
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/C4CA725C687011EFA523204EC4F9AE02.roa
File: C4CA725C687011EFA523204EC4F9AE02.roa (raw, json)
Hash identifier: bpWSduLsJ+bNrVqj6EUtZuCEBbM1lTJcE6awQ1r5bxY=
Subject key identifier: E2:38:8F:CD:03:D1:D2:5F:1D:20:0F:A7:57:39:A3:D7:2F:8F:4E:2D
Certificate issuer: /CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F
Certificate serial: 0276
Authority key identifier: 2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/C4CA725C687011EFA523204EC4F9AE02.roa
Signing time: Tue 13 Oct 2026 10:03:50 +0000
ROA not before: Tue 13 Oct 2026 10:03:50 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 137967
IP address blocks: 103.233.176.0/23 maxlen: 23
103.233.176.0/24 maxlen: 24
103.233.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl
rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 02:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 630 (0x276)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAC84, serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F
Validity
Not Before: Oct 13 10:03:50 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6ace0206-f807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bb:e6:15:a0:bf:27:cc:4b:0a:d4:40:4f:03:
ca:ac:be:94:71:71:dc:c2:21:d2:c8:eb:94:c4:c7:
6f:87:79:61:7d:30:c4:f8:7e:87:6e:d0:3c:ea:2b:
cc:9d:5d:b9:b0:51:ff:c6:35:26:11:7a:6a:9d:88:
3c:be:a8:06:69:03:68:1b:7a:73:6b:08:3f:d2:9f:
ad:a1:46:6e:f8:3a:c9:6a:c9:d4:02:f7:e7:d3:cd:
28:31:07:cc:21:3a:a7:58:9b:fc:8d:13:61:c2:0d:
0f:fa:bc:21:43:ee:83:d0:5d:02:7e:c7:b2:a2:f9:
d1:f3:7c:97:1c:0b:aa:94:7d:44:e3:db:d7:7c:01:
31:42:4d:b7:09:18:96:90:2d:1c:ee:23:30:ac:05:
1a:12:be:eb:e8:16:8c:f3:22:56:16:f5:a5:2c:a2:
9d:1a:83:08:f3:dc:6f:48:ba:31:e2:f1:1f:cc:b3:
d7:61:96:71:32:94:fa:f6:26:54:49:fb:91:60:72:
3c:8b:b7:c5:2d:23:bd:fb:cb:a1:6d:24:5a:a4:56:
79:d0:92:24:c1:b8:28:dc:2f:58:93:e0:6a:f7:ee:
b3:24:f5:4c:44:71:e1:d2:19:5c:5b:60:73:36:44:
91:3a:43:5c:b6:a2:25:11:cc:03:3b:2b:16:42:c6:
64:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:38:8F:CD:03:D1:D2:5F:1D:20:0F:A7:57:39:A3:D7:2F:8F:4E:2D
X509v3 Authority Key Identifier:
keyid:2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/C4CA725C687011EFA523204EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.233.176.0/23
Signature Algorithm: sha256WithRSAEncryption
99:14:08:e1:e4:05:a2:1e:38:b9:ff:0f:74:c3:c0:77:f5:5d:
da:a1:3c:63:8f:8e:e4:48:c3:ff:ba:a0:e4:9f:82:0f:67:38:
9e:44:4b:3f:83:9a:11:b2:ff:15:1b:9b:c6:fc:dc:bd:da:18:
2f:2f:69:85:e9:46:0c:d2:f6:1e:01:d5:a9:06:e0:f3:cf:bd:
39:61:21:f5:ed:d3:26:56:0e:b6:fd:8f:a7:0e:02:2c:69:c7:
b1:fc:5c:2f:16:b5:29:97:e9:04:b7:c7:46:42:9b:03:f1:28:
d2:34:30:57:e9:75:4b:fb:17:e5:a0:06:7d:11:7f:cf:60:73:
e1:1e:32:98:97:2f:0d:09:73:1a:26:e7:c3:2d:6f:04:42:72:
1f:57:26:fa:be:27:eb:0a:62:45:96:5f:9d:7b:4a:06:1b:50:
c5:c0:d4:85:65:7f:b7:21:b6:1b:bd:b2:b8:bb:5f:1e:f5:6c:
a7:71:42:26:40:eb:a7:10:dd:ee:80:dd:77:4a:e0:a3:d8:13:
1a:36:ed:b4:e6:3a:29:16:88:96:e6:83:1c:f0:cb:63:e5:5b:
6f:0f:54:43:12:2f:06:e5:85:8e:e0:10:a3:6b:8d:35:76:dd:
ac:d1:f2:cd:a6:b0:e1:ce:29:16:00:17:fd:1f:7d:08:b5:03:
e9:b3:ed:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:18:30 2026 by rpki-client