
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/E75FB4F0CE4A11EE95C15E20C4F9AE02.roa
File: E75FB4F0CE4A11EE95C15E20C4F9AE02.roa (raw, json)
Hash identifier: 6OIjEweH0CUcGAd//Ji/inFtGoYXDBPKORKBEvvBVeg=
Subject key identifier: 16:EC:E5:77:DB:66:F2:45:FE:21:29:32:91:44:B1:76:66:A3:A0:19
Certificate issuer: /CN=A91A1CAA/serialNumber=617F054E3CE451E0C3E7F446DD09F7864652B656
Certificate serial: 0198
Authority key identifier: 61:7F:05:4E:3C:E4:51:E0:C3:E7:F4:46:DD:09:F7:86:46:52:B6:56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YX8FTjzkUeDD5_RG3Qn3hkZStlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/E75FB4F0CE4A11EE95C15E20C4F9AE02.roa
Signing time: Fri 03 Apr 2026 04:38:08 +0000
ROA not before: Fri 03 Apr 2026 04:38:08 +0000
ROA not after: Sat 01 Aug 2026 00:00:00 +0000
asID: 30402
IP address blocks: 103.147.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/YX8FTjzkUeDD5_RG3Qn3hkZStlY.crl
rsync://rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/YX8FTjzkUeDD5_RG3Qn3hkZStlY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YX8FTjzkUeDD5_RG3Qn3hkZStlY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:51:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408 (0x198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1CAA, serialNumber=617F054E3CE451E0C3E7F446DD09F7864652B656
Validity
Not Before: Apr 3 04:38:08 2026 GMT
Not After : Aug 1 00:00:00 2026 GMT
Subject: CN=69cf4430-0731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:93:ac:cf:98:e6:3d:de:98:fb:1d:86:28:6c:
15:2f:24:66:0a:9d:48:41:2b:1e:30:b3:ec:56:c2:
a4:3f:c1:e1:68:b1:42:ba:65:05:db:25:0c:e0:02:
42:b7:56:61:ea:f5:17:17:f3:da:fe:29:4c:cd:40:
c1:bc:03:8c:0b:9e:95:de:0d:e2:c5:05:95:27:5e:
f5:54:24:c0:e6:c7:d9:9d:b4:77:dc:14:24:8f:68:
d9:e4:0f:0f:74:00:6c:28:1a:26:68:64:35:fc:2b:
76:b1:76:9c:be:68:8a:15:74:7b:7b:47:02:83:4e:
f4:80:1c:fb:69:a0:0a:63:b3:79:0f:fa:a2:79:01:
64:81:fd:41:67:b8:22:66:7e:b1:df:f6:85:8e:dd:
78:81:d0:33:24:57:55:b7:5a:82:a9:45:69:47:e2:
ba:2a:21:6d:5a:01:33:ce:e1:bb:cc:7f:63:00:ba:
99:44:67:79:87:8b:83:68:9d:3a:f6:40:ad:ab:9a:
aa:3b:17:0b:c7:fa:1b:c7:df:3a:5b:e3:8d:86:b5:
81:38:a9:41:37:5a:8d:c4:81:10:6f:89:2e:ce:04:
c2:47:24:2f:2a:aa:c5:4d:9e:8a:1d:4d:1c:34:b6:
4e:6c:02:9e:c7:e6:64:84:89:0e:a7:2e:ef:a8:6c:
38:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EC:E5:77:DB:66:F2:45:FE:21:29:32:91:44:B1:76:66:A3:A0:19
X509v3 Authority Key Identifier:
keyid:61:7F:05:4E:3C:E4:51:E0:C3:E7:F4:46:DD:09:F7:86:46:52:B6:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/YX8FTjzkUeDD5_RG3Qn3hkZStlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YX8FTjzkUeDD5_RG3Qn3hkZStlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/E75FB4F0CE4A11EE95C15E20C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.147.45.0/24
Signature Algorithm: sha256WithRSAEncryption
77:a9:7e:32:86:cd:08:d5:15:7c:d8:9c:8c:b5:b2:d7:d7:15:
bd:6d:4e:d8:c0:d9:3f:dc:69:5b:3d:33:48:6b:88:01:00:a0:
e7:ff:5a:1e:6c:3f:53:3a:0d:c7:cb:d1:f9:1f:c0:05:b1:ea:
3e:8c:0e:25:cd:1b:fe:7d:a2:43:8c:13:96:ef:2f:7b:d0:7c:
bb:e9:ea:5d:e0:11:e7:a7:83:86:59:48:25:4e:61:43:ca:ac:
fb:29:04:e1:58:d1:a5:29:e6:56:01:8f:64:59:3d:59:da:3d:
85:d3:52:9c:21:10:56:37:9d:54:ab:26:77:4a:29:aa:13:7d:
ab:3c:a2:a5:9a:fa:d2:fa:58:7d:bc:a5:79:a8:2d:aa:6e:05:
23:b5:2a:f5:ac:2d:b5:9a:e8:c9:a2:3e:a3:7e:ca:70:36:31:
d3:7e:d8:86:33:d2:c2:98:77:fc:05:60:52:d9:cc:f6:8d:0d:
d5:a9:1f:9b:5f:0a:2c:84:ab:db:cf:f8:47:c8:8b:72:fc:84:
97:00:4c:74:29:c0:23:87:e4:48:35:d9:04:04:c0:6b:a8:50:
8d:cf:86:a2:6a:b4:19:a6:32:c3:39:a4:cd:73:3c:51:ec:67:
ee:07:f1:e5:48:ca:8d:51:1b:b3:e4:cd:41:12:22:ba:49:ab:
12:da:36:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:55:23 2026 by rpki-client