
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/A9FF43AE9ABD11F1884A0E584611F970.roa
File: A9FF43AE9ABD11F1884A0E584611F970.roa (raw, json)
Hash identifier: XmkyGDgjhGiUJuJ/QakCaJv3BagtT8L6vuw2bfv1WzM=
Subject key identifier: 23:4A:4B:C0:A2:39:A9:C1:EE:DC:FE:06:EA:64:69:FC:5A:22:08:43
Certificate issuer: /CN=A91FF639/serialNumber=A149E7FD4D7906FC1A6341298655DA8185F29014
Certificate serial: 14A2
Authority key identifier: A1:49:E7:FD:4D:79:06:FC:1A:63:41:29:86:55:DA:81:85:F2:90:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/A9FF43AE9ABD11F1884A0E584611F970.roa
Signing time: Tue 18 Aug 2026 04:31:22 +0000
ROA not before: Tue 18 Aug 2026 04:31:22 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 137952
IP address blocks: 103.118.44.0/22 maxlen: 22
103.118.44.0/24 maxlen: 24
103.118.45.0/24 maxlen: 24
103.118.46.0/24 maxlen: 24
103.118.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.crl
rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 16:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5282 (0x14a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF639, serialNumber=A149E7FD4D7906FC1A6341298655DA8185F29014
Validity
Not Before: Aug 18 04:31:22 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a83e01a-5833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:eb:c4:08:c5:a5:e0:42:5c:9a:84:8a:e5:
33:8a:af:41:ad:b0:d9:38:d6:f4:37:62:4e:46:11:
ed:9b:89:ac:da:34:0b:89:29:33:64:cb:7a:dd:3d:
c8:20:6a:8e:22:19:97:e0:aa:b5:8a:40:97:d6:df:
dd:a2:36:33:5c:29:da:fa:46:72:ff:6b:95:bf:2e:
ca:9a:de:b4:1e:cd:cc:69:e8:d2:5c:d5:5a:b0:fb:
2c:ee:83:86:c9:76:5d:c2:60:d3:5c:6e:8e:01:db:
42:fb:af:dc:7d:73:98:b1:a1:45:32:bc:e2:fb:17:
a8:cb:0f:27:18:e6:89:4b:74:e2:e3:ab:d9:99:e1:
61:2e:e1:a7:4a:92:32:6f:dd:e0:2f:61:fe:1c:8e:
da:63:32:74:92:96:9a:1e:3e:07:97:6a:ce:cd:3c:
37:8a:b6:15:d3:06:a8:3b:fa:12:a7:83:2b:fc:d4:
19:44:ff:e1:49:cf:3e:22:ae:1c:ea:ef:81:61:10:
7c:7e:b9:b7:c3:04:ca:f8:23:a3:c6:b9:31:06:aa:
1e:ed:63:2d:f6:41:49:04:3f:6e:e3:40:f2:c2:ff:
5f:63:52:3b:ae:f3:e6:2e:3b:a2:04:58:d0:d3:ef:
88:51:ba:fe:50:4d:90:53:f9:c0:69:41:45:51:81:
41:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4A:4B:C0:A2:39:A9:C1:EE:DC:FE:06:EA:64:69:FC:5A:22:08:43
X509v3 Authority Key Identifier:
keyid:A1:49:E7:FD:4D:79:06:FC:1A:63:41:29:86:55:DA:81:85:F2:90:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/A9FF43AE9ABD11F1884A0E584611F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.118.44.0/22
Signature Algorithm: sha256WithRSAEncryption
25:71:bb:73:d6:b6:21:c5:0a:ef:0f:cc:e5:c8:66:d5:b9:df:
a5:c2:10:0c:ff:18:e1:a2:4e:d9:55:d2:98:3f:19:a4:9f:83:
c6:b6:c5:22:b6:fa:ed:25:ef:ef:da:7d:bd:69:4a:99:9a:4f:
73:1f:07:00:68:57:ec:18:71:bf:cd:a2:71:71:b9:8a:cc:0c:
cc:61:18:8e:fc:55:a7:5d:03:38:b6:f8:a0:00:55:ee:bf:c3:
8f:29:b5:95:c0:fb:a6:ca:00:aa:64:21:27:b0:de:70:dd:4e:
cb:f4:24:c5:15:a4:aa:fe:57:78:9e:67:ba:a5:97:a3:e3:3e:
06:7d:49:53:da:2b:62:fd:cb:05:a2:ca:ee:ee:b2:8d:ff:f9:
c1:5c:2c:2f:88:59:95:fe:92:5e:59:5e:03:e9:d9:59:17:5a:
e9:7e:f8:45:14:23:7e:8c:de:31:8a:ee:23:59:9f:71:43:f0:
d2:ac:96:17:29:a7:f2:1d:84:05:84:8d:35:b7:82:9d:1a:01:
21:99:91:58:87:21:28:e3:83:fd:48:48:26:53:ff:e9:c7:ed:
5f:07:f4:77:d6:0c:a8:a8:0b:8e:42:4a:43:46:f4:51:85:80:
51:8e:6f:f0:c5:60:91:26:b8:77:b3:f2:78:aa:2e:0f:ae:45:
05:11:a8:d8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICFKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkY2MzkxMTAvBgNVBAUTKEExNDlFN0ZENEQ3OTA2RkMxQTYzNDEyOTg2NTVEQTgx
ODVGMjkwMTQwHhcNMjYwODE4MDQzMTIyWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTgzZTAxYS01ODMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtuzrxAjFpeBCXJqEiuUziq9BrbDZONb0N2JORhHtm4ms2jQLiSkzZMt63T3I
IGqOIhmX4Kq1ikCX1t/dojYzXCna+kZy/2uVvy7Kmt60Hs3MaejSXNVasPss7oOG
yXZdwmDTXG6OAdtC+6/cfXOYsaFFMrzi+xeoyw8nGOaJS3Ti46vZmeFhLuGnSpIy
b93gL2H+HI7aYzJ0kpaaHj4Hl2rOzTw3irYV0waoO/oSp4Mr/NQZRP/hSc8+Iq4c
6u+BYRB8frm3wwTK+COjxrkxBqoe7WMt9kFJBD9u40Dywv9fY1I7rvPmLjuiBFjQ
0++IUbr+UE2QU/nAaUFFUYFBMwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCNKS8Ci
OanB7tz+BupkafxaIghDMB8GA1UdIwQYMBaAFKFJ5/1NeQb8GmNBKYZV2oGF8pAU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjYzOS9BRUYwNjhCODkw
RUMxMUU4ODNDM0Q0N0JDNEY5QUUwMi9vVW5uX1UxNUJ2d2FZMEVwaGxYYWdZWHlr
QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29Vbm5fVTE1QnZ3YVkwRXBobFhhZ1lYeWtCUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkY2MzkvQUVGMDY4Qjg5MEVDMTFFODgzQzNENDdCQzRGOUFFMDIvQTlGRjQzQUU5
QUJEMTFGMTg4NEEwRTU4NDYxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ3YsMA0GCSqGSIb3DQEBCwUAA4IBAQAlcbtz1rYhxQrvD8zlyGbV
ud+lwhAM/xjhok7ZVdKYPxmkn4PGtsUitvrtJe/v2n29aUqZmk9zHwcAaFfsGHG/
zaJxcbmKzAzMYRiO/FWnXQM4tvigAFXuv8OPKbWVwPumygCqZCEnsN5w3U7L9CTF
FaSq/ld4nme6pZej4z4GfUlT2iti/csFosru7rKN//nBXCwviFmV/pJeWV4D6dlZ
F1rpfvhFFCN+jN4xiu4jWZ9xQ/DSrJYXKafyHYQFhI01t4KdGgEhmZFYhyEo44P9
SEgmU//px+1fB/R31gyoqAuOQkpDRvRRhYBRjm/wxWCRJrh3s/J4qi4PrkUFEajY
-----END CERTIFICATE-----
Generated at Wed Sep 16 17:13:11 2026 by rpki-client