
$ rpki-client -vvf rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/4C93B0C80F8E11EEA5B58045C4F9AE02.roa
File: 4C93B0C80F8E11EEA5B58045C4F9AE02.roa (raw, json)
Hash identifier: o7EjUV2YZchqIdy9iUxIZM/t/ml5aY2rZmcv+MlQwaA=
Subject key identifier: E7:D3:CC:49:86:A5:5C:96:CC:14:52:85:31:F0:41:73:82:8D:18:DD
Certificate issuer: /CN=A91706CE/serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597
Certificate serial: 020F
Authority key identifier: CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/4C93B0C80F8E11EEA5B58045C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:15:31 +0000
ROA not before: Wed 03 Sep 2025 03:51:25 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 141153
IP address blocks: 103.155.90.0/23 maxlen: 23
103.155.90.0/24 maxlen: 24
103.155.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl
rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:25:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 527 (0x20f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91706CE, serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597
Validity
Not Before: Sep 3 03:51:25 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a411c3-d63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:67:0a:56:69:66:9b:74:fa:e4:9c:22:98:b9:
ca:4b:be:3d:08:15:4c:e2:8b:f6:cb:fa:e7:24:8a:
f4:46:f2:55:ec:7c:2c:55:fd:ac:09:b7:b1:4e:f0:
2e:c1:98:5f:3b:cd:b6:12:6b:87:b3:aa:3f:05:20:
55:51:db:4d:56:a8:0a:18:e4:68:49:25:81:9c:f2:
4e:ef:30:b1:95:5a:fa:a5:78:cf:f8:c4:dc:a2:1c:
06:89:f7:4e:7d:a9:e5:c4:c1:7d:39:6c:0d:b5:fe:
87:32:7b:09:65:bd:19:e8:cd:9e:8a:92:4e:0d:7d:
93:da:7b:ee:54:3f:c9:ec:35:df:7b:fd:8f:88:76:
4c:61:aa:2d:36:b9:95:d0:e7:fd:56:d2:d2:18:93:
19:e2:02:c5:98:fe:06:d9:53:fc:f0:e6:52:83:f4:
2a:ac:a8:14:8b:53:be:ae:49:5e:fe:b9:a4:39:bc:
80:7b:9f:94:62:02:9a:9b:d6:07:f5:dd:28:12:88:
2e:f6:fc:4d:97:d7:62:e8:a9:13:65:f2:18:df:51:
5b:e2:fd:f1:02:66:2d:1d:45:f9:a8:6b:c7:bc:6b:
ef:a6:5c:0c:f1:f4:ba:61:e5:91:b3:1b:7d:40:50:
4e:3d:7f:3e:72:e4:65:c1:4f:04:ad:4c:dc:c0:fa:
d9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D3:CC:49:86:A5:5C:96:CC:14:52:85:31:F0:41:73:82:8D:18:DD
X509v3 Authority Key Identifier:
keyid:CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/4C93B0C80F8E11EEA5B58045C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.155.90.0/23
Signature Algorithm: sha256WithRSAEncryption
41:5b:61:d1:73:d6:02:60:ba:df:48:73:25:d3:d1:ac:49:99:
59:e6:2f:16:3e:48:9c:a4:eb:49:fd:82:43:66:a0:32:5c:fb:
4d:e6:b8:5a:a5:e5:b4:44:d5:c6:a3:57:48:d5:2e:c9:a5:f3:
d0:e0:80:7a:df:70:44:9c:50:49:d0:a4:31:19:c7:47:f2:c7:
7a:de:a7:f1:5e:d9:b7:52:b1:54:a4:e7:eb:16:56:98:67:8f:
d5:63:13:9f:c7:b8:ad:3a:46:30:c5:47:e0:3d:e2:1b:98:03:
a3:9f:56:f8:35:85:1e:63:23:66:03:c1:cd:5a:e8:32:c7:d3:
c4:ca:fb:35:bb:17:dc:0f:16:e3:5e:43:91:68:03:7d:86:65:
5d:33:47:af:73:a7:60:3c:7b:e5:07:ea:07:cb:47:0b:6f:02:
ed:68:f5:c4:ac:c9:9f:37:e9:b7:6a:89:8d:8e:fa:4a:bd:ed:
34:cf:17:c4:fb:ce:ee:2a:7a:73:76:72:a0:d9:d7:89:e4:a0:
07:a6:80:6f:ab:e8:07:b3:41:4f:74:8b:4b:58:61:19:87:95:
65:bd:04:c2:ab:c6:95:67:11:08:90:fa:cc:ca:92:57:1c:4f:
a3:f0:03:f2:fa:ec:52:ac:f7:12:ab:ee:69:3c:fd:a6:bb:29:
11:56:6a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:30:01 2026 by rpki-client