
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/55B355DCA60F11EF82E7691DC4F9AE02.roa
File: 55B355DCA60F11EF82E7691DC4F9AE02.roa (raw, json)
Hash identifier: Yinu6SkXGa2nkQG/2JfefA26g2LPn+65JjIbYBez/ac=
Subject key identifier: 8A:40:CB:46:A5:69:D3:37:42:E7:79:CF:20:0D:2F:EF:0E:1B:01:72
Certificate issuer: /CN=A914A92C/serialNumber=792683806C8BE3AC13614D375E9019274099BC7B
Certificate serial: F8
Authority key identifier: 79:26:83:80:6C:8B:E3:AC:13:61:4D:37:5E:90:19:27:40:99:BC:7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/55B355DCA60F11EF82E7691DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:07:48 +0000
ROA not before: Tue 05 Aug 2025 07:15:02 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 136784
IP address blocks: 103.96.4.0/22 maxlen: 22
103.96.4.0/24 maxlen: 24
103.96.5.0/24 maxlen: 24
103.96.6.0/24 maxlen: 24
103.96.7.0/24 maxlen: 24
113.212.92.0/22 maxlen: 22
113.212.92.0/24 maxlen: 24
113.212.93.0/24 maxlen: 24
113.212.94.0/24 maxlen: 24
113.212.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.crl
rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:25:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A92C, serialNumber=792683806C8BE3AC13614D375E9019274099BC7B
Validity
Not Before: Aug 5 07:15:02 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a3e5c4-aa7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bd:a2:49:46:9e:70:c8:ab:85:95:38:ce:fa:
9d:87:b4:c0:33:63:85:55:5a:2b:52:5c:3a:a5:bc:
12:2f:ab:16:2d:48:11:3c:53:ea:e7:3a:83:f9:e4:
fa:43:2d:76:b3:6e:0d:08:3e:fe:1c:f0:57:a5:fa:
c4:cf:aa:be:0c:80:93:7a:51:8f:ee:92:ff:6b:61:
a1:59:f5:1e:b2:c5:8f:36:17:78:94:16:58:4c:f1:
51:ed:47:77:1e:cf:34:df:60:e2:3e:69:f4:20:1d:
bf:47:dd:14:39:c9:de:69:d8:d6:bb:2d:a0:97:01:
70:d2:a3:91:e2:de:f0:43:59:5b:ef:4f:a4:2d:02:
1d:c3:ea:a3:03:3c:a8:48:b3:4f:d5:74:ce:6f:ad:
51:2f:96:2c:5c:48:36:51:6e:1c:43:29:7a:3d:84:
40:a3:13:2b:63:d6:d6:93:19:22:28:78:bf:61:5f:
61:e4:b7:a1:36:2e:61:4e:ed:4d:7c:97:f4:35:96:
63:2f:96:4b:a9:c5:59:9f:ee:73:ff:54:1c:80:6d:
aa:71:5d:01:8c:72:9c:5c:e3:af:df:c5:26:94:1c:
98:61:99:e6:f7:4e:49:c8:84:ef:a2:bd:f1:bf:8f:
a5:bb:af:3e:7a:60:32:d2:24:9c:82:39:13:9f:0e:
97:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:40:CB:46:A5:69:D3:37:42:E7:79:CF:20:0D:2F:EF:0E:1B:01:72
X509v3 Authority Key Identifier:
keyid:79:26:83:80:6C:8B:E3:AC:13:61:4D:37:5E:90:19:27:40:99:BC:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/55B355DCA60F11EF82E7691DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.96.4.0/22
113.212.92.0/22
Signature Algorithm: sha256WithRSAEncryption
70:46:46:40:08:36:6f:e9:3e:a4:d7:ab:80:08:1a:aa:07:9f:
1f:64:95:32:40:a1:da:a8:3e:52:0f:b2:bd:18:3c:bf:5e:7e:
0d:82:4e:8a:fb:e1:ff:22:4c:26:0d:24:61:07:4c:52:6c:1f:
42:d8:13:2f:bd:cf:80:af:48:71:46:9d:04:46:c0:e6:eb:bf:
54:6e:b0:87:18:8a:b6:0d:f1:1b:40:8b:03:b6:5a:4e:8a:c1:
b6:00:4b:c4:92:51:ed:0e:2c:55:ca:75:ff:39:4a:48:b0:35:
b9:b2:25:54:09:f4:59:50:80:fb:13:cf:c4:33:ff:44:f9:b8:
17:30:fb:7c:d4:8d:d6:b5:cf:7e:9d:0f:65:39:3d:e0:05:93:
77:eb:6c:f4:47:2e:66:30:97:e6:73:df:dc:4a:f7:73:49:10:
03:ba:a1:d0:71:bd:77:e6:ae:b4:d7:e0:ef:c7:7e:51:40:86:
bf:85:1f:7c:e8:3d:5e:45:b2:13:62:29:fc:0b:13:59:b1:7d:
f0:47:40:ea:bd:05:9f:ca:5d:2a:42:53:c0:7f:81:b5:44:d8:
fa:e8:97:5f:6d:8b:fa:16:ca:8a:81:1f:29:7c:18:94:9a:ca:
0e:2c:a9:d7:d6:25:0f:55:ec:9f:00:cf:d2:34:9c:25:93:87:
b7:3d:51:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:11:20 2026 by rpki-client