
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4CA62F225BA611EFAF5C271DC4F9AE02.roa
File: 4CA62F225BA611EFAF5C271DC4F9AE02.roa (raw, json)
Hash identifier: xtar3KdKSIjNSh8y14bc0HPsZwyz3+fRF6WnQycO8F8=
Subject key identifier: E2:72:D8:D2:0A:40:EF:EB:C0:7D:CD:DD:BB:18:54:B7:25:AF:D1:02
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 5E05
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4CA62F225BA611EFAF5C271DC4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:16:25 +0000
ROA not before: Thu 28 Aug 2025 14:53:46 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 135988
IP address blocks: 103.143.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24069 (0x5e05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:53:46 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a60c39-5993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:08:78:a4:38:d0:10:b5:56:bb:cc:3e:a3:7c:
fc:5d:83:15:01:e2:45:d4:af:6f:47:b8:28:a4:9f:
da:02:10:7c:68:23:fe:fd:4c:a5:1a:29:e6:49:43:
cc:de:7c:ab:d3:91:c6:a4:44:17:6e:60:b9:d1:70:
14:47:cd:c6:a4:9b:c5:6f:d0:a9:25:33:dc:d2:9d:
ae:4e:5c:35:14:f9:37:df:8f:0c:73:6b:81:1f:bb:
4e:e2:a4:c1:30:f6:79:02:cc:e5:fe:f2:1d:84:06:
b6:bb:bf:36:f2:f3:f7:04:f8:44:69:b2:47:10:2e:
1e:13:70:9a:57:d9:75:7c:a4:5e:cd:fe:cb:8e:7f:
7a:cc:95:49:8d:78:3a:06:91:48:81:13:2a:fe:ea:
63:23:b4:06:7e:b9:37:4f:b4:25:74:d5:c2:12:df:
e2:0a:0d:00:11:db:f2:5c:96:c0:68:d9:7c:93:1d:
52:f9:93:13:a9:7c:a0:91:6a:5a:5c:28:c7:4e:b3:
84:0c:75:26:ff:ac:34:0e:61:5f:86:90:f7:74:5f:
57:95:a5:ed:9e:bd:0d:14:a9:c0:d1:01:fa:22:8b:
60:3f:26:ba:e6:96:22:a8:a2:e9:0f:dd:93:d1:43:
d2:59:2b:68:f4:5c:c0:45:8e:fe:87:3e:25:c1:03:
ef:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:72:D8:D2:0A:40:EF:EB:C0:7D:CD:DD:BB:18:54:B7:25:AF:D1:02
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4CA62F225BA611EFAF5C271DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.143.140.0/23
Signature Algorithm: sha256WithRSAEncryption
95:65:72:76:4b:d6:e5:79:4b:3a:7c:e4:e7:b2:c5:98:db:17:
13:26:8b:2a:ad:0a:d0:ee:11:2c:15:61:f8:a7:1b:df:64:b5:
fb:c5:8e:33:09:76:5e:36:62:cd:ff:57:1e:62:7e:3a:08:99:
4c:0d:cf:91:df:30:f3:43:d3:3e:92:7b:f3:83:57:61:66:b6:
31:db:c1:fc:cf:e7:7e:3b:cf:98:49:76:02:d3:6b:6f:b2:a5:
ef:91:37:9d:57:e2:c9:76:61:9e:1b:66:39:3c:8a:16:a3:1c:
61:07:e8:34:88:ae:0f:a0:0a:76:37:94:67:e6:05:38:c9:6c:
78:85:6e:e8:1f:88:fd:5c:f9:2d:ec:8b:ab:7e:b6:10:55:44:
8c:ae:f1:83:54:06:19:fa:b0:03:c9:dd:32:e1:5a:b5:af:11:
10:84:1b:28:3a:a7:51:73:57:6f:04:d7:e1:61:2a:8a:1c:67:
bd:28:d7:0c:88:dc:9c:35:4b:94:4d:c6:55:02:0d:82:56:94:
90:ec:f6:86:fc:bc:6b:60:56:a7:9a:64:d3:82:f5:29:c1:3e:
83:9c:bd:9c:7c:52:4a:90:ee:20:13:75:0c:ab:16:6c:85:28:
f4:ab:5c:67:ea:b0:ab:eb:92:3e:1a:52:d7:55:af:c6:13:61:
85:61:f3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:43:48 2026 by rpki-client