
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B490CD0621C911EB991D562EC4F9AE02.roa
File: B490CD0621C911EB991D562EC4F9AE02.roa (raw, json)
Hash identifier: rBg1NOWyi7cxpOlSxmQbpoGz0c8wacC//ksLpStwuPw=
Subject key identifier: 65:59:62:C7:DA:A5:5A:6F:D8:EC:C6:59:A5:6E:E5:A1:ED:8C:5F:8B
Certificate issuer: /CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
Certificate serial: 1048
Authority key identifier: AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B490CD0621C911EB991D562EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:57:27 +0000
ROA not before: Fri 16 May 2025 17:52:18 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 138538
IP address blocks: 103.113.92.0/22 maxlen: 24
2402:b940::/40 maxlen: 40
2402:b940:200::/39 maxlen: 39
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl
rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 17:17:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4168 (0x1048)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3F02, serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
Validity
Not Before: May 16 17:52:18 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a461e7-c2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a7:91:76:cb:3e:ab:1a:52:ae:31:b8:56:db:
08:ac:26:a5:f5:2b:18:3d:84:8b:e5:35:f6:e7:8b:
07:0b:55:fa:6f:d2:d8:99:73:c6:ca:b9:4d:f0:fc:
34:94:43:e1:50:a7:9c:dc:70:a2:0d:e5:63:c6:04:
18:de:b1:08:92:72:97:7d:f3:b5:39:17:94:4c:e0:
b2:e1:44:72:55:24:9d:2d:8c:c6:fb:32:c7:96:52:
ac:f1:29:8d:28:cf:89:60:6a:2c:79:05:ba:51:b6:
75:46:9a:38:8b:5c:a6:c3:53:9f:27:4a:db:48:50:
f8:bd:73:6a:1f:a6:58:c5:21:22:8f:c9:f7:ed:f5:
09:65:23:e2:bc:2d:a8:f9:50:70:bd:2c:8c:78:db:
c0:af:39:5b:1d:f7:e1:17:a5:58:a5:24:91:f6:71:
56:fa:bf:ea:5a:eb:8a:ed:d9:02:66:85:9d:25:2c:
14:33:c8:7e:19:14:17:41:d4:19:a3:a5:16:19:d9:
04:57:5b:7a:ee:d4:e7:90:54:3a:9f:1b:37:99:5b:
37:34:15:f8:0b:d0:cb:6f:2a:81:ab:cc:db:59:8a:
32:41:71:08:57:8c:fa:50:15:62:d1:d2:74:87:2c:
74:cc:a0:d3:79:1d:f3:d1:89:8a:b7:89:c2:24:a4:
11:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:59:62:C7:DA:A5:5A:6F:D8:EC:C6:59:A5:6E:E5:A1:ED:8C:5F:8B
X509v3 Authority Key Identifier:
keyid:AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/B490CD0621C911EB991D562EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.113.92.0/22
IPv6:
2402:b940::/40
2402:b940:200::/39
Signature Algorithm: sha256WithRSAEncryption
35:71:92:e3:a0:c4:83:7a:f9:94:7a:f6:34:09:d3:e0:de:ad:
d2:d8:f8:ee:06:28:b3:97:e6:74:8f:fe:25:a7:06:14:df:ec:
eb:4c:96:0f:27:a5:f0:01:3a:9f:02:a7:aa:28:17:d2:d3:de:
59:25:d9:89:6d:51:93:ed:3f:aa:4d:04:16:ba:bf:61:1b:27:
5d:29:a2:08:b2:38:f7:ad:de:40:16:63:42:5f:42:7d:18:0b:
3d:15:51:88:f0:6c:3f:47:13:ea:33:c4:84:31:1a:47:5b:36:
5d:09:a0:17:17:bd:13:82:ff:87:04:32:9d:f5:2e:a5:f2:1a:
3f:b6:11:72:34:dc:18:01:76:2e:8e:82:4a:59:88:e7:22:a8:
68:02:b5:a5:a9:cb:9e:77:a6:50:df:06:af:9a:21:04:50:e2:
ce:b3:55:9a:58:3e:e9:58:55:24:b1:e7:c7:76:f6:ce:a9:97:
31:fb:5e:2b:31:21:7a:df:93:11:bd:c0:6b:52:5a:cd:31:c0:
66:f7:71:8b:fd:d3:01:75:44:e0:cd:23:8f:49:de:92:6e:af:
bd:b7:e7:97:df:1e:56:51:e3:d8:ae:ee:3e:ef:25:35:94:54:
4c:fe:f6:91:cc:03:4d:70:e5:39:21:af:fa:de:66:0e:bf:4d:
e6:02:aa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:29:09 2026 by rpki-client