
$ rpki-client -vvf rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/047C0BCC373211F1887E264A90833773.roa
File: 047C0BCC373211F1887E264A90833773.roa (raw, json)
Hash identifier: LWhnCQp9VfJYhsJdhzflBR7RBHFtlmggsyH3Tj4cj0M=
Subject key identifier: 8E:26:9C:90:55:A3:DB:10:F7:26:33:20:F5:F1:12:69:D8:31:2C:03
Certificate issuer: /CN=A91478E2/serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
Certificate serial: 183E
Authority key identifier: C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/047C0BCC373211F1887E264A90833773.roa
Signing time: Thu 16 Apr 2026 08:37:57 +0000
ROA not before: Thu 16 Apr 2026 08:37:57 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 38193
IP address blocks: 103.103.42.0/24 maxlen: 24
103.103.43.0/24 maxlen: 24
103.120.70.0/24 maxlen: 24
103.120.71.0/24 maxlen: 24
2402:2ec0::/34 maxlen: 34
2402:2ec0:4000::/34 maxlen: 34
2402:2ec0:8000::/34 maxlen: 34
2402:2ec0:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl
rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6206 (0x183e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91478E2, serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
Validity
Not Before: Apr 16 08:37:57 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69e09fe5-fea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:58:ec:8d:0e:a6:17:3f:37:e0:02:de:88:
b4:56:f5:49:cb:66:b9:ff:55:d4:76:99:34:9d:9c:
2d:ff:ce:1c:17:f8:07:3a:4a:32:e4:4a:b1:8e:13:
17:7f:3c:6b:ec:47:c2:67:15:47:e0:b8:95:5d:e1:
ee:ae:0c:d6:e9:16:13:67:1e:e2:56:e5:4d:36:8d:
4f:83:b0:55:6e:00:83:73:39:d4:8c:98:fa:5e:2a:
1f:fe:a9:e9:c2:76:d8:2e:82:7d:e8:4e:59:07:2a:
d4:f6:da:ff:17:6e:82:62:ed:35:fd:d0:26:42:6c:
ca:37:39:4b:66:59:27:ef:db:52:29:bf:b4:bf:dd:
da:aa:63:fa:c4:af:f4:01:dc:d0:00:b7:3b:d1:68:
c1:ee:42:81:1d:c1:ad:f8:79:1f:79:c0:07:e0:b8:
3d:b3:41:f1:a8:fb:51:f5:7a:c0:df:11:5d:fa:ca:
f6:aa:8e:76:89:4b:70:30:f1:cc:93:d0:12:96:00:
c2:26:32:ea:df:2b:c3:52:31:26:12:6e:e8:fc:b7:
58:d7:02:b5:7b:9f:a1:53:fd:aa:59:f5:e3:d8:21:
95:56:d7:9d:de:7c:c5:91:1d:00:ee:1b:ba:a2:85:
ba:d3:f2:cd:68:b3:bc:b5:ca:f8:be:30:af:2d:8f:
ec:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:26:9C:90:55:A3:DB:10:F7:26:33:20:F5:F1:12:69:D8:31:2C:03
X509v3 Authority Key Identifier:
keyid:C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/047C0BCC373211F1887E264A90833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.103.42.0/23
103.120.70.0/23
IPv6:
2402:2ec0::/32
Signature Algorithm: sha256WithRSAEncryption
1f:26:36:55:0c:28:79:1c:cf:db:32:de:97:13:74:ca:65:28:
f8:1d:0b:56:ae:ba:bf:47:56:32:16:c8:17:e5:03:a8:77:ba:
37:0b:4c:00:31:02:a5:26:ad:7f:cd:8f:82:84:0a:af:02:6c:
bf:14:0a:cf:79:90:45:d6:74:48:1e:75:19:f1:cf:14:9a:5f:
b9:1e:ee:02:07:43:a1:e1:fa:6d:54:66:0e:21:69:bc:b3:6d:
f6:91:df:ed:26:b5:3e:53:ee:b7:e3:7a:c5:ad:22:6d:e2:36:
9c:99:06:d7:f0:33:55:d4:e6:af:d4:b8:f9:7b:36:84:bd:b5:
4d:c6:6b:41:23:61:b8:48:b6:9b:a4:f1:c8:20:5a:7c:eb:1b:
26:0d:08:44:9e:1e:1e:98:f4:a1:34:35:02:88:f1:1b:7e:c4:
45:03:47:9d:f5:ac:21:25:2f:28:15:38:c2:c4:68:4e:30:16:
8d:d2:dd:0e:17:a8:9e:03:e2:c1:f9:2f:75:bc:fd:dd:98:5e:
f4:a8:48:63:cd:87:bd:d4:7c:14:2e:5b:5f:96:f8:10:99:59:
cf:32:eb:26:64:1d:35:34:85:a6:97:6e:8d:9c:c9:63:a6:a8:
e3:9b:5d:e9:9e:49:c8:bc:cc:ed:68:50:1b:cf:4d:19:b3:2c:
b8:a4:54:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:38:23 2026 by rpki-client