
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/E24736EC9D9011EC89314083C4F9AE02.roa
File: E24736EC9D9011EC89314083C4F9AE02.roa (raw, json)
Hash identifier: 7UZYPuwQDAPrdcrwJXsBYa/SwYNkxbesU3WpZSjYsEY=
Subject key identifier: 47:D4:4A:52:4A:A4:B5:7A:B0:5F:80:18:3A:79:8F:9B:5C:E4:74:A9
Certificate issuer: /CN=A91E4EF7/serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B
Certificate serial: 1BC4
Authority key identifier: AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/E24736EC9D9011EC89314083C4F9AE02.roa
Signing time: Mon 02 Mar 2026 05:15:41 +0000
ROA not before: Fri 10 Oct 2025 17:14:50 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 133326
IP address blocks: 103.38.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl
rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 16:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7108 (0x1bc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4EF7, serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B
Validity
Not Before: Oct 10 17:14:50 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a51cfd-c31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:91:79:7d:54:c0:7a:20:51:c8:09:bd:b0:ab:
04:41:37:48:29:23:c1:ca:4d:6a:02:70:09:9f:07:
f6:0f:26:03:90:d6:3b:4d:72:5b:88:c5:8c:7d:da:
1f:77:b3:58:bd:52:0f:ed:80:95:0a:1a:16:06:05:
00:cd:5f:ef:69:28:50:f8:68:b0:0b:97:6f:16:1e:
41:ae:b2:ac:ef:22:3e:2f:09:d8:da:34:a1:1b:51:
59:04:03:d9:c5:52:9b:2b:32:58:7e:72:3c:16:78:
60:b4:9f:5b:00:71:bf:a7:55:93:f9:a1:8c:7f:56:
e6:99:b1:40:e6:49:87:82:7b:64:1f:14:ee:6e:89:
cd:26:24:50:41:12:1c:e0:98:6b:8c:73:27:0a:4c:
ab:58:b2:66:71:c1:bf:10:fc:72:79:a1:09:d0:c7:
d5:02:09:54:83:f7:88:7f:71:42:b8:f1:0b:3c:6c:
9d:85:6d:a7:e4:ee:c4:03:35:07:f3:3e:12:36:65:
e5:af:36:e6:57:02:76:3f:53:1e:fd:37:6c:28:26:
3f:d5:e5:a5:e5:aa:8c:ea:3f:b8:b0:66:e3:95:b7:
d7:03:3c:6d:e7:d4:74:c9:c0:09:3f:04:1b:ce:aa:
93:62:e7:0c:5a:e9:c9:db:ba:50:3a:ba:f2:85:6d:
8d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D4:4A:52:4A:A4:B5:7A:B0:5F:80:18:3A:79:8F:9B:5C:E4:74:A9
X509v3 Authority Key Identifier:
keyid:AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/E24736EC9D9011EC89314083C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.38.120.0/22
Signature Algorithm: sha256WithRSAEncryption
97:48:65:5d:12:df:cc:d8:64:9f:1b:88:ed:0c:59:f8:7b:e2:
9d:20:61:ad:23:14:e1:4b:64:46:78:36:92:62:72:f6:d1:09:
55:55:75:ad:a3:a8:26:ce:4b:bf:0e:94:a8:d0:ae:8b:19:fb:
85:70:4d:3f:f4:1f:e2:4c:49:f7:63:da:76:b3:37:fa:c4:08:
fe:3d:f5:f8:33:bf:87:95:2f:1b:2a:e1:81:da:63:3b:11:74:
bd:f8:4e:85:fd:b9:78:91:7d:a0:fe:2f:dc:75:1f:5f:0e:04:
5d:fe:1b:c7:6f:2e:85:29:b3:0a:ba:74:88:1d:dd:ee:eb:0e:
22:94:19:12:3b:17:db:a6:80:e5:38:7c:a9:d8:4a:34:06:d9:
bf:ec:75:3d:13:58:79:0e:19:1b:48:8e:58:91:02:40:2e:f2:
66:2e:d5:5e:8c:a6:f4:58:1c:c8:6c:6b:0c:60:96:c7:78:12:
4b:73:68:18:d1:94:6f:d3:d6:56:d2:19:8c:f6:bc:11:ab:96:
ea:83:87:83:07:5c:ad:d7:75:ca:05:87:79:66:00:4e:4a:a6:
1a:78:47:f1:36:4d:03:38:4a:02:5a:a5:2f:0e:48:5e:1a:c9:
8e:cd:04:de:75:22:0a:21:22:7b:70:95:62:8b:f8:06:9d:34:
b9:3a:ed:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:56:33 2026 by rpki-client