
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C4D92628BF0611EC889EE54DC4F9AE02.roa
File: C4D92628BF0611EC889EE54DC4F9AE02.roa (raw, json)
Hash identifier: w2w/WVRtl1Kh21X+m1EoeEabxFNo/w6sA81dza82xA0=
Subject key identifier: 76:D4:AB:53:BA:60:0B:3E:97:72:AD:EA:CB:71:BE:7B:03:0D:8C:70
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 5F1B
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C4D92628BF0611EC889EE54DC4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:21:05 +0000
ROA not before: Thu 28 Aug 2025 14:57:53 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 63736
IP address blocks: 103.207.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24347 (0x5f1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:57:53 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a60d50-5460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0c:9e:53:be:bc:e4:43:ae:4b:98:8c:05:6b:
8c:a2:2d:ec:59:18:97:ee:45:6e:9b:c4:5e:55:b0:
10:33:2e:b7:35:90:84:0e:df:37:64:2a:ef:9b:6a:
22:47:94:fa:28:e9:0b:cc:21:dc:15:75:c5:4c:0e:
bc:c0:0e:f2:70:b1:19:4a:ea:1a:64:ce:be:94:17:
b4:d0:75:e3:ca:d5:e5:4c:cd:9a:b8:05:01:00:91:
31:e5:b9:91:ef:c3:14:01:6c:44:b4:97:ab:ce:30:
e7:59:f1:72:3a:47:42:27:6d:d9:b5:73:5c:13:0e:
17:e6:7b:9c:4c:22:86:35:7a:c3:60:e6:6b:e9:82:
93:62:58:d7:35:25:41:4d:48:ad:23:d8:0f:54:9b:
ac:1a:b7:35:75:58:96:48:90:94:0c:1a:31:77:e8:
52:9d:4b:fa:b1:c8:1d:e0:2b:3e:30:d9:fe:0c:f7:
12:ff:a7:d6:7b:aa:1b:fd:ce:06:c0:78:56:90:4a:
34:1e:b7:a2:78:f3:ce:5c:f2:37:16:72:84:ba:80:
29:4f:f4:2e:f8:71:06:41:09:3f:6a:38:b0:e2:8f:
64:1b:0c:1b:60:00:bd:66:46:e5:fa:26:31:70:7b:
77:8e:d8:64:2b:51:cb:29:93:f8:15:7e:de:b1:2e:
43:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D4:AB:53:BA:60:0B:3E:97:72:AD:EA:CB:71:BE:7B:03:0D:8C:70
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C4D92628BF0611EC889EE54DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.207.32.0/22
Signature Algorithm: sha256WithRSAEncryption
82:c5:49:15:79:7d:9f:85:45:93:0c:3c:c6:9c:b7:b1:9f:d7:
ae:7b:63:fd:18:d8:4d:9f:b1:c9:2b:6a:90:45:86:a6:bb:be:
c5:ee:7f:9c:a0:35:c2:0a:97:a3:30:36:9f:de:9f:4a:64:e9:
cb:4b:f2:4a:f3:86:f6:23:ae:00:03:31:df:f2:d5:b7:76:2d:
50:1d:e2:6c:fb:5d:2e:13:ad:f7:b5:fd:4f:43:b6:51:fc:d8:
3c:54:84:76:d9:e4:04:1d:aa:d3:88:94:b8:41:c1:87:9d:5f:
91:74:2c:bd:03:b5:82:69:ec:3d:44:60:ba:2d:1a:54:64:e4:
fc:5a:d4:cb:26:7e:7d:02:8b:d4:d7:90:eb:0b:00:12:0b:b7:
57:2c:55:48:7b:61:ce:9f:fd:9a:7d:28:af:66:84:28:23:3f:
ff:ec:df:28:40:28:f6:18:dd:03:17:f2:46:50:46:e0:f1:21:
a8:71:e1:36:7c:e3:61:a1:73:a9:89:aa:f6:b9:c2:5a:19:cd:
be:39:33:e8:a6:67:7b:d0:27:f2:42:6b:fd:ee:38:dd:bc:be:
2a:44:76:49:12:19:44:46:c6:7a:e6:e3:86:44:9b:32:07:f4:
ca:5f:e8:72:b1:8c:c6:b6:65:3d:fa:ce:d8:9b:83:49:48:14:
b1:0d:a1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:42:53 2026 by rpki-client