
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/E049FDF87A4511EBBB2D0A52C4F9AE02.roa
File: E049FDF87A4511EBBB2D0A52C4F9AE02.roa (raw, json)
Hash identifier: m1jd0Q2D9k3+2i/d4GmRzebyVctCB9sAwMGAQxkAF/8=
Subject key identifier: 53:F3:01:9D:47:19:33:1B:07:4B:4D:60:31:A6:87:32:21:43:88:1F
Certificate issuer: /CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
Certificate serial: 10AF
Authority key identifier: AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/E049FDF87A4511EBBB2D0A52C4F9AE02.roa
Signing time: Wed 19 Aug 2026 08:02:36 +0000
ROA not before: Wed 19 Aug 2026 08:02:36 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 132825
IP address blocks: 103.113.92.0/22 maxlen: 24
103.140.228.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl
rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 17:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4271 (0x10af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3F02, serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
Validity
Not Before: Aug 19 08:02:36 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a85631c-3641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:31:bb:ff:a0:a1:49:d7:a1:65:8f:1e:9e:96:
53:e3:87:7b:65:83:65:18:85:b4:c9:e9:0f:b6:69:
56:0b:b5:51:e7:78:8d:e9:41:72:db:d6:80:b9:4d:
b7:2c:13:08:ef:a0:9f:92:73:3e:8b:55:34:e4:11:
e4:ef:ff:98:2e:b0:80:d8:60:79:3f:d7:d0:c3:47:
71:4f:ad:a4:63:c5:bf:0b:7f:4b:e5:82:32:24:c1:
b7:bd:06:9b:45:ea:a1:ca:c4:98:6f:b8:c7:1a:e9:
4e:bc:f7:1e:24:23:cd:d1:30:ab:d3:d3:b7:c5:7c:
2c:f6:bf:c1:11:74:00:5d:e3:21:77:fe:b4:ef:38:
58:0f:73:a6:c2:51:ca:47:63:84:f7:b3:07:3f:21:
5b:32:cf:dd:df:68:27:45:3b:01:f2:bc:70:54:f6:
af:f7:57:12:73:33:5a:be:38:c8:37:02:1a:69:c8:
15:0d:dd:bd:89:7c:08:0c:19:45:f7:5f:97:f1:cc:
45:8d:4a:34:7b:af:0a:9b:1c:60:d8:1f:a9:e5:56:
4b:20:d7:3e:84:d5:48:b6:e6:88:50:e3:25:cb:63:
03:80:aa:a8:d4:f6:6a:75:28:14:64:00:61:ac:a1:
5a:38:ca:aa:52:a5:b7:c0:4f:2e:14:2e:33:4e:8a:
36:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F3:01:9D:47:19:33:1B:07:4B:4D:60:31:A6:87:32:21:43:88:1F
X509v3 Authority Key Identifier:
keyid:AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/E049FDF87A4511EBBB2D0A52C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.113.92.0/22
103.140.228.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:6e:fa:62:39:32:42:c3:dd:dd:5f:4a:24:d6:8a:ae:bb:7e:
8a:29:39:1a:65:db:93:ae:f8:ae:be:2a:4d:8a:ac:0a:d6:13:
c5:3c:b0:98:5d:3f:4e:24:93:71:6c:10:b3:06:30:b7:1a:f3:
56:52:22:e7:e9:1f:69:3d:13:02:67:7a:05:1d:09:f0:b0:2c:
04:13:a5:e9:f1:82:05:c0:b6:bb:8d:ba:9f:79:ce:9b:f7:38:
37:7a:f0:db:a3:28:79:92:f8:2f:d4:bb:e1:41:45:6a:c0:1c:
e9:df:99:be:2c:81:e2:fc:22:5b:ea:ab:f0:b6:33:3f:03:0b:
0f:6b:ad:25:8b:68:2d:c5:19:30:73:cf:b2:d4:ba:2a:c4:ac:
a7:f5:b8:5b:c4:d0:fb:80:c5:e4:e5:d8:2f:5b:85:db:6e:76:
7a:81:32:9c:61:e6:f0:6b:3d:b5:e9:00:65:95:31:5d:22:91:
3c:14:e6:64:c6:dc:ad:a4:7a:e0:bc:20:f9:8b:1c:87:a0:9d:
91:95:06:97:ac:24:de:fc:af:2e:21:b3:a0:51:8e:ed:ea:ac:
b1:cf:2e:64:85:da:ee:34:80:b5:c3:15:06:cc:86:e9:05:fe:
85:2b:09:d2:b5:63:e2:d6:8a:31:85:68:a7:79:b8:f7:66:77:
2a:0c:9f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:34:55 2026 by rpki-client