
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/B412DC700EC011EE8C18290AC4F9AE02.roa
File: B412DC700EC011EE8C18290AC4F9AE02.roa (raw, json)
Hash identifier: 3CMrCqDOXwvVF6x32R2mcswD2RmCJaBSI7Dvz74AhRA=
Subject key identifier: 48:8A:81:AB:97:7E:62:56:B5:4A:31:12:0E:A4:D0:7B:5E:4C:E5:B6
Certificate issuer: /CN=A91AF2CD/serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757
Certificate serial: 0257
Authority key identifier: 58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/B412DC700EC011EE8C18290AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:07:03 +0000
ROA not before: Fri 09 Jan 2026 02:21:46 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 54600
IP address blocks: 103.104.172.0/22 maxlen: 22
103.116.20.0/22 maxlen: 22
103.124.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl
rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 01:53:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 599 (0x257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF2CD, serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757
Validity
Not Before: Jan 9 02:21:46 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a45617-90b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:f9:27:eb:0f:ef:3d:e6:32:9a:2d:48:f6:
e9:d8:d8:8b:bf:ae:4c:b6:8e:ed:49:51:03:9d:41:
21:11:7a:11:90:16:9e:17:2c:95:be:86:11:db:1e:
25:53:fc:74:47:20:dc:34:18:f4:8f:df:12:9c:a1:
eb:10:8c:84:52:23:ba:16:6a:58:63:b9:3b:6f:08:
dd:54:f7:36:7d:8d:bc:c5:91:a0:f1:ae:18:fc:1f:
89:83:e7:e8:54:1d:d4:a1:92:eb:a3:c7:61:74:14:
38:56:99:2a:ac:ed:96:59:54:1b:c2:39:b2:2d:25:
a9:52:99:cf:a0:e1:b7:bf:0e:34:49:0b:1d:fb:2e:
db:a4:7d:d6:f1:26:eb:80:f1:c3:5f:42:cc:32:fb:
4e:db:ee:c6:84:ae:d5:c4:ae:e7:e1:cf:e4:e6:cc:
28:e2:ca:09:c9:91:79:58:34:b2:2c:bb:87:c2:7c:
3d:63:c3:3a:0d:6b:e7:3f:83:a7:2c:d0:08:c5:48:
cd:84:60:b4:e1:a2:b6:ff:17:c5:6b:25:6e:85:03:
cd:10:22:ec:39:17:5e:75:95:5d:8c:03:5a:53:25:
b6:34:d7:60:3a:3d:1b:4e:22:08:bf:27:07:aa:7f:
c5:00:98:8b:35:94:8b:10:b8:04:9f:57:76:7f:6d:
7b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8A:81:AB:97:7E:62:56:B5:4A:31:12:0E:A4:D0:7B:5E:4C:E5:B6
X509v3 Authority Key Identifier:
keyid:58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/B412DC700EC011EE8C18290AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.104.172.0/22
103.116.20.0/22
103.124.192.0/22
Signature Algorithm: sha256WithRSAEncryption
c8:7b:f7:6f:b7:b4:69:13:e4:4f:d1:06:12:f0:34:b9:37:62:
6e:ce:e8:d6:8f:e0:da:a9:15:ba:3f:4e:9a:0e:2f:b5:9e:b6:
d3:70:bd:5b:8e:cb:b0:91:ad:86:67:cd:f9:8e:5a:b0:33:59:
79:a2:74:8a:26:ae:42:d0:be:3d:17:88:62:13:97:b3:60:b2:
18:3c:a5:4a:d1:ee:ab:f4:7d:bc:16:96:2e:a8:10:41:63:cb:
13:67:46:75:d8:34:fa:15:da:22:3c:c4:cb:7a:ef:bd:2a:67:
57:a6:6e:47:61:58:af:ea:2b:f3:08:58:83:93:7a:5f:05:66:
24:39:fd:65:74:27:1f:77:34:0d:01:6c:42:f1:dc:2f:4a:e7:
82:79:6a:6b:aa:cc:ef:8b:c9:0b:c2:8f:cd:fb:b5:79:68:a4:
47:eb:54:0f:64:0c:8b:b2:4c:62:18:7d:55:96:99:ae:09:02:
a6:85:a6:51:ea:0f:2b:b6:f9:b4:b0:04:67:f2:f4:b9:75:8c:
dc:84:99:b2:0e:37:60:d7:d8:b3:92:49:59:13:ab:d9:ab:7c:
68:85:43:7e:fb:11:3a:33:be:c3:83:35:68:e3:ab:be:3b:2a:
7a:be:16:9d:29:18:de:bb:ea:47:4f:ec:8a:0e:99:68:e4:07:
ce:3a:0e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 01:43:53 2026 by rpki-client