
$ rpki-client -vvf rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/1D57FF40A01311E684546521C4F9AE02.roa
File: 1D57FF40A01311E684546521C4F9AE02.roa (raw, json)
Hash identifier: lNaIu73lqivuKf4impc1RoL9Iorynr8Oq1i414eOVLY=
Subject key identifier: 0A:F8:D9:34:0C:91:19:7A:EF:31:0B:33:44:6B:DB:5D:FD:A7:37:33
Certificate issuer: /CN=A91561B7/serialNumber=E4713C1B9D75759295AF64CDFBA62B70DB9A0537
Certificate serial: 1E43
Authority key identifier: E4:71:3C:1B:9D:75:75:92:95:AF:64:CD:FB:A6:2B:70:DB:9A:05:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/1D57FF40A01311E684546521C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:54:24 +0000
ROA not before: Thu 12 Feb 2026 16:13:40 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 9471
IP address blocks: 103.46.216.0/22 maxlen: 22
103.46.216.0/23 maxlen: 23
103.46.216.0/24 maxlen: 24
103.46.217.0/24 maxlen: 24
103.46.218.0/23 maxlen: 23
103.46.218.0/24 maxlen: 24
103.46.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.crl
rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7747 (0x1e43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91561B7, serialNumber=E4713C1B9D75759295AF64CDFBA62B70DB9A0537
Validity
Not Before: Feb 12 16:13:40 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a46130-a72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e6:17:ec:14:b9:a9:90:0f:47:38:99:06:27:
23:12:0c:b9:39:90:f9:ef:76:a6:60:ad:90:ce:45:
32:85:59:32:b9:cf:5a:e0:cc:a8:75:10:49:df:4a:
90:c8:9f:c4:9f:11:d0:9c:ad:c3:c0:13:9e:04:23:
42:fa:06:3f:89:38:cf:50:e2:bd:b9:36:f6:d1:cc:
c5:91:81:ec:34:35:dd:ac:f1:dd:dc:1f:24:03:a6:
2a:46:9f:1c:c4:e0:44:5e:ae:d2:94:9d:18:dd:92:
e6:31:19:e7:5c:e8:bc:6d:80:69:b6:a0:0e:3c:d8:
33:74:87:e4:6e:0b:12:bc:56:d0:d5:f0:20:b6:1a:
91:5f:1d:e3:80:ea:aa:81:64:19:57:ea:51:ac:84:
35:50:15:9a:6b:85:f5:07:2a:11:bf:32:53:f1:3e:
4a:f0:1c:3a:bf:01:10:b4:5a:e8:2e:db:2a:98:6f:
d0:50:32:4f:6c:68:7e:3a:73:84:e1:a2:b4:c3:0e:
84:fb:c8:68:7d:bf:9b:20:e1:af:ce:4b:a6:f3:d7:
79:2a:b2:b1:e9:e1:89:fc:13:bf:6f:53:c6:ba:29:
16:41:66:fa:6f:43:70:91:81:61:a6:db:35:c3:a7:
11:fc:81:b9:65:d8:b8:02:ec:9e:38:b1:de:b5:39:
76:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F8:D9:34:0C:91:19:7A:EF:31:0B:33:44:6B:DB:5D:FD:A7:37:33
X509v3 Authority Key Identifier:
keyid:E4:71:3C:1B:9D:75:75:92:95:AF:64:CD:FB:A6:2B:70:DB:9A:05:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/1D57FF40A01311E684546521C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.46.216.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:f3:77:70:82:8f:c5:a9:5e:b3:89:79:3e:b8:62:af:fe:21:
57:fa:51:77:6e:de:fa:13:00:33:a2:22:aa:d4:af:0d:cd:ec:
ec:a4:8a:3c:00:2c:9f:b2:4d:74:5d:2b:3a:65:35:eb:55:ec:
ae:37:65:f1:79:c2:e7:74:cb:59:6d:49:15:89:d9:b9:cf:58:
ce:29:c2:24:dc:ba:b5:e6:17:1a:d2:02:34:c8:87:98:e4:b7:
6d:e6:8e:ec:51:25:6f:16:43:a8:49:ec:f7:a2:a2:14:ef:64:
66:08:04:f1:05:c9:95:0b:7e:c5:60:0a:a6:a3:24:74:3e:d8:
5f:6a:50:41:66:44:eb:48:a9:0c:92:12:86:98:3f:67:f4:f8:
e8:ab:ba:a9:b8:39:70:68:57:8f:b2:65:20:1e:c8:ba:17:98:
c1:1f:f5:ba:d0:30:c6:bb:cd:e9:be:79:0b:a7:ea:ca:c8:c5:
4a:fb:ee:34:26:e5:4a:dd:2c:4c:b9:c7:91:15:e7:c2:a6:bd:
0e:4e:02:fa:0e:01:65:b1:a3:dc:43:62:9b:48:5c:6b:ca:66:
0f:db:b6:28:b3:e7:82:33:83:e3:95:66:20:55:3a:1a:9b:19:
8e:1b:40:c3:25:74:20:6a:18:fd:68:a1:15:d8:ca:93:92:b8:
bc:cd:12:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:55:59 2026 by rpki-client