
$ rpki-client -vvf rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/4821776AD9A211F092913C6268D3641D.roa
File: 4821776AD9A211F092913C6268D3641D.roa (raw, json)
Hash identifier: Sy1HvppFOycihdTszz/358rIRt69yzzeT9izOzy0CC4=
Subject key identifier: 60:E6:B5:86:8B:21:6E:C0:D8:D1:D9:EB:B7:F1:06:FA:F3:82:8B:31
Certificate issuer: /CN=A91597E8/serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC
Certificate serial: 3529
Authority key identifier: C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/4821776AD9A211F092913C6268D3641D.roa
Signing time: Sun 01 Mar 2026 17:07:22 +0000
ROA not before: Mon 15 Dec 2025 10:39:07 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 64050
IP address blocks: 103.1.41.0/24 maxlen: 24
121.127.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl
rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13609 (0x3529)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91597E8, serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC
Validity
Not Before: Dec 15 10:39:07 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a47249-b702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:8f:0f:b2:79:f7:4c:78:77:0e:da:57:a5:19:
26:fe:94:fc:2a:1d:6b:f9:8e:f1:f7:79:9c:fa:78:
ae:d3:3f:56:45:31:04:31:a6:6b:d8:24:8b:9f:a9:
8f:fa:64:e8:d7:33:24:f4:dd:3f:e9:f6:9c:90:c7:
f2:63:5e:d6:87:b9:85:77:3f:e8:2f:e3:94:5d:30:
0b:18:bc:55:88:e1:9a:76:6e:b2:9c:d5:8f:c9:77:
e7:42:2e:c2:bf:98:a1:83:6b:cc:7e:9d:f1:b9:7b:
c1:15:bb:65:20:7f:b5:81:0c:34:dd:5c:d4:6b:b3:
a5:52:06:d4:58:83:93:c7:c8:16:a7:e3:f8:28:8f:
df:b5:c2:b0:28:ab:5d:7a:fe:00:ba:c8:90:12:c4:
d4:1d:ca:de:03:fa:8b:6c:ca:0e:e8:58:0f:72:19:
f8:b4:bd:e1:af:ca:d2:32:e0:22:6d:15:29:88:69:
e7:65:86:67:cf:47:70:2c:47:79:93:7a:92:19:84:
77:a4:b8:56:16:24:b9:80:c7:bc:5c:3e:11:31:79:
72:aa:b3:39:3e:71:8f:59:3e:47:8d:c1:44:96:18:
4b:5e:fc:dd:78:44:fa:98:74:ff:0e:b7:85:b3:cf:
3d:11:cb:4e:4b:4e:17:89:cd:0d:2a:8a:c4:e3:f4:
8a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E6:B5:86:8B:21:6E:C0:D8:D1:D9:EB:B7:F1:06:FA:F3:82:8B:31
X509v3 Authority Key Identifier:
keyid:C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/4821776AD9A211F092913C6268D3641D.roa
sbgp-ipAddrBlock: critical
IPv4:
103.1.41.0/24
121.127.225.0/24
Signature Algorithm: sha256WithRSAEncryption
23:a5:11:3a:3c:67:f3:a5:0e:91:2c:f5:90:1c:62:4d:51:9f:
99:b4:eb:1b:bb:86:b8:6f:05:fc:07:2a:ee:c0:87:01:08:5f:
c4:97:0f:65:6d:3c:97:98:df:9c:c0:69:3a:b7:81:c4:43:a1:
82:ce:09:e3:2f:50:95:b0:2b:0d:31:8b:a6:d2:14:87:76:a4:
71:e8:67:49:ba:89:f8:45:33:b4:57:92:7a:9b:ea:4f:b4:e1:
2c:c0:42:ea:43:d6:d7:c6:cb:dc:12:6f:40:64:bd:ca:be:b3:
cc:ce:e4:5d:70:a2:15:f0:97:82:9c:44:b5:06:86:b5:bb:bd:
c9:08:21:28:f9:b6:43:bd:f8:fa:48:70:f3:a3:4c:26:85:73:
e6:e3:e5:57:69:bd:6e:a1:fb:de:52:2a:09:db:19:93:14:2e:
5f:2d:4d:a6:a7:eb:f8:09:e8:20:ad:0d:6c:1a:4e:2d:55:01:
ca:d3:5e:63:91:e5:a4:70:6f:54:e6:8f:bb:dd:47:dd:34:d0:
85:81:79:8d:1a:3b:ba:63:c1:f8:a1:ef:1c:bf:63:1f:ec:22:
c7:8f:86:42:e2:29:d9:04:69:ab:f6:79:f1:27:0a:e8:d9:8f:
3b:9a:01:89:db:41:b2:c2:19:66:c3:91:18:04:e3:91:09:14:
f8:7f:d0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:47:28 2026 by rpki-client