
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/41A8950C272F11EF9D0A0C5CC4F9AE02.roa
File: 41A8950C272F11EF9D0A0C5CC4F9AE02.roa (raw, json)
Hash identifier: d/c8vI45LOwVlgQ3QO11BVSR0P5AhnRZDNl0HjMipe8=
Subject key identifier: AC:81:E9:ED:E3:21:D7:63:94:DC:DF:2E:A0:D7:47:9A:71:E6:73:54
Certificate issuer: /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
Certificate serial: 01FC
Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/41A8950C272F11EF9D0A0C5CC4F9AE02.roa
Signing time: Wed 21 Oct 2026 04:52:05 +0000
ROA not before: Wed 21 Oct 2026 04:52:05 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 32787
IP address blocks: 103.37.228.0/24 maxlen: 24
103.55.52.0/24 maxlen: 24
103.55.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl
rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 508 (0x1fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
Validity
Not Before: Oct 21 04:52:05 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ad844f5-8d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:47:4a:87:93:6c:dd:40:c6:d0:4d:f4:b7:a4:
10:29:4f:2c:0c:49:ae:3e:0c:da:a1:99:4f:65:78:
37:d1:11:a5:2e:6c:cd:71:bd:b8:ba:4b:bd:c2:b8:
1b:fe:9a:31:e8:7e:6b:2f:48:3c:91:63:71:70:0c:
d5:15:45:49:1e:d4:9d:3a:c9:d2:58:e6:8f:b6:8f:
6f:73:80:3d:82:b4:10:3d:58:c8:fb:dd:28:3e:1d:
3c:04:d1:28:44:3d:8f:f5:eb:01:c2:6e:9a:87:55:
20:9b:2e:00:5b:54:9c:cb:5b:97:17:35:7c:1a:64:
2c:15:1b:6a:1f:6e:71:77:29:fa:d7:7e:fd:c3:ec:
47:09:42:46:d9:f3:3d:eb:22:00:9d:17:6c:e4:43:
00:30:fc:af:04:cf:2d:b0:11:b3:39:a8:f5:3b:7f:
b2:f8:0a:fc:1d:de:97:46:db:75:ec:55:a6:f8:01:
93:28:35:30:17:e7:5c:ba:49:6a:8c:31:8c:56:27:
eb:5b:37:b7:71:30:64:f0:95:c5:22:56:f0:a5:7e:
02:a9:69:19:45:de:e8:5c:41:df:97:31:f7:da:69:
48:85:23:f9:b4:a7:56:f1:85:30:7e:66:0e:24:91:
ef:a6:34:4b:ab:22:5e:6d:32:35:49:50:1f:38:4f:
dd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:81:E9:ED:E3:21:D7:63:94:DC:DF:2E:A0:D7:47:9A:71:E6:73:54
X509v3 Authority Key Identifier:
keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/41A8950C272F11EF9D0A0C5CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.37.228.0/24
103.55.52.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:8a:7d:5b:6b:ce:67:f5:2a:78:b7:10:5d:44:c2:35:a9:dc:
8f:f9:31:a0:04:0f:5a:75:91:45:68:f2:d0:d5:94:18:2c:08:
23:9b:87:c3:b2:2e:81:7c:f7:09:a2:e6:fa:67:dc:f6:01:d2:
68:d8:92:56:ce:ad:a2:c8:82:7a:4a:eb:c5:61:6f:b6:2d:be:
e7:fb:68:00:5d:c0:02:f8:79:67:31:16:b5:6d:e2:e3:97:54:
eb:f5:eb:ba:9b:5a:91:5e:00:03:77:08:f6:8f:1d:74:3d:48:
b9:ff:4c:91:18:21:8a:1b:b8:43:40:dd:b4:3e:70:7a:29:bc:
f2:98:98:27:2b:83:f3:2d:42:75:2f:d3:d3:55:8f:30:4d:4e:
b5:f9:fb:ce:30:39:05:d1:37:64:59:54:4d:03:5a:54:43:90:
79:58:fc:fc:c7:b8:85:e5:b9:44:ba:7a:87:87:c7:94:97:35:
bf:a5:3f:be:d3:11:2f:23:20:9f:d1:c9:31:b6:e9:43:cc:e0:
95:a5:4e:99:d4:cf:8c:54:d4:3b:43:a9:d4:81:69:98:6b:02:
2d:4d:9d:4b:f8:76:ae:fa:a7:3f:fd:50:a1:ca:dd:9a:f2:b8:
70:9d:4a:f0:0a:75:76:36:c1:d6:ba:c8:e2:9f:9f:90:9c:4b:
08:a6:4d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:58:19 2026 by rpki-client