
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B490CD0621C911EB991D562EC4F9AE02.roa
File: B490CD0621C911EB991D562EC4F9AE02.roa (raw, json)
Hash identifier: HAKJGo3+54uKtPG7Z+H+eKIrSnUl+M/R2bQu2unHATw=
Subject key identifier: BD:E0:C1:E2:35:78:89:3B:FD:46:19:97:56:4F:DB:F1:DF:FC:51:50
Certificate issuer: /CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
Certificate serial: 107F
Authority key identifier: AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B490CD0621C911EB991D562EC4F9AE02.roa
Signing time: Thu 28 May 2026 17:22:30 +0000
ROA not before: Thu 28 May 2026 17:22:30 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 138538
IP address blocks: 103.113.92.0/22 maxlen: 24
2402:b940::/40 maxlen: 40
2402:b940:200::/39 maxlen: 39
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl
rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 17:25:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4223 (0x107f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3F02, serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
Validity
Not Before: May 28 17:22:30 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a1879d6-73bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:16:62:c4:f8:e2:7c:64:b8:92:ca:ee:34:77:
6a:eb:a1:0c:4b:f5:b1:b0:20:4b:4c:d9:e6:89:85:
e7:5c:f2:d5:32:e6:11:bd:c5:2e:11:e0:bb:b4:f9:
cf:20:af:bb:a8:ce:a4:ab:d1:e8:91:47:93:64:5d:
71:b7:6f:46:61:d7:8a:bc:df:92:ef:ef:bd:32:53:
ae:3b:79:4a:23:f2:88:41:d3:1c:43:9a:d8:78:bb:
e6:e6:c2:5a:eb:7c:2e:17:9a:ae:68:5a:d1:ce:38:
f1:31:dc:17:d7:a6:30:04:7a:c6:03:7f:7b:6d:24:
22:36:54:2e:55:b3:2a:29:c1:82:32:13:4c:63:2c:
31:54:af:03:09:4c:79:32:fb:00:9f:b4:d4:be:7b:
5d:9a:e4:c3:90:39:cf:8b:cf:76:65:b8:84:db:f9:
d0:33:c7:07:05:20:83:ca:b6:73:91:47:b5:fe:41:
65:cc:a3:b7:a4:77:8f:33:c1:ab:4a:5b:00:a1:2e:
b7:4f:40:4a:13:df:4f:48:19:e4:00:59:fd:23:21:
0e:81:a4:a6:18:66:38:ec:65:d8:6c:cd:c2:de:4d:
22:fc:22:5d:f5:d2:71:d8:08:2d:9e:f1:10:29:93:
c5:8f:bf:9d:ed:58:49:ed:56:38:59:a9:e5:bf:e0:
10:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E0:C1:E2:35:78:89:3B:FD:46:19:97:56:4F:DB:F1:DF:FC:51:50
X509v3 Authority Key Identifier:
keyid:AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B490CD0621C911EB991D562EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.113.92.0/22
IPv6:
2402:b940::/40
2402:b940:200::/39
Signature Algorithm: sha256WithRSAEncryption
a7:6a:fb:8e:17:f3:7e:02:a7:e7:b0:16:bd:2c:ed:eb:32:90:
9e:06:3c:4f:5a:29:5d:58:9b:af:aa:3a:c6:89:ed:62:53:bd:
56:79:c5:5f:fb:4e:27:ab:57:a4:08:f6:63:cf:54:61:c7:b9:
29:8c:16:f5:e8:26:df:ac:37:b4:8b:21:ba:75:c6:94:61:e6:
bf:86:f4:6a:44:fa:cc:8f:c0:3e:0d:ea:c1:72:fc:cf:ad:64:
ae:7d:50:4b:54:f8:51:fd:db:84:75:01:31:93:43:37:ae:3b:
db:3b:6b:bf:77:65:70:4f:42:d0:42:19:bd:c2:bd:c1:a5:2b:
cc:6d:7d:f4:40:db:22:4d:e2:f6:3e:f7:47:4a:f6:a2:ee:b5:
6e:f3:a5:e2:13:48:a4:9b:a6:33:9e:6a:d9:f1:19:0f:19:af:
36:67:09:70:98:4b:a9:7e:ee:4b:6b:64:9b:ab:27:34:52:7a:
a6:77:1a:1e:d5:17:f0:e0:84:82:a9:78:ca:09:99:2d:9b:b3:
56:a9:37:df:81:74:42:9f:59:bb:e7:80:a8:d7:d4:e0:da:c1:
5b:24:5c:50:20:7a:93:7c:24:96:83:96:ef:c5:d2:81:d2:f6:
d4:94:bb:52:99:aa:51:67:a2:f4:1f:4d:19:46:b6:98:b6:28:
6f:d7:33:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:28:46 2026 by rpki-client