
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/9244682C7BD711EAA889485EC4F9AE02.roa
File: 9244682C7BD711EAA889485EC4F9AE02.roa (raw, json)
Hash identifier: ADIn3fSPUFxghKrm6LZn3szet1wFIU+8TgC1/BfDmm0=
Subject key identifier: 0F:F5:D4:93:01:35:0A:0F:93:F7:5F:00:AE:04:27:ED:1D:D5:E5:F4
Certificate issuer: /CN=A91A267C/serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6
Certificate serial: 0AB4
Authority key identifier: 8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/9244682C7BD711EAA889485EC4F9AE02.roa
Signing time: Sat 06 Jun 2026 20:23:24 +0000
ROA not before: Sat 06 Jun 2026 20:23:24 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 9554
IP address blocks: 103.219.172.0/22 maxlen: 22
103.219.172.0/24 maxlen: 24
103.219.173.0/24 maxlen: 24
103.219.174.0/24 maxlen: 24
103.219.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl
rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:31:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2740 (0xab4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A267C, serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6
Validity
Not Before: Jun 6 20:23:24 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a2481bc-3369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4c:78:38:37:77:b0:57:2c:02:5f:3e:5d:b8:
92:a4:69:d6:5a:05:ca:96:23:9c:28:bd:95:ab:1a:
73:1b:68:ff:58:10:a2:ff:62:68:79:3b:4c:77:e2:
7f:95:7c:32:b8:7d:1f:d4:31:f2:3f:49:48:a5:d2:
8e:c9:e0:26:a2:46:d2:42:7c:96:d8:07:35:4e:cd:
d7:58:29:27:2e:e5:89:6e:1b:69:31:06:d8:28:d0:
a6:48:66:e0:53:44:e8:42:8d:f4:8a:60:39:3f:5b:
a6:ca:1d:e6:81:3b:0a:c5:b2:78:51:54:b9:b0:16:
74:b5:28:61:ae:66:3c:80:f3:4d:94:e2:e6:eb:1d:
30:31:97:ce:a7:8e:8e:c6:ca:18:8c:12:02:51:5a:
1b:5a:c0:39:6e:b6:00:8e:d6:ef:20:c4:1a:10:3c:
81:7a:57:17:05:9a:5e:6c:d7:76:0c:1b:a4:be:b5:
6d:bc:9e:88:5d:42:ab:ea:c6:b2:04:13:2a:d3:85:
df:74:17:55:53:19:a3:02:1e:53:a5:06:3d:92:82:
6b:87:5e:0d:8c:4c:dd:27:cd:00:93:60:fd:34:38:
80:95:d9:e5:75:51:cf:f4:a7:9c:31:c7:62:3f:34:
8c:23:36:97:02:2d:2c:1d:da:7c:9a:53:8a:4f:24:
d5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F5:D4:93:01:35:0A:0F:93:F7:5F:00:AE:04:27:ED:1D:D5:E5:F4
X509v3 Authority Key Identifier:
keyid:8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/9244682C7BD711EAA889485EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.219.172.0/22
Signature Algorithm: sha256WithRSAEncryption
14:f5:d5:66:e5:b2:16:ec:a4:69:ac:eb:b1:40:07:a6:df:f6:
2b:19:4c:d4:8b:ea:27:99:6d:5a:ee:d2:0c:05:5a:b6:a1:6b:
eb:39:ca:6d:07:95:ef:90:a1:46:11:ed:03:7c:f7:45:13:97:
ef:f5:82:0c:2e:e4:f2:b4:46:a6:40:3a:82:de:df:6f:e5:b6:
39:e3:d1:fa:f2:c3:c2:e8:ac:ad:14:e6:93:96:f2:c6:23:ce:
1b:71:53:85:cd:df:ce:d4:7b:38:b4:be:41:fa:4d:80:dc:16:
82:5f:7c:d1:88:53:1e:46:0f:d8:35:6c:f9:f1:01:81:02:d7:
a6:15:05:ea:3c:23:df:89:7e:b3:ae:46:5f:35:25:26:2b:20:
43:c4:ae:ac:c3:84:f7:5d:da:d0:b9:2d:ac:dd:33:09:09:20:
dd:03:8d:24:0e:83:0f:25:c3:7f:fc:71:5e:52:ec:12:79:2c:
9f:8f:78:f1:38:f4:95:dd:02:5b:9e:c5:d2:8e:bb:ec:fa:5d:
58:d6:6d:03:06:6b:08:03:1b:c3:37:30:8a:ca:fb:75:ee:6c:
fc:a5:c0:97:ce:b3:8e:d1:a9:2f:b0:15:41:e3:17:bc:41:93:
76:a7:88:eb:92:d2:4d:a8:03:3c:1e:29:9d:07:7a:98:1c:04:
ca:bd:ba:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:40:06 2026 by rpki-client