
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/41C7DA1E037411EEB6D5D751C4F9AE02.roa
File: 41C7DA1E037411EEB6D5D751C4F9AE02.roa (raw, json)
Hash identifier: rDc5KNR21qJ2rdTXhEQEh0NUIwJvwWvZkNqQHC+OY9w=
Subject key identifier: 4D:F6:40:6E:82:DE:D9:AC:98:A1:26:DB:06:54:B9:AE:BF:5E:CE:12
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 5E3A
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/41C7DA1E037411EEB6D5D751C4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:17:17 +0000
ROA not before: Thu 28 Aug 2025 14:54:31 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 149089
IP address blocks: 103.82.36.0/22 maxlen: 24
103.82.132.0/22 maxlen: 24
103.82.192.0/22 maxlen: 24
2407:5b40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24122 (0x5e3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:54:31 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a60c6d-5bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c0:ca:ac:40:9d:e1:ee:0c:13:d7:60:f7:9c:
6c:96:22:b8:7a:b0:60:f1:5c:61:74:98:95:c9:58:
3d:05:23:36:a4:c7:4f:28:02:65:ea:da:a7:ed:49:
68:f4:7e:4b:79:ee:03:5a:89:14:a6:00:f9:a2:73:
aa:07:15:f5:ce:4a:f0:db:75:b6:17:04:3f:bd:3c:
d3:33:02:dd:c0:c6:65:f4:03:75:0c:40:38:b9:be:
c2:4b:e9:8a:e2:51:64:32:2c:4f:5d:7c:17:66:46:
94:45:d4:d5:e8:68:d6:6b:4a:49:01:26:a2:bd:b3:
6a:71:24:ad:d8:ff:28:8b:af:d1:04:4c:d8:c9:91:
9d:85:f1:cf:ed:54:1b:dd:39:f4:ea:44:a2:a6:aa:
65:a3:49:11:94:53:bf:81:66:d3:b4:52:08:50:92:
04:93:f6:b3:e9:cd:3f:3f:ec:e8:e5:69:12:d0:a6:
38:79:3a:26:f2:b3:9b:e3:22:41:b4:1b:e4:f0:f4:
7c:cf:38:d3:3f:ce:3f:88:bd:5d:77:9a:4c:0c:f1:
3b:23:c7:26:b0:37:c2:59:da:9d:85:d3:8b:c6:a1:
87:46:69:c3:7b:ba:ef:4d:ae:b2:58:fd:13:4e:3e:
25:52:33:eb:ac:14:91:41:8e:47:c7:e5:17:21:8d:
e7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F6:40:6E:82:DE:D9:AC:98:A1:26:DB:06:54:B9:AE:BF:5E:CE:12
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/41C7DA1E037411EEB6D5D751C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.82.36.0/22
103.82.132.0/22
103.82.192.0/22
IPv6:
2407:5b40::/48
Signature Algorithm: sha256WithRSAEncryption
52:e7:be:9d:f8:fd:ac:83:60:22:b1:06:8f:dc:23:2c:99:3c:
ec:06:ca:2b:d7:bb:9e:72:ec:f0:d6:d0:4a:e5:ba:07:e0:a0:
eb:10:14:f0:d6:84:90:1e:2e:3e:d0:3c:d0:c1:f0:10:ed:42:
a5:97:68:9c:e5:ea:cd:0a:2a:9a:2a:fb:49:d8:82:de:cf:df:
29:ba:fd:36:1c:06:24:f3:7c:53:74:c7:13:7a:e5:7b:75:10:
52:6c:e5:3b:dc:ae:db:58:9e:87:b7:15:d0:25:73:4f:bf:36:
2d:99:66:f6:a3:0f:3a:cd:fe:a0:ec:38:67:1c:41:55:d3:6d:
f8:28:2d:e5:95:f3:b2:d4:f2:25:06:4d:15:be:e8:31:96:05:
48:99:26:1a:68:f8:0c:ff:7c:a7:ca:61:f2:f7:d7:49:84:f2:
db:fd:21:62:e1:ba:7b:da:58:59:81:dd:c4:09:02:d4:2e:14:
e3:c9:cc:59:f9:45:c7:c2:c0:1d:ac:21:a1:96:a2:68:f5:f5:
ae:63:2d:45:46:6d:ab:a8:05:d7:5d:58:7d:66:88:3e:59:e3:
00:e8:03:a3:bd:d1:cd:7f:55:44:0f:72:e4:14:93:95:36:2b:
9f:d3:0e:9c:17:d3:a8:2f:ca:7a:7d:66:d7:8f:46:f9:37:84:
5d:52:00:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:44:58 2026 by rpki-client