
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/452D9EF494F811ED85ADE381C4F9AE02.roa
File: 452D9EF494F811ED85ADE381C4F9AE02.roa (raw, json)
Hash identifier: oaiaqucuuW2GkSf9+4cz6o/y7s/8O/quv+/nOFG+UjI=
Subject key identifier: 50:23:39:F5:7E:59:DD:94:73:32:FF:CC:DB:86:7E:10:20:99:9A:9C
Certificate issuer: /CN=A91C8066/serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E
Certificate serial: 0254
Authority key identifier: 16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/452D9EF494F811ED85ADE381C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:08:33 +0000
ROA not before: Wed 11 Feb 2026 02:21:53 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 137406
IP address blocks: 103.107.156.0/22 maxlen: 24
2403:8c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl
rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 01:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 596 (0x254)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8066, serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E
Validity
Not Before: Feb 11 02:21:53 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a41021-107d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ef:ac:ed:14:86:c0:83:9f:27:e8:b5:d9:88:
0f:4e:9f:05:28:71:56:a5:01:fe:98:49:d0:a6:31:
59:48:0b:42:ad:16:8b:0b:a8:1d:f9:7d:16:fc:a7:
b5:ee:53:2f:0c:ef:9d:d2:25:d4:2b:b4:fb:95:9c:
0c:46:41:33:1a:e7:5c:71:67:84:2f:6b:6b:50:a7:
0c:9c:61:9a:5c:21:4f:4c:fd:3d:a7:5f:ae:03:d9:
4c:ad:c8:46:53:75:0d:c5:09:79:d1:6b:d2:c5:d6:
24:6a:53:d9:2e:ef:15:d6:4d:ab:a7:a1:39:c4:bb:
5b:e5:81:f4:28:b9:32:ee:b6:f9:08:36:2e:43:77:
8c:4c:f8:76:87:43:08:89:92:69:58:70:35:13:96:
7f:ad:ca:e6:92:79:8a:50:e7:b6:8f:b9:5c:be:bc:
51:5c:cc:ba:0e:d6:ef:01:be:51:3b:21:ac:ae:3c:
35:96:e9:24:8e:65:c8:6e:08:f5:16:14:e1:0e:57:
f8:94:d8:aa:68:d6:34:b8:e4:3e:8c:1c:0f:d6:0b:
a4:13:93:35:08:5a:fa:cd:62:51:ad:2e:03:57:2f:
fe:fe:a9:48:38:51:22:84:5a:e3:24:09:a6:6e:51:
02:01:91:ed:77:14:11:d2:27:d0:ce:55:94:48:73:
a2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:23:39:F5:7E:59:DD:94:73:32:FF:CC:DB:86:7E:10:20:99:9A:9C
X509v3 Authority Key Identifier:
keyid:16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/452D9EF494F811ED85ADE381C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.107.156.0/22
IPv6:
2403:8c0::/32
Signature Algorithm: sha256WithRSAEncryption
ae:bb:b0:d2:89:7d:d3:bc:60:1f:c4:f6:d8:bb:c9:0f:af:a5:
d4:41:1c:ad:30:5e:cb:21:37:67:92:e8:09:95:27:79:61:4d:
98:cd:ff:78:a9:21:49:82:bb:0a:c0:09:40:d0:c5:0a:38:85:
bf:b7:d7:71:4c:c7:9b:98:27:ef:45:4c:0a:3d:4c:d9:f2:cc:
a4:a0:d0:0b:b8:5d:84:e4:a4:52:42:1f:73:44:a6:24:40:94:
7b:24:6b:f7:02:08:6f:c8:f6:a6:73:14:31:ea:67:39:97:09:
48:2d:03:d6:c5:32:57:4e:06:ec:fc:f5:0c:de:ee:6c:83:a8:
2d:51:64:e9:58:6a:e2:f7:6a:96:b6:45:80:a9:10:40:31:5a:
76:c8:fe:30:bc:6a:19:38:e0:a0:e9:e9:55:d5:6d:97:61:5c:
b9:89:3a:39:ed:f8:09:c4:be:f7:ff:d2:8e:7d:06:84:64:ac:
cd:a4:92:1d:d4:d5:65:ca:37:c8:3f:9f:b5:01:6e:94:be:7d:
6e:6b:24:30:c8:c7:71:d3:db:80:fc:fb:45:6d:99:36:2a:db:
a3:28:5e:cd:ce:aa:32:c2:f5:5d:be:ba:df:4c:a4:53:65:34:
1e:e9:37:39:37:d4:ec:22:72:d4:c2:bc:9c:c2:1b:19:81:19:
fe:58:28:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 20:37:27 2026 by rpki-client