
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4AF9C7926EF811EE8230D338C4F9AE02.roa
File: 4AF9C7926EF811EE8230D338C4F9AE02.roa (raw, json)
Hash identifier: /KY1EV2ZmOMVuO4yBgM650x18ZjxP6U7WhzLe6xyNEw=
Subject key identifier: 10:4E:94:CF:AA:D8:24:5A:E6:15:45:8D:78:65:D1:4C:0D:59:00:E7
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 5E89
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4AF9C7926EF811EE8230D338C4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:18:39 +0000
ROA not before: Thu 28 Aug 2025 14:55:43 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 151855
IP address blocks: 103.242.100.0/24 maxlen: 24
103.242.101.0/24 maxlen: 24
2401:4220::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24201 (0x5e89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:55:43 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a60cbf-42f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:73:79:ac:c3:a2:f7:77:83:bc:4c:56:dd:e6:
4a:ac:27:94:b0:b6:ca:b4:48:dd:bb:4a:86:80:2e:
57:57:d7:1b:f0:25:59:87:fc:33:5b:9d:98:b7:69:
aa:7f:bc:39:ae:85:e1:8f:2b:03:64:c1:3a:38:5d:
6b:26:9a:bf:30:79:da:97:78:80:ce:dc:af:61:bc:
9a:ff:3e:c9:43:55:55:15:92:f7:3c:00:04:14:66:
49:ae:05:a8:99:71:8f:96:75:9a:eb:6c:5a:e6:5d:
e0:74:eb:c5:81:57:c0:9d:7c:4b:d3:31:5e:d2:46:
3c:a5:40:d6:92:7d:c8:4a:0f:b7:2f:2d:ec:16:c4:
59:d2:8c:0e:fb:e7:4b:b8:0e:12:01:0e:07:80:bd:
df:75:90:62:d9:fa:76:bf:8c:d3:25:eb:2d:e0:e4:
9c:b6:31:ab:0c:e4:90:e5:16:13:6f:9c:6c:2d:7e:
4f:cd:e0:10:f7:15:03:e9:6f:dc:75:90:c0:2d:63:
68:41:66:30:6b:e4:69:4b:97:20:38:01:35:36:e5:
a4:6c:2c:0d:cf:55:9c:eb:3a:ab:e7:35:85:11:30:
84:31:89:ce:f2:16:25:1f:fd:e5:5c:1a:9c:18:bc:
26:d9:e3:83:4a:b6:21:5c:da:98:7b:9f:bf:4b:d9:
02:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4E:94:CF:AA:D8:24:5A:E6:15:45:8D:78:65:D1:4C:0D:59:00:E7
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4AF9C7926EF811EE8230D338C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.242.100.0/23
IPv6:
2401:4220::/48
Signature Algorithm: sha256WithRSAEncryption
7b:71:e4:b3:a8:7a:8b:8d:a7:e5:a7:9e:fd:6c:94:b6:77:f7:
eb:3e:40:c7:f9:d8:ab:18:19:ab:a4:22:c4:77:06:55:ab:ab:
5c:15:ac:06:35:97:3b:d5:a6:91:9f:a8:c6:2c:18:9d:9b:d3:
bd:c4:84:c3:7d:a9:3d:ff:2c:c4:e3:e1:3d:6d:a0:50:a1:0c:
1a:47:b9:42:60:4b:ed:2a:64:77:e8:b7:3a:dc:73:dc:05:59:
4b:85:93:7f:c4:8f:c0:15:8d:2c:6c:c9:30:cd:e8:52:31:29:
09:d6:6b:84:78:4e:e3:76:c1:dd:f8:75:4b:03:ff:0a:c0:a8:
36:a2:9f:4e:73:48:dc:c8:5c:0f:7c:21:fe:52:51:0d:85:34:
04:8f:39:cb:9a:e6:f8:4b:aa:ff:64:71:6c:d5:db:7c:8f:35:
e7:8e:16:48:5d:17:eb:f2:77:29:4e:68:c5:22:e5:11:e8:68:
68:24:62:e3:f0:85:13:94:a4:0f:4d:12:e1:10:c4:13:d0:db:
3e:10:43:f3:0f:c7:0d:a7:25:28:eb:d6:06:80:df:af:bc:e7:
df:45:f4:c1:37:78:54:44:60:dc:3a:25:3d:ab:0b:33:3a:c2:
a9:24:d8:52:e1:36:4e:2d:7c:ee:65:9d:7c:dc:ce:eb:50:45:
19:69:32:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:47:43 2026 by rpki-client