
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C4D92628BF0611EC889EE54DC4F9AE02.roa
File: C4D92628BF0611EC889EE54DC4F9AE02.roa (raw, json)
Hash identifier: UpYh7I1vPov7fGxWEXuqZMsiHAB1gSfr4KInT4/nl7g=
Subject key identifier: 2C:AA:14:3C:B1:02:8C:03:7A:E8:1A:D8:AB:35:1A:CB:A0:57:FA:19
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6F3A
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C4D92628BF0611EC889EE54DC4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:37:24 +0000
ROA not before: Fri 02 Oct 2026 15:37:24 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 63736
IP address blocks: 103.207.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 10:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28474 (0x6f3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:37:24 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcfb4-3a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d8:7e:cd:a6:ad:d1:8f:c2:62:d1:36:00:db:
67:63:89:a6:4d:da:31:4f:90:3f:9a:5a:8b:8a:6f:
9a:70:fe:fc:89:f5:e5:cd:4a:67:f5:82:c7:ab:c8:
dc:9c:84:f1:3f:7b:4d:a4:06:76:d1:b6:2c:57:4c:
43:d0:a2:66:8a:3c:c6:25:cf:a6:28:97:42:54:59:
6a:1a:4d:b0:7c:ef:da:8a:2d:da:49:a7:f4:24:31:
91:ef:53:6d:b0:ca:5b:b5:dd:ed:20:ab:64:bc:28:
6f:87:ef:62:c7:18:ee:16:5a:8d:c9:5c:7f:46:47:
fc:53:31:68:b6:fd:d0:d4:e9:11:a4:6e:14:ea:63:
84:8b:46:68:56:0b:cb:d1:07:b7:a9:55:0e:bd:40:
9c:19:57:84:cf:7a:9c:66:70:02:6b:9f:ae:eb:05:
21:89:08:a4:7b:cf:88:6b:00:64:c7:91:6a:2a:28:
22:b3:37:c9:6f:6e:fe:da:76:a4:0c:b7:21:53:2f:
e8:8d:a1:ad:19:75:7e:24:bc:9f:0d:e0:b1:13:ac:
92:c9:f3:a0:29:2d:36:30:ab:af:de:21:9d:dc:94:
9f:55:03:c2:22:99:ce:d7:f2:02:1b:38:5c:42:0f:
ff:c2:c3:8c:73:36:e5:5f:29:0f:a6:7f:cd:eb:91:
9e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AA:14:3C:B1:02:8C:03:7A:E8:1A:D8:AB:35:1A:CB:A0:57:FA:19
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C4D92628BF0611EC889EE54DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.207.32.0/22
Signature Algorithm: sha256WithRSAEncryption
50:f3:e1:8c:bc:05:5c:06:db:a7:67:48:9b:5c:90:24:50:d7:
54:38:10:02:50:2a:19:01:12:aa:bc:1e:5a:ca:91:e2:06:aa:
b2:ae:87:fe:d7:f6:8f:aa:d6:89:a1:dc:8a:a9:de:57:ff:75:
d5:33:b2:cd:e8:87:0e:7e:02:4a:6b:65:34:c9:f1:cc:3b:30:
22:1d:6a:ee:57:3c:c6:e6:2b:ee:79:89:59:2e:5f:de:af:fd:
12:b8:55:c5:33:27:aa:95:7d:45:16:4f:d5:b4:f9:5c:6c:60:
58:d3:da:c1:29:a8:a5:46:41:79:73:47:5c:d7:26:ba:cc:85:
dc:c6:9d:28:3b:96:6b:27:0b:9e:14:65:6c:2b:78:51:ad:4c:
58:3e:51:3f:a6:8c:f6:43:df:fe:f2:5e:c1:c2:ee:75:c6:27:
2c:6e:f5:36:d3:7a:46:12:d9:51:03:38:9c:aa:4c:b7:42:39:
38:e6:1b:06:b6:bb:fe:30:74:f9:f1:b2:35:0b:1e:51:5d:42:
12:b8:98:d3:51:92:b4:6c:96:66:1e:e2:1a:fd:f5:81:1d:21:
f4:4a:fd:88:69:47:33:3a:6f:df:da:b3:03:63:af:96:7f:e0:
98:63:f3:83:ce:62:b8:a9:61:fd:fd:9a:8b:b2:7d:dd:44:43:
6c:51:e1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:19:30 2026 by rpki-client