
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DEDE6B3CC8A911EFB805FB63C4F9AE02.roa
File: DEDE6B3CC8A911EFB805FB63C4F9AE02.roa (raw, json)
Hash identifier: eTaM2SU1horTXKEuOS9PVwx3GGBErFgVkCBHE0SrSsI=
Subject key identifier: F4:68:11:43:B9:D3:95:71:9B:19:B6:98:88:1F:F4:C5:88:FA:7E:77
Certificate issuer: /CN=A91D72CC/serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F
Certificate serial: 0156
Authority key identifier: DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DEDE6B3CC8A911EFB805FB63C4F9AE02.roa
Signing time: Fri 02 Oct 2026 18:35:14 +0000
ROA not before: Fri 02 Oct 2026 18:35:14 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 58689
IP address blocks: 103.141.174.0/23 maxlen: 23
103.141.174.0/24 maxlen: 24
103.141.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl
rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 17:42:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D72CC, serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F
Validity
Not Before: Oct 2 18:35:14 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6abff962-0d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:55:0a:73:74:e1:ca:85:dc:d0:90:59:08:5a:
06:5a:b3:ef:5c:96:c7:f1:a1:d7:56:e7:a6:1a:54:
41:16:4f:70:46:21:19:95:47:88:53:88:90:55:f9:
80:d2:3b:02:46:2e:0a:56:e6:0e:08:ca:fd:91:98:
f5:9e:a2:07:cf:5b:be:f4:f6:7e:dd:87:5d:97:86:
36:f0:db:ba:1e:5e:25:91:67:6a:0f:43:90:b5:eb:
0c:3d:ba:15:23:eb:21:d2:b4:b3:a0:98:24:9b:39:
2f:7c:f8:bf:9e:0d:b8:99:f1:3d:41:06:25:98:ca:
c6:06:df:70:e9:1d:91:6a:fc:7b:ff:f9:e6:22:39:
d8:f4:e4:28:b7:18:70:a6:8f:a9:ac:86:c9:96:3e:
78:a0:79:41:0d:38:b9:09:6a:fe:72:b5:87:d1:9d:
2c:cd:3f:4f:b0:e3:be:46:c5:07:d1:03:05:dd:01:
22:f6:e1:76:06:75:b6:1f:ef:a8:bb:00:26:73:dc:
d6:ab:fc:3d:16:30:05:0d:c5:83:f6:e0:79:34:88:
3f:a9:9d:e1:13:12:f9:a0:5d:e8:d0:3b:ee:18:99:
db:d8:45:20:01:92:71:c5:40:b5:58:aa:80:65:b5:
52:5b:3d:15:01:01:d2:ba:c2:0f:13:0f:74:36:e2:
61:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:68:11:43:B9:D3:95:71:9B:19:B6:98:88:1F:F4:C5:88:FA:7E:77
X509v3 Authority Key Identifier:
keyid:DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DEDE6B3CC8A911EFB805FB63C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.141.174.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:49:bb:74:55:7c:2a:ba:48:08:8f:47:51:9b:cd:55:fd:a0:
c1:d4:eb:6d:d9:be:16:b3:0c:91:ae:15:1c:13:21:89:53:d4:
2d:96:c1:82:5b:aa:ec:6e:f9:5a:e0:83:8c:89:d2:38:a5:6f:
31:45:81:40:e3:4d:4b:cc:43:c3:c7:59:dd:e0:c9:a2:e6:92:
10:4e:45:3b:6a:1e:69:0f:c2:dc:55:72:4c:91:d1:64:88:c1:
ef:e2:53:6d:80:9d:f8:9d:a7:7b:b9:5e:e1:dc:aa:14:ad:e0:
4f:01:96:e7:c9:ec:9e:d2:6e:4d:c4:52:31:41:65:a3:09:47:
ca:d2:b0:7c:84:83:fa:bb:55:9d:04:cd:35:62:35:9a:a6:75:
e4:15:54:25:0a:ce:04:f5:57:0f:6d:16:76:0e:7d:d9:ce:14:
47:53:43:b7:f7:31:1e:af:88:cf:c9:55:26:e6:73:34:c3:90:
4f:af:94:50:cd:9e:42:a1:b9:2f:56:4b:32:01:6a:2f:a7:4d:
c1:57:fd:bf:0b:e0:a9:a6:6a:fb:c8:cf:cd:29:f9:5d:ca:13:
13:9d:17:6c:45:f4:26:2c:b3:6e:92:d6:30:2b:3d:8e:61:80:
e9:97:76:58:db:90:e5:da:7f:8c:0a:ee:78:fd:be:d1:24:db:
94:9b:f6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 00:59:35 2026 by rpki-client