
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/4EED8CBE029911EF96760924C4F9AE02.roa
File: 4EED8CBE029911EF96760924C4F9AE02.roa (raw, json)
Hash identifier: HD165QlFCv1elFOh9Ifxh8lRJ5m8p87EcQJEZyPTWpo=
Subject key identifier: 62:72:F4:EE:42:B6:9C:5F:1F:9B:3E:28:D3:0A:E8:A0:F4:3D:53:86
Certificate issuer: /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3
Certificate serial: 150F
Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/4EED8CBE029911EF96760924C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:45:19 +0000
ROA not before: Wed 16 Apr 2025 16:55:23 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 136557
IP address blocks: 103.108.228.0/24 maxlen: 24
103.108.231.0/24 maxlen: 24
2402:7340:1::/48 maxlen: 48
2402:7340:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl
rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 16:42:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5391 (0x150f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7B15, serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3
Validity
Not Before: Apr 16 16:55:23 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a442ef-6b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:82:2e:02:14:1c:c3:81:35:7e:a5:86:e8:1a:
1f:97:2d:7a:a5:95:cc:40:78:8a:39:43:4f:3e:5c:
cf:a4:45:cc:31:c7:af:0d:e2:ca:0d:fd:5d:69:25:
56:60:96:a7:ed:18:77:d0:71:3d:af:45:ce:33:0f:
9c:b9:01:ea:03:63:ac:30:24:a3:07:be:30:d3:65:
e5:e6:7a:c1:83:0c:2b:1d:b5:3a:86:f0:d1:ce:44:
4f:59:36:32:6e:54:67:87:d8:56:b6:74:45:32:71:
c8:19:9e:36:bf:66:e3:9c:67:85:a2:7e:75:e3:da:
69:05:54:63:44:17:5b:72:28:3b:91:73:db:24:16:
8b:cf:3f:9d:a3:9d:7b:b5:7d:35:f8:0a:18:04:c6:
ac:6e:b9:bc:c4:93:59:c1:63:65:11:2d:ee:87:ce:
25:53:90:c5:b7:16:b3:12:7c:51:24:8a:f2:4d:d6:
68:31:e8:36:94:61:88:87:2b:e1:5f:0d:3c:cd:ad:
bf:95:f1:c8:07:59:db:33:d8:8b:cf:7f:a2:70:5f:
da:48:56:2d:49:64:5c:52:44:17:b0:13:9b:b0:9e:
30:3c:9a:83:82:5c:9b:ff:04:e8:92:14:63:c3:ae:
05:5a:2c:01:66:41:92:4e:40:e5:55:da:74:40:5c:
f4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:72:F4:EE:42:B6:9C:5F:1F:9B:3E:28:D3:0A:E8:A0:F4:3D:53:86
X509v3 Authority Key Identifier:
keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/4EED8CBE029911EF96760924C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.108.228.0/24
103.108.231.0/24
IPv6:
2402:7340:1::/48
2402:7340:3::/48
Signature Algorithm: sha256WithRSAEncryption
14:72:9c:8c:b4:9e:e4:64:3a:6b:ed:65:c0:d1:71:27:7f:25:
31:4b:fb:4b:ab:0e:a0:d1:f8:d7:95:ce:a1:cd:02:5e:3c:0f:
ed:d6:13:42:b8:10:43:af:8b:5e:09:04:fe:d7:f6:19:3f:9c:
3a:66:7b:4e:6b:3b:14:3b:ea:78:45:db:7f:b3:1e:82:0f:1d:
38:2b:2e:a1:aa:e4:ca:b3:63:25:d1:9f:e4:51:b3:68:51:83:
da:af:b4:e0:47:03:1d:fb:64:d9:8e:08:31:8d:0a:d6:e3:eb:
1c:d9:ed:53:7d:da:bd:62:97:bc:03:f9:6b:88:cd:e4:4f:13:
14:d9:3e:94:58:2c:dc:2c:16:e3:f1:08:ef:93:b8:71:01:b1:
a2:f5:f4:ca:04:b8:14:56:58:e8:4c:59:a6:c4:d4:c4:36:60:
cf:fc:90:16:4c:21:51:2c:5a:37:82:21:a4:85:ab:7a:ff:d2:
d3:27:2b:db:2d:c5:62:22:91:e5:7e:02:a3:80:3f:26:37:b6:
3e:85:f7:91:00:23:96:f7:59:fe:c9:81:fb:40:23:9c:c6:bd:
74:17:b6:8d:18:7e:ba:38:de:14:af:0c:75:32:1f:10:b3:c6:
04:18:bd:ef:ba:d1:d1:ab:eb:ba:cf:33:c7:33:59:b5:4a:ec:
e8:3c:30:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:32:16 2026 by rpki-client