
$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/46E49D1CE79811EEA89C5E56C4F9AE02.roa
File: 46E49D1CE79811EEA89C5E56C4F9AE02.roa (raw, json)
Hash identifier: ZP+Fsk2FtcDycpwS+m0D9syGyr7ezG1ogPe4OjBVvG4=
Subject key identifier: 92:4F:17:52:3A:5B:84:BF:F3:2B:B8:E9:07:BD:E5:97:BC:E5:49:A7
Certificate issuer: /CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D
Certificate serial: 01F7
Authority key identifier: BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/46E49D1CE79811EEA89C5E56C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:55:31 +0000
ROA not before: Fri 03 Oct 2025 03:59:35 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 135365
IP address blocks: 103.253.176.0/24 maxlen: 24
2401:25e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl
rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:53:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503 (0x1f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862F9, serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D
Validity
Not Before: Oct 3 03:59:35 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a46f83-442c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:14:08:38:a1:09:7e:7b:17:db:0a:99:71:a5:
7c:07:00:df:d9:6d:22:a2:57:d3:4e:cd:33:c9:9d:
8e:24:32:8d:33:03:32:35:4a:b0:f5:9d:04:71:1d:
fa:9f:f5:68:5c:05:83:04:1a:ed:88:56:7c:f3:05:
cf:78:c5:5b:a1:11:3d:1b:27:6a:1c:ef:03:87:78:
78:37:39:be:2c:9e:e5:cf:63:f8:41:b4:61:63:90:
45:ba:b3:89:4b:10:d0:e7:6f:f7:01:a7:92:e5:1d:
8c:7e:9d:37:ab:3b:b3:15:02:d3:3d:83:97:eb:a5:
f8:28:32:08:18:c4:f7:f9:e6:18:a8:d1:89:ab:c0:
be:3f:a4:4b:8b:89:c3:e6:c0:44:9d:1b:31:03:f3:
4d:f4:6b:0b:36:a2:eb:b4:49:68:17:a0:64:03:97:
db:62:85:17:9d:fe:3e:2c:10:da:38:4f:09:1c:78:
e0:de:73:cc:1f:8f:a6:62:e1:48:6c:dd:f8:03:00:
3c:a0:b8:a1:09:49:92:51:8e:6d:f9:ee:e6:f8:70:
97:a1:17:a3:ac:cf:f5:86:19:25:f1:8b:6b:55:17:
38:f3:c0:24:55:de:cf:d3:91:d8:57:94:44:23:b6:
29:df:93:84:8e:de:a0:b4:31:99:09:1f:30:e4:ab:
3c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4F:17:52:3A:5B:84:BF:F3:2B:B8:E9:07:BD:E5:97:BC:E5:49:A7
X509v3 Authority Key Identifier:
keyid:BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/46E49D1CE79811EEA89C5E56C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.253.176.0/24
IPv6:
2401:25e0::/32
Signature Algorithm: sha256WithRSAEncryption
41:be:1f:e4:c6:01:22:01:fd:c1:83:98:d7:2a:bd:a5:1d:b3:
b4:36:ca:65:38:45:9e:b0:e1:63:7c:64:c0:1b:28:18:05:a6:
51:a7:a2:4c:06:d7:df:29:3e:30:12:02:17:b1:ca:78:76:7e:
80:19:e8:83:7a:25:15:a8:79:a7:f4:92:d5:0d:14:a5:48:30:
3a:3e:1d:56:fa:7e:20:f4:e2:63:49:35:d8:f9:a9:79:8e:05:
20:3e:26:ee:14:57:9a:55:ff:85:e2:85:6a:b7:c7:ff:30:84:
38:17:e0:67:92:e4:44:0f:b9:82:46:2a:20:c1:42:48:de:9d:
e8:be:31:12:a6:4f:01:25:8e:5c:c1:96:03:cf:03:9e:59:67:
c1:cd:16:2a:58:c2:1b:23:95:58:32:8e:4f:bf:b5:c5:44:e2:
af:3b:91:37:86:b2:ec:14:81:3c:d9:02:9f:35:e8:4f:27:58:
d5:e6:6e:7e:a9:5c:45:57:2e:33:3a:15:8a:eb:08:19:6b:b9:
31:78:6e:31:48:13:7b:41:1b:13:59:3b:ca:a1:49:ef:83:d1:
60:d7:3b:6b:ad:5b:72:cb:93:62:fe:3c:54:ed:66:25:cc:85:
da:26:99:e3:46:15:34:09:0d:9b:4a:0e:7d:21:69:c6:be:29:
26:89:ab:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:13 2026 by rpki-client