
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/E2348176D54D11EF8A899250C4F9AE02.roa
File: E2348176D54D11EF8A899250C4F9AE02.roa (raw, json)
Hash identifier: l+tlg5fl86zL/WpBpCr30io2JIcMqmsBmDi72wmU3rE=
Subject key identifier: 4B:D9:C4:4E:43:3A:67:72:AE:4F:F9:15:20:C7:5E:7A:DB:E9:37:35
Certificate issuer: /CN=A91716DE/serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7
Certificate serial: 0513
Authority key identifier: 4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/E2348176D54D11EF8A899250C4F9AE02.roa
Signing time: Sat 10 Oct 2026 23:48:17 +0000
ROA not before: Sat 10 Oct 2026 23:48:17 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 153494
IP address blocks: 43.243.44.0/22 maxlen: 24
103.38.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl
rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 23:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1299 (0x513)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91716DE, serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7
Validity
Not Before: Oct 10 23:48:17 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6acacec1-47a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:da:11:92:7f:67:ad:00:90:c8:ea:16:69:3a:
b8:e7:e3:54:6a:ca:f5:6d:48:78:3b:1f:28:23:8f:
b3:ac:25:11:da:de:2e:f3:54:9a:f6:34:35:2a:01:
98:08:9e:d1:17:de:cb:da:fe:bb:6b:22:3d:92:26:
a5:c6:4a:6a:99:4a:4f:02:28:7e:eb:9e:cc:34:e5:
2b:86:1a:ab:d9:b3:6b:8b:36:b3:a1:ab:5f:8f:67:
ec:a3:99:de:19:ed:79:1b:27:91:e3:a5:28:e3:f2:
36:8f:90:70:15:6c:54:29:32:2e:00:f8:c1:50:e1:
13:22:17:bb:7a:c6:04:a9:2f:0a:23:b2:cd:6b:cc:
b9:53:1f:81:a4:9f:d5:fc:85:13:10:49:3c:22:e6:
cc:8c:90:50:89:74:b7:4b:e1:b0:22:88:9a:a4:59:
a5:7e:0b:b0:31:b4:22:36:a0:71:4e:4b:0c:e6:64:
15:cf:77:e0:ee:55:4f:1d:bb:80:91:29:be:d2:51:
cc:07:28:c4:05:8a:d4:aa:18:1c:83:55:08:1a:25:
d4:06:65:90:a6:d0:8b:59:de:aa:96:9b:1f:2f:a6:
93:7f:19:2b:05:f6:4e:85:63:15:1c:2a:0a:fd:39:
41:7e:42:b7:ca:9a:73:99:81:b0:3a:f9:9d:b4:e1:
2c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D9:C4:4E:43:3A:67:72:AE:4F:F9:15:20:C7:5E:7A:DB:E9:37:35
X509v3 Authority Key Identifier:
keyid:4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/E2348176D54D11EF8A899250C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.243.44.0/22
103.38.156.0/22
Signature Algorithm: sha256WithRSAEncryption
08:fd:f3:83:90:ae:2d:a2:1f:19:ed:43:0f:5c:2a:3a:8e:34:
f2:48:70:c3:26:fd:bb:73:bd:8e:cb:77:5c:ff:56:75:d0:61:
6a:d8:97:43:a7:15:60:c2:ef:e9:4c:8f:67:67:0f:92:45:22:
eb:08:79:df:da:34:ab:20:1e:2e:f9:cb:70:76:19:7e:e1:5d:
d5:0e:5d:62:f8:d8:b9:e9:4f:62:af:50:23:c0:bf:06:bc:b2:
76:1b:ed:03:96:ff:5f:6f:ea:af:a8:15:ed:a7:03:40:98:20:
b6:fc:c6:3a:dd:b0:ce:d0:62:2f:b6:82:ae:19:33:52:01:ec:
cd:1f:73:98:1a:e9:05:e4:28:c1:0e:6f:16:54:a7:f0:11:bd:
27:70:61:7d:e5:a6:35:84:be:e6:0b:5e:8f:92:83:82:1f:1d:
79:04:80:13:0e:3a:49:c4:ea:09:a1:f5:43:e7:30:e8:37:77:
6e:d0:0d:25:43:17:5f:8f:42:64:3b:97:06:23:39:dd:cf:c0:
58:82:55:eb:72:47:ae:76:65:9b:f1:7b:1f:55:a8:f4:9d:53:
41:c6:74:6b:1c:f6:d0:7f:76:c4:92:6b:ad:ec:04:26:97:2d:
fd:f6:13:2e:4a:2f:d1:0b:ef:bf:15:c3:82:bf:31:23:d2:a2:
90:c0:27:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:42:57 2026 by rpki-client