
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/47A21580B6CC11EC98672826C4F9AE02.roa
File: 47A21580B6CC11EC98672826C4F9AE02.roa (raw, json)
Hash identifier: wtG9zcw24gOM5B08rJZr4FcF3LYoXdfgSkCeRx0p6Uo=
Subject key identifier: 79:E8:EC:8D:B3:22:DD:B1:B9:17:6C:08:F4:E9:05:FA:6E:4B:C1:F6
Certificate issuer: /CN=A91A445C/serialNumber=C0F7D8D6D54163765FF6F3E2FB337FCFE1507219
Certificate serial: 30D7
Authority key identifier: C0:F7:D8:D6:D5:41:63:76:5F:F6:F3:E2:FB:33:7F:CF:E1:50:72:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/47A21580B6CC11EC98672826C4F9AE02.roa
Signing time: Wed 02 Sep 2026 16:22:34 +0000
ROA not before: Wed 02 Sep 2026 16:22:34 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 133382
IP address blocks: 103.79.108.0/24 maxlen: 24
103.79.109.0/24 maxlen: 24
103.241.6.0/24 maxlen: 24
103.241.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl
rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12503 (0x30d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A445C, serialNumber=C0F7D8D6D54163765FF6F3E2FB337FCFE1507219
Validity
Not Before: Sep 2 16:22:34 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a984d4a-a6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:04:85:dd:64:61:63:4e:29:a4:f2:a9:6e:76:
44:7a:db:09:0c:23:06:7b:fe:5f:54:17:d9:24:6f:
7a:6a:ed:5f:f5:b2:c4:4a:ab:9d:f6:3c:20:91:3e:
b7:39:ac:8d:4d:a6:e8:be:ba:c5:38:00:73:14:0c:
d3:a5:62:43:5a:62:7e:04:e5:e8:85:37:51:6c:97:
4c:01:08:23:b5:ab:5f:4c:91:9c:15:08:ca:0c:61:
de:b4:24:49:78:53:a5:f1:af:46:ba:78:06:51:1f:
82:a5:1e:fd:5e:04:2c:c1:1c:d2:cb:11:84:e4:8f:
51:66:6a:c8:50:45:da:00:37:f7:86:a0:ea:ea:eb:
76:d6:d0:d2:e9:7b:f2:ef:2d:b1:59:05:38:73:13:
f1:f1:d9:f1:1b:06:55:cd:84:68:62:cf:70:40:bd:
8f:e7:1a:f5:c0:d6:b3:4d:b9:77:29:43:81:92:fb:
6e:92:e8:7a:87:6e:21:17:c7:8f:93:e7:73:93:4e:
76:c7:e4:52:4f:db:55:38:67:00:8e:86:83:fc:84:
6a:9f:b7:bf:26:87:e1:9b:ab:b5:66:02:02:12:1c:
67:6d:ef:14:88:89:97:c4:1f:bd:b3:ea:89:0b:d9:
4d:2a:08:fb:36:87:1c:7e:ae:21:39:c2:16:b6:69:
bc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E8:EC:8D:B3:22:DD:B1:B9:17:6C:08:F4:E9:05:FA:6E:4B:C1:F6
X509v3 Authority Key Identifier:
keyid:C0:F7:D8:D6:D5:41:63:76:5F:F6:F3:E2:FB:33:7F:CF:E1:50:72:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/47A21580B6CC11EC98672826C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.79.108.0/23
103.241.6.0/23
Signature Algorithm: sha256WithRSAEncryption
29:67:3d:18:05:53:c0:97:de:cb:17:20:ae:a8:0e:d0:da:95:
af:7e:90:17:85:73:9d:c8:ac:31:5b:87:ea:eb:f9:fa:bc:9c:
66:be:11:9b:da:63:1c:2d:cc:04:77:db:8f:e4:9c:a4:3d:ef:
02:31:13:40:cb:4c:0d:93:18:b6:65:5e:3b:09:09:55:5e:93:
fe:7f:38:0b:4d:df:af:76:19:9f:a1:e1:20:98:ef:a1:b7:a0:
21:9a:e5:a1:5e:0d:4c:79:e7:10:f6:b9:fe:3c:52:cc:1d:20:
14:0c:d6:27:2e:55:da:e0:8a:73:45:d1:8c:9b:d2:07:57:ab:
b4:87:d5:75:de:62:21:4e:72:2f:c7:8f:ab:e2:7d:dc:9b:a2:
e1:38:d6:ce:f9:3f:dd:ed:84:d6:4c:a4:5b:05:15:0c:24:b1:
b2:13:30:c4:b3:37:68:49:f9:2f:71:d3:18:80:91:4d:93:0b:
1d:6c:80:75:9e:de:9e:53:fa:71:b4:5d:97:35:bd:42:fd:c4:
fe:24:16:86:7c:c0:1e:fc:2f:79:c4:a7:63:65:f3:2b:03:ba:
20:57:9e:80:40:41:eb:45:27:7e:1a:40:29:ee:bf:23:9f:1d:
b7:a7:3a:3c:f8:24:a5:6f:29:64:d0:5b:01:bf:3c:b4:a6:77:
52:60:97:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:14:57 2026 by rpki-client