
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/A433C1262D0311F0A91F647CC4F9AE02.roa
File: A433C1262D0311F0A91F647CC4F9AE02.roa (raw, json)
Hash identifier: HWetRfz40IYfWgqEESVORAbvnLBgR9dNsuu7qFWBX8E=
Subject key identifier: 41:0A:3A:94:9D:DD:23:6F:43:A1:3C:9D:33:1F:56:73:ED:AF:01:A3
Certificate issuer: /CN=A91BB221/serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D
Certificate serial: 0118
Authority key identifier: AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/A433C1262D0311F0A91F647CC4F9AE02.roa
Signing time: Mon 31 Aug 2026 06:56:26 +0000
ROA not before: Mon 31 Aug 2026 06:56:26 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 45382
IP address blocks: 103.140.44.0/24 maxlen: 24
103.140.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl
rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 06:26:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280 (0x118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB221, serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D
Validity
Not Before: Aug 31 06:56:26 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a95259a-53f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:54:6b:90:bd:09:9a:14:0c:f7:46:64:a4:85:
68:71:20:00:6e:39:fb:12:dd:c4:8e:f9:61:cb:0e:
a4:0e:e6:62:da:b7:0e:fb:55:45:32:47:b0:43:20:
18:a4:45:5e:6d:0d:5d:67:14:13:0f:16:fd:6a:15:
f3:49:86:b0:6e:f4:8b:b3:f9:b4:2b:44:b7:d0:83:
9b:40:c8:c6:45:7f:34:7f:be:26:88:57:e0:7c:62:
58:a9:9a:dc:f0:8c:74:8f:cd:5f:81:ed:62:6d:ba:
a4:d2:89:fb:91:c7:a7:ad:2e:83:dd:2d:75:8b:0d:
3d:96:ca:9c:2a:59:81:42:f7:27:92:74:66:01:cf:
70:44:96:2a:f2:4e:26:1f:a7:ed:1d:eb:99:7d:e0:
c3:f6:54:54:93:9b:6f:c5:ea:c6:65:6f:e6:4a:ca:
c8:d5:d1:d7:8f:07:30:5d:0b:22:52:85:24:90:e0:
20:ff:9a:5f:ad:0d:26:e8:e1:f1:ce:66:05:17:97:
c6:13:58:72:3f:3b:f2:e7:82:c6:c5:98:2b:e3:e7:
05:4c:30:4f:a2:90:c5:54:ff:eb:fc:00:92:13:5d:
ce:41:64:41:8c:8a:3b:d8:d3:3c:e3:f2:48:13:8d:
05:58:8b:75:75:60:08:50:2c:00:fb:11:89:d5:ae:
14:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0A:3A:94:9D:DD:23:6F:43:A1:3C:9D:33:1F:56:73:ED:AF:01:A3
X509v3 Authority Key Identifier:
keyid:AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/A433C1262D0311F0A91F647CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.140.44.0/23
Signature Algorithm: sha256WithRSAEncryption
92:ec:2c:24:96:1e:8d:fd:9d:e6:e4:d3:13:d3:27:d5:2a:63:
ce:35:86:63:58:ef:3a:e4:49:56:dd:47:9e:ee:2f:01:d8:bb:
3d:a1:ba:d9:52:35:f5:d9:d1:82:36:00:1f:3c:27:ee:5b:a8:
9e:54:5e:52:d1:f1:a4:fb:eb:2b:6d:98:74:e7:a7:86:c8:c5:
1c:24:de:42:1e:8e:cf:98:5f:cc:51:bf:b1:9c:7c:5d:d3:ab:
58:88:43:b9:94:15:87:af:b9:3a:07:82:5d:54:f7:d2:f1:59:
97:20:d4:66:bc:8d:09:24:15:98:fd:78:e3:d4:1d:74:e3:df:
b7:ed:7d:09:68:9f:e2:b0:53:6d:67:41:b1:70:1f:ac:6f:f5:
fe:33:b6:4f:7d:e3:9b:70:33:07:7f:8a:4f:20:4a:bc:f1:91:
3b:f4:3d:bd:5e:09:4c:a0:59:f4:88:2f:0e:3a:4f:9f:c7:24:
7c:44:bb:ec:bb:07:f5:f4:1b:05:fb:2f:cb:2b:49:c9:97:d0:
34:ca:2e:24:8a:62:4b:ce:8a:cb:c1:a8:7e:cf:9b:25:7e:e6:
e9:39:64:d6:a5:c2:0e:73:ac:82:02:2d:9c:be:61:e3:04:b6:
07:ca:6b:34:a1:32:58:da:91:9d:c1:56:7b:ad:e3:6b:3b:8e:
db:31:4c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:31:12 2026 by rpki-client