
$ rpki-client -vvf rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/46BCC40E4F7E11F190CC27DCCD833773.roa
File: 46BCC40E4F7E11F190CC27DCCD833773.roa (raw, json)
Hash identifier: NrcbhAN9vhspenj+63KwCURkbfgQlmMQRjoTCvF/mlo=
Subject key identifier: 8F:CB:26:A5:ED:E9:DC:45:8E:A2:2A:48:7C:D5:06:E7:1F:12:EA:41
Certificate issuer: /CN=A91547E4/serialNumber=D935ECF799131BEC2438DA9DE82B6858963C705C
Certificate serial: 62
Authority key identifier: D9:35:EC:F7:99:13:1B:EC:24:38:DA:9D:E8:2B:68:58:96:3C:70:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/46BCC40E4F7E11F190CC27DCCD833773.roa
Signing time: Thu 14 May 2026 10:18:40 +0000
ROA not before: Thu 14 May 2026 10:18:40 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 131460
IP address blocks: 103.4.156.0/24 maxlen: 24
103.4.157.0/24 maxlen: 24
103.4.158.0/24 maxlen: 24
103.4.159.0/24 maxlen: 24
123.242.200.0/24 maxlen: 24
123.242.201.0/24 maxlen: 24
123.242.202.0/24 maxlen: 24
123.242.203.0/24 maxlen: 24
123.242.204.0/24 maxlen: 24
123.242.205.0/24 maxlen: 24
123.242.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.crl
rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 08:13:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91547E4, serialNumber=D935ECF799131BEC2438DA9DE82B6858963C705C
Validity
Not Before: May 14 10:18:40 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=6a05a180-10b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:08:cc:8e:d2:75:ce:29:b0:6e:8a:4c:60:12:
4a:d1:d8:4d:88:81:bc:32:9f:81:90:f2:cc:d5:5c:
ec:1a:bc:54:12:4c:ab:ee:fe:e5:0d:25:25:85:9e:
25:f3:f3:48:a7:d6:76:c7:9a:e3:18:cd:4c:d4:df:
51:eb:6f:9f:8d:ef:b1:c4:89:94:01:eb:e2:a5:5a:
52:4e:b3:59:99:d3:90:de:d1:28:bd:c8:66:b8:49:
47:e2:ca:4b:cb:65:00:a9:c5:69:16:7c:fe:be:6d:
ea:b8:47:93:1f:2a:c6:05:da:10:d0:5d:65:18:6c:
65:cc:6e:12:f0:0b:4b:89:dc:24:dd:24:2a:24:14:
29:0d:08:98:d0:e6:aa:f2:eb:24:01:e5:e5:f3:fa:
a1:1e:e2:7b:2f:6b:60:aa:39:fb:50:69:73:51:e9:
a3:7d:27:2f:99:41:9a:bf:cd:3a:9e:3a:69:9b:3b:
36:1e:64:ea:5f:8e:39:74:25:31:0c:30:b0:c9:42:
2c:2d:19:60:70:b2:95:d7:04:bc:3b:35:87:2a:23:
66:94:c7:c0:68:5e:f7:d5:29:88:a6:05:ff:1d:82:
ea:28:a9:f2:00:e5:01:2c:24:13:90:dc:98:79:22:
8f:34:20:29:ad:a5:d1:eb:c3:74:0c:b2:3f:be:2c:
de:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CB:26:A5:ED:E9:DC:45:8E:A2:2A:48:7C:D5:06:E7:1F:12:EA:41
X509v3 Authority Key Identifier:
keyid:D9:35:EC:F7:99:13:1B:EC:24:38:DA:9D:E8:2B:68:58:96:3C:70:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/46BCC40E4F7E11F190CC27DCCD833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.4.156.0/22
123.242.200.0-123.242.206.255
Signature Algorithm: sha256WithRSAEncryption
32:88:27:c0:9d:a4:d7:08:ec:7d:d7:40:57:0a:8a:d6:4f:11:
ca:a6:7c:31:5e:fd:fa:6c:0c:3b:f9:e5:59:72:36:58:24:41:
f1:1a:a7:f6:b2:ed:2b:2d:fb:87:a9:2c:43:94:79:67:24:9c:
98:ea:0f:72:37:6c:c3:79:0f:cf:38:74:bf:41:42:f7:8d:06:
ea:e8:05:43:62:58:04:17:6c:87:f1:07:5a:a4:c3:0f:ec:35:
b3:dd:08:5c:2d:b4:88:63:e5:88:8e:58:8f:d8:d8:00:63:16:
81:38:b1:1f:86:db:a1:b8:86:5f:f6:c1:33:94:ed:93:ad:f1:
f1:af:4f:e7:8f:b8:7c:3a:76:c2:d0:9a:8a:20:14:67:52:37:
26:e9:77:02:19:c2:86:3b:7a:4b:e6:ed:3a:07:70:58:95:e0:
77:58:e6:dc:a0:37:4f:01:53:ad:42:fd:59:25:c0:89:5d:10:
60:77:87:4e:99:03:f2:8b:7c:8e:2e:d2:c6:f5:59:fe:f6:e1:
f9:54:be:89:c7:56:14:80:02:fb:01:7c:3a:12:e6:10:a1:1a:
5e:cd:ac:08:74:e4:a4:7c:01:d6:ac:18:fd:51:cd:11:a5:58:
57:c7:2a:e0:c8:8a:f4:89:0b:59:aa:2f:ac:45:83:30:a8:23:
2f:81:84:e7
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
NDdFNDExMC8GA1UEBRMoRDkzNUVDRjc5OTEzMUJFQzI0MzhEQTlERTgyQjY4NTg5
NjNDNzA1QzAeFw0yNjA1MTQxMDE4NDBaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhMDVhMTgwLTEwYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHCMyO0nXOKbBuikxgEkrR2E2Igbwyn4GQ8szVXOwavFQSTKvu/uUNJSWFniXz
80in1nbHmuMYzUzU31Hrb5+N77HEiZQB6+KlWlJOs1mZ05De0Si9yGa4SUfiykvL
ZQCpxWkWfP6+beq4R5MfKsYF2hDQXWUYbGXMbhLwC0uJ3CTdJCokFCkNCJjQ5qry
6yQB5eXz+qEe4nsva2CqOftQaXNR6aN9Jy+ZQZq/zTqeOmmbOzYeZOpfjjl0JTEM
MLDJQiwtGWBwspXXBLw7NYcqI2aUx8BoXvfVKYimBf8dguooqfIA5QEsJBOQ3Jh5
Io80ICmtpdHrw3QMsj++LN6rAgMBAAGjggJuMIICajAdBgNVHQ4EFgQUj8smpe3p
3EWOoipIfNUG5x8S6kEwHwYDVR0jBBgwFoAU2TXs95kTG+wkONqd6CtoWJY8cFww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0N0U0LzAyMzJFNTQ4Q0I3
MTExRjBBNUFERUQyMkM0RjlBRTAyLzJUWHM5NWtURy13a09OcWQ2Q3RvV0pZOGNG
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMlRYczk1a1RHLXdrT05xZDZDdG9XSlk4Y0Z3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDdFNC8wMjMyRTU0OENCNzExMUYwQTVBREVEMjJDNEY5QUUwMi80NkJDQzQwRTRG
N0UxMUYxOTBDQzI3RENDRDgzMzc3My5yb2EwLQYIKwYBBQUHAQcBAf8EHjAcMBoE
AgABMBQDBAJnBJwwDAMEA3vyyAMEAHvyzjANBgkqhkiG9w0BAQsFAAOCAQEAMogn
wJ2k1wjsfddAVwqK1k8RyqZ8MV79+mwMO/nlWXI2WCRB8Rqn9rLtKy37h6ksQ5R5
ZyScmOoPcjdsw3kPzzh0v0FC940G6ugFQ2JYBBdsh/EHWqTDD+w1s90IXC20iGPl
iI5Yj9jYAGMWgTixH4bbobiGX/bBM5Ttk63x8a9P54+4fDp2wtCaiiAUZ1I3Jul3
AhnChjt6S+btOgdwWJXgd1jm3KA3TwFTrUL9WSXAiV0QYHeHTpkD8ot8ji7SxvVZ
/vbh+VS+icdWFIAC+wF8OhLmEKEaXs2sCHTkpHwB1qwY/VHNEaVYV8cq4MiK9IkL
WaovrEWDMKgjL4GE5w==
-----END CERTIFICATE-----
Generated at Thu May 21 11:12:07 2026 by rpki-client