
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/382BB29EF45011F0AF80EBA1636F56BC.roa
File: 382BB29EF45011F0AF80EBA1636F56BC.roa (raw, json)
Hash identifier: up860oLdxDIT/mm1S3+f0STyL0H48p0LlM1PJVy1wlM=
Subject key identifier: 33:77:CE:23:05:0A:B8:16:21:B9:A6:08:57:EB:73:CD:03:A9:32:6D
Certificate issuer: /CN=A91A532D/serialNumber=875B42F7C62725778F56D951B712EB8879348A45
Certificate serial: 0891
Authority key identifier: 87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/382BB29EF45011F0AF80EBA1636F56BC.roa
Signing time: Wed 12 Aug 2026 20:41:01 +0000
ROA not before: Wed 12 Aug 2026 20:41:01 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 134226
IP address blocks: 103.59.176.0/22 maxlen: 22
103.59.176.0/24 maxlen: 24
103.59.178.0/24 maxlen: 24
103.59.179.0/24 maxlen: 24
2404:2d80::/32 maxlen: 32
2404:2d80::/40 maxlen: 40
2404:2d80::/48 maxlen: 48
2404:2d80::/64 maxlen: 64
2404:2d80:10::/48 maxlen: 48
2404:2d80:11::/48 maxlen: 48
2404:2d80:12::/48 maxlen: 48
2404:2d80:13::/48 maxlen: 48
2404:2d80:14::/48 maxlen: 48
2404:2d80:15::/48 maxlen: 48
2404:2d80:16::/48 maxlen: 48
2404:2d80:17::/48 maxlen: 48
2404:2d80:18::/48 maxlen: 48
2404:2d80:19::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl
rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 21:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2193 (0x891)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A532D, serialNumber=875B42F7C62725778F56D951B712EB8879348A45
Validity
Not Before: Aug 12 20:41:01 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a7cda5d-a419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7e:58:5a:28:54:a7:0e:b9:22:2c:8d:e5:64:
39:9e:a5:8e:02:2c:36:c4:d9:79:35:d1:01:d1:bb:
3a:9d:cb:b3:a7:57:7a:54:cd:7f:9b:0d:19:ff:40:
4c:54:40:cd:36:31:98:e2:8e:e3:54:57:ec:ee:aa:
78:99:b4:42:0c:f0:33:c3:0e:35:c8:ba:de:a8:c1:
f7:e2:3f:20:29:be:7d:56:ed:14:f3:97:cd:6f:86:
69:e8:12:60:3b:cf:d0:18:a4:53:09:8b:54:61:0a:
60:d8:32:42:31:ce:ec:60:3c:c4:65:b7:0c:95:7b:
e7:d5:90:a1:05:a6:39:35:07:d8:1a:03:8c:04:82:
45:8c:cb:fc:77:ba:16:62:aa:ae:ef:95:b6:14:39:
10:44:33:1e:d9:57:4e:73:87:a9:75:70:72:e1:c7:
0f:3d:a9:49:75:7e:0f:62:f9:70:6e:e7:16:e7:25:
0d:f8:78:1c:5f:a3:ef:4d:a1:d5:63:62:03:eb:02:
5d:c4:06:28:24:d7:46:b0:70:09:25:83:68:b3:38:
7e:84:fb:77:23:39:9d:91:6f:4b:2a:92:aa:ea:5c:
62:86:a7:ac:91:f1:cb:b2:2e:17:e1:f5:3f:77:64:
1c:7a:5f:b5:f4:f6:73:df:00:63:46:ea:30:12:74:
55:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:77:CE:23:05:0A:B8:16:21:B9:A6:08:57:EB:73:CD:03:A9:32:6D
X509v3 Authority Key Identifier:
keyid:87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/382BB29EF45011F0AF80EBA1636F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.59.176.0/22
IPv6:
2404:2d80::/32
Signature Algorithm: sha256WithRSAEncryption
88:9c:d6:75:a1:24:b3:2a:c6:e6:65:9a:b2:1f:6d:ab:e6:52:
bc:d4:4c:ef:29:e7:23:af:6c:c8:f2:63:a1:e9:e5:83:a4:10:
7b:26:66:43:02:d6:bb:4d:bb:7a:28:24:33:90:1a:8e:d2:fe:
88:2c:46:a9:77:66:31:9e:cb:a1:06:69:27:68:83:4f:42:5e:
62:07:23:3e:bd:57:1a:02:1b:28:41:59:f7:9a:e9:06:c5:8b:
3e:68:7f:16:d0:86:95:d5:ae:4f:6b:fa:9a:e2:7d:b6:9f:e7:
7c:37:b6:6d:79:f3:54:16:87:fc:39:ac:c7:dc:89:e7:8f:dd:
28:b2:e9:ed:4a:01:f9:4e:6e:cd:c0:0e:b7:78:32:cb:69:d6:
94:42:9a:be:89:2b:a3:8f:e4:e0:f3:1a:fc:16:6b:8a:2a:bd:
b2:c3:b2:f1:f8:81:4d:1e:ad:b9:73:43:05:6e:d4:93:37:2e:
ad:f2:b7:3b:b6:71:6c:dd:5d:8d:10:65:bd:9d:4a:c6:47:61:
09:c1:2e:54:cd:1a:ab:f5:ea:68:5a:dd:af:66:1f:1b:f7:ba:
64:da:1f:22:01:7d:01:f2:6a:52:ad:d5:04:00:0c:62:20:c5:
91:3a:96:49:c6:49:9f:82:fc:5d:e5:67:c0:d0:32:49:9d:f1:
24:2d:01:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:15:52 2026 by rpki-client