85:fd:
1a:fa:36:64:da:89:7b:3c:d5:de:5e:79:37:6e:f5:
f0:09:61:be:f1:63:8c:c6:1b:4d:73:da:02:c4:0a:
c9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5E:28:DD:3C:5F:1B:3A:39:C7:B2:12:CB:B1:C0:02:9F:5C:F2:15
X509v3 Authority Key Identifier:
keyid:27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/4AC14C4AC6CB11ECB185E43EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.248.60.0/22
103.39.148.0/22
Signature Algorithm: sha256WithRSAEncryption
67:d3:8b:6b:23:42:c0:03:de:8d:5a:41:60:a5:3d:eb:d6:ab:
2c:a2:cb:72:c1:42:40:fb:a0:50:78:0b:39:7c:c8:6a:0f:5d:
73:0c:70:6c:71:d9:84:18:9e:28:d9:f2:33:ea:7e:18:c8:b4:
53:62:58:38:51:a8:f1:4c:82:2a:6a:97:ca:96:4d:5a:6c:8f:
87:f1:b2:12:a0:7a:c0:5a:9c:84:28:b9:51:99:ab:cc:08:0f:
67:0e:46:b6:5f:d4:4e:09:be:7d:b4:af:13:be:a9:5b:dd:be:
84:44:c3:6a:a0:a1:35:97:d4:e5:f8:48:a5:75:e0:31:6e:b5:
4e:ab:51:bf:7f:39:6a:5b:c4:e5:1b:9a:9f:e3:8d:fd:bc:d2:
d9:46:f4:98:88:b1:5f:a9:98:6a:81:5f:b0:7d:4a:0e:0c:06:
88:5c:91:1d:64:ec:c9:f2:86:dd:1e:38:e0:e7:a0:f1:3f:90:
73:26:4f:56:5f:0a:c9:b2:57:c7:0f:31:c8:d6:ac:2d:84:c4:
92:6a:98:4f:54:fd:50:18:8e:25:31:66:01:ea:55:b8:e8:3d:
66:50:a3:4f:08:4a:b0:ef:e7:54:01:2d:9d:f4:8a:69:5f:c2:
a3:c3:2e:04:db:05:7c:a8:66:dc:2d:24:82:0b:88:23:a6:33:
9d:08:86:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 22:48:22 2026 by rpki-client