
$ rpki-client -vvf rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/CDD1E222775711EF95F9762FC4F9AE02.roa
File: CDD1E222775711EF95F9762FC4F9AE02.roa (raw, json)
Hash identifier: VbHqiDCTZn+Ao56QabmWal8oQa9EkahnHvyq/y587WI=
Subject key identifier: CF:3B:CC:5E:F6:E2:F9:55:33:BA:6A:2A:CC:5C:EE:F7:AA:29:13:E2
Certificate issuer: /CN=A91392AE/serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4
Certificate serial: 1A7A
Authority key identifier: 4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/CDD1E222775711EF95F9762FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:29:47 +0000
ROA not before: Wed 20 Aug 2025 16:54:36 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 153319
IP address blocks: 103.115.6.0/24 maxlen: 24
2001:df4:45c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl
rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6778 (0x1a7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91392AE, serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4
Validity
Not Before: Aug 20 16:54:36 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a45b6a-4e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b1:a7:4c:60:1d:cc:ff:b8:4a:9a:a8:0a:d7:
79:7a:52:ad:33:8c:c9:87:bb:3c:aa:a3:ca:80:ee:
9c:c3:b7:e7:5f:fc:4e:e1:7b:fd:ac:88:f8:e6:ea:
3d:b1:b1:33:72:20:cf:ad:a0:90:c1:3c:8e:3b:9e:
b3:95:c2:f1:50:2a:ea:7e:c3:09:b4:46:f7:ea:1b:
72:ad:42:c7:26:7a:a5:7c:a8:aa:1b:92:9c:0a:12:
79:37:9c:ab:36:52:23:9b:bc:1f:42:c6:f7:38:86:
52:8a:d2:6a:9e:e5:35:94:6e:2e:e7:2c:45:35:08:
9f:d6:f6:91:66:88:da:ce:62:45:e2:3a:42:e1:de:
cc:04:d1:aa:d6:8a:bb:9d:9e:54:d4:84:b5:3d:96:
05:98:09:89:7c:15:c8:20:23:ba:b0:24:fb:6f:c7:
aa:d0:00:86:3d:d9:19:0a:23:22:98:4d:23:27:77:
49:2c:58:20:1c:f6:d7:65:bc:f9:59:39:21:11:61:
1a:94:d7:83:a7:76:00:86:48:bf:ba:38:67:63:c4:
ce:5a:e9:c0:ba:65:a1:dc:fe:06:38:a7:99:2f:c0:
71:f0:15:ef:5a:c1:95:82:80:51:1f:06:fd:d0:2e:
2f:93:cd:6d:1e:14:e7:6a:c5:2a:d8:97:5f:1e:cf:
e5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3B:CC:5E:F6:E2:F9:55:33:BA:6A:2A:CC:5C:EE:F7:AA:29:13:E2
X509v3 Authority Key Identifier:
keyid:4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/CDD1E222775711EF95F9762FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.115.6.0/24
IPv6:
2001:df4:45c0::/48
Signature Algorithm: sha256WithRSAEncryption
14:18:b4:0f:44:bc:f6:9e:e5:26:39:ed:77:42:2b:09:f8:ca:
08:7f:2c:e7:9e:dc:17:79:c9:35:f6:d1:4a:b0:81:23:c3:68:
e4:46:8d:28:71:b8:93:0c:0b:8d:e1:0b:fd:85:d0:26:88:44:
4c:20:d1:3b:c6:43:ad:d7:00:b4:8c:80:30:ad:10:7b:1d:79:
f8:4f:b1:32:14:2f:b0:ef:78:c7:63:5e:41:4d:f4:57:42:93:
93:de:a1:50:34:ae:cb:fd:a7:b0:9c:92:84:9e:de:02:3a:db:
c0:e9:c5:d1:5b:e5:e2:c0:bd:f0:1c:ce:f4:e5:ca:e4:5d:a5:
a4:da:bf:b3:6c:f5:fb:db:f4:b5:93:d7:ec:12:e5:e1:f2:e8:
e9:03:d6:b3:41:f0:41:5b:b9:fc:eb:fb:33:30:8b:33:19:f3:
5a:e2:85:61:f0:74:e0:c4:ab:cb:ac:4c:b0:ab:c8:7e:ae:a7:
54:fc:ae:8c:4f:09:27:8a:00:d7:9c:fa:4c:53:0d:a1:36:94:
0f:1f:4e:e4:c6:f8:3c:f7:7d:99:b7:55:d4:f3:b3:e9:21:58:
12:37:28:4c:02:d1:1b:44:77:09:f2:f1:5e:f8:a1:af:19:e7:
7c:0e:e4:c7:25:08:77:27:b2:f5:49:17:5a:ab:c1:01:ec:b7:
a0:34:6c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:36 2026 by rpki-client