
$ rpki-client -vvf rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/CC704C6639B711F09D08292CC4F9AE02.roa
File: CC704C6639B711F09D08292CC4F9AE02.roa (raw, json)
Hash identifier: vJisVJZNWaOKXgCYvSO+m0VZ93Gg4QfN63LPtavEQiI=
Subject key identifier: ED:42:64:BB:E2:F1:67:25:80:18:CA:10:A9:67:2F:F8:E4:0B:D4:02
Certificate issuer: /CN=A91476FE/serialNumber=FF7C06892518673ECCE046B6A717F353CE53C509
Certificate serial: B7
Authority key identifier: FF:7C:06:89:25:18:67:3E:CC:E0:46:B6:A7:17:F3:53:CE:53:C5:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/CC704C6639B711F09D08292CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:06:22 +0000
ROA not before: Tue 05 Aug 2025 08:17:59 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 139336
IP address blocks: 103.141.102.0/23 maxlen: 24
2405:15c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.crl
rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:23:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183 (0xb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91476FE, serialNumber=FF7C06892518673ECCE046B6A717F353CE53C509
Validity
Not Before: Aug 5 08:17:59 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a3f37e-f988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ce:9a:74:4f:a6:c6:0b:ee:a0:ad:50:2e:b6:
e4:0a:e8:8f:61:f6:67:a2:e6:45:4b:ad:5f:dd:fa:
ae:a0:94:d5:5f:f2:df:e0:34:43:9c:80:6a:91:1f:
33:ad:80:2f:a3:59:b8:ae:a2:d2:33:d7:66:11:70:
2d:da:9e:ee:6c:e1:51:22:c6:c8:e8:46:84:80:60:
25:da:32:87:ca:d6:69:be:ce:1e:86:a8:54:ce:06:
e4:3b:ac:46:67:c0:bf:f7:f3:da:e8:00:53:93:86:
ef:9b:99:a1:ee:1d:72:2e:1b:72:1f:ab:6e:05:85:
06:91:f3:15:60:42:c3:42:8b:56:2d:b5:e0:b2:5a:
81:d9:54:11:81:78:1e:f2:36:9c:a2:f8:c6:96:61:
b0:bd:58:61:4a:ed:05:99:dc:f5:05:dd:41:16:b4:
ea:be:db:64:95:72:b7:da:ea:8c:11:0d:7d:5a:fe:
48:40:90:4c:80:18:3a:ed:b5:a6:45:b9:c1:ef:7e:
d4:a4:56:2b:6e:ee:e3:37:65:7f:24:33:95:11:52:
63:79:e2:46:e2:41:8e:c0:bc:36:79:92:5f:1a:8d:
09:cc:42:a4:e8:a2:ca:3e:97:3b:c7:1f:5f:e2:01:
5e:23:c3:e1:cd:5b:fe:30:a3:22:21:30:b4:94:d7:
ca:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:42:64:BB:E2:F1:67:25:80:18:CA:10:A9:67:2F:F8:E4:0B:D4:02
X509v3 Authority Key Identifier:
keyid:FF:7C:06:89:25:18:67:3E:CC:E0:46:B6:A7:17:F3:53:CE:53:C5:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/CC704C6639B711F09D08292CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.141.102.0/23
IPv6:
2405:15c0::/32
Signature Algorithm: sha256WithRSAEncryption
01:bd:08:b6:0e:73:ce:50:a1:c3:7f:15:a1:b1:17:49:06:52:
a9:c3:c2:16:77:29:f0:bc:d7:77:ad:73:92:4c:36:5b:1f:7b:
ef:4a:51:a3:e1:bc:b1:c8:92:13:73:9e:37:d2:b5:f2:29:20:
ff:01:0a:51:6a:73:2b:13:52:fa:f7:b9:5e:fb:41:9e:4c:4e:
e4:d3:20:f5:ba:70:b9:2a:ac:87:39:db:db:64:2c:69:8b:30:
06:6f:c1:66:15:80:ab:6b:6d:be:80:6c:3f:34:27:42:ba:27:
df:5d:5d:99:dd:16:5d:47:f0:02:04:fa:f2:fb:13:d2:c3:53:
14:3f:66:eb:2f:ee:1a:77:11:0a:21:43:d8:54:48:70:88:12:
0e:7c:8a:fc:a3:a4:5c:10:9a:dc:97:e2:d0:df:37:04:d0:1f:
2f:f7:ba:36:da:13:47:bb:61:b2:a4:7e:ba:67:79:d8:98:7f:
3b:9c:93:8c:07:e1:75:63:be:30:35:45:bf:22:a9:06:3d:39:
4b:59:42:46:dd:15:3a:99:6d:2c:ae:43:8f:df:a5:69:4f:f5:
e2:dc:5f:4e:67:2a:75:9d:03:09:4e:d1:ac:1d:db:42:cf:ee:
70:ac:28:6a:99:ad:ab:72:8e:07:3d:dd:b4:65:46:d8:37:78:
3e:2a:79:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:51:26 2026 by rpki-client