
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/4AB730E0800B11EC84B3FA3BC4F9AE02.roa
File: 4AB730E0800B11EC84B3FA3BC4F9AE02.roa (raw, json)
Hash identifier: 9Txns+lYDH2NGybf0zisEaJJOnS0rlj9zOj9oHYOVvw=
Subject key identifier: A0:0F:A8:E9:A7:5F:4C:73:BC:B2:9B:6A:90:DC:A1:7B:1E:13:37:1F
Certificate issuer: /CN=A91D45A2/serialNumber=1C043077241573CEB858D951F02B22057BA396E7
Certificate serial: 045A
Authority key identifier: 1C:04:30:77:24:15:73:CE:B8:58:D9:51:F0:2B:22:05:7B:A3:96:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAQwdyQVc864WNlR8CsiBXujluc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/4AB730E0800B11EC84B3FA3BC4F9AE02.roa
Signing time: Sat 03 Jan 2026 00:19:29 +0000
ROA not before: Sat 03 Jan 2026 00:19:29 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 138958
IP address blocks: 103.180.200.0/23 maxlen: 23
103.180.200.0/24 maxlen: 24
103.180.201.0/24 maxlen: 24
2400:5520::/32 maxlen: 32
2400:5520::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.crl
rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAQwdyQVc864WNlR8CsiBXujluc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:22:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1114 (0x45a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D45A2, serialNumber=1C043077241573CEB858D951F02B22057BA396E7
Validity
Not Before: Jan 3 00:19:29 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69586091-1c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:93:7c:6a:f2:57:d9:b6:b2:45:2a:9a:d1:aa:
d2:7d:3e:2b:b4:cc:0f:ba:e8:94:07:81:13:e0:f7:
35:5b:ca:9c:48:93:87:9a:eb:ad:e4:1d:27:c4:9a:
12:9c:14:e3:8c:d8:bb:b5:9b:15:b4:24:15:53:4d:
fd:4a:5c:66:71:74:38:d3:26:fd:da:b4:03:c3:a3:
f2:2b:85:27:2f:6e:e1:b7:2f:69:1f:20:aa:ea:5a:
31:aa:e7:f9:52:6d:0c:96:9b:b2:ae:3a:26:2b:7e:
b1:a1:57:bb:6e:ed:bd:07:20:06:d5:56:a2:66:10:
91:b2:c8:48:6f:a5:c4:bf:c8:53:9b:1e:81:f9:58:
18:57:1a:f0:a9:2c:11:d0:50:11:57:a0:99:b9:30:
7a:2a:19:17:4f:ce:55:d6:79:63:6a:6c:c7:36:56:
61:a9:28:97:dd:0b:d2:02:16:7a:b7:f2:e5:7e:5b:
6d:ff:d6:69:a4:fa:83:c6:9b:ac:c6:e2:22:2e:43:
5e:df:f6:ad:01:fc:41:b7:61:d9:4a:1d:59:2a:53:
24:05:b6:bb:dc:2e:28:61:0a:8b:0d:4b:dd:39:c9:
76:19:4d:15:55:72:e9:63:8d:25:e9:22:56:30:b5:
16:81:53:4f:dc:d1:72:31:18:28:97:7e:9d:70:34:
f8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0F:A8:E9:A7:5F:4C:73:BC:B2:9B:6A:90:DC:A1:7B:1E:13:37:1F
X509v3 Authority Key Identifier:
keyid:1C:04:30:77:24:15:73:CE:B8:58:D9:51:F0:2B:22:05:7B:A3:96:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAQwdyQVc864WNlR8CsiBXujluc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/4AB730E0800B11EC84B3FA3BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.200.0/23
IPv6:
2400:5520::/32
Signature Algorithm: sha256WithRSAEncryption
a7:49:bd:2b:2e:ce:68:e1:6e:90:6e:09:dd:a8:eb:46:5c:1c:
1a:f7:00:11:e5:8c:86:d1:53:3e:f6:88:33:de:50:cc:67:c2:
d1:2d:9c:59:ce:0f:5f:41:29:0b:1d:17:e0:74:30:28:76:99:
a1:15:85:e4:0a:f5:ad:70:fe:b3:a0:7d:7f:af:08:79:55:1f:
dd:5e:d5:fa:cb:8e:fe:7f:5a:20:7f:20:96:9b:57:5d:4a:3a:
e9:b9:44:01:13:33:a8:ec:84:bc:7d:25:af:40:c0:52:b0:a3:
c5:02:b0:40:7f:2b:1f:94:70:f8:cc:43:03:3b:3a:81:a0:96:
24:e8:3a:bd:27:d7:86:76:6e:e4:ba:09:bd:72:43:dd:5e:87:
39:dd:18:f6:07:f5:94:08:47:a6:33:56:02:76:32:15:ef:d1:
62:2c:b1:bd:a7:c5:6b:c2:f6:02:7d:09:c8:c9:10:7c:99:f3:
cc:40:b2:4b:c5:8a:ee:3f:d8:e5:b5:92:c2:4f:6b:0b:f8:0e:
58:2d:b5:fe:91:25:ff:dc:4d:4e:50:bf:c8:1d:c3:36:e3:60:
52:93:b1:d5:30:90:6b:ae:f8:31:8b:ce:f0:20:16:08:e9:d2:
da:d9:e7:6d:b7:ae:5a:2d:d6:95:c4:ae:4c:f6:2c:c8:44:6e:
65:22:94:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:11:30 2026 by rpki-client