
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/4A5DD9CC091A11F19215EA74393D8C67.roa
File: 4A5DD9CC091A11F19215EA74393D8C67.roa (raw, json)
Hash identifier: BV7hQ01ooj0gkixAAA1FQkdfhKzUnPO1J2omk6+RoVQ=
Subject key identifier: 0C:86:2F:25:E3:39:4C:08:FB:2C:14:66:B2:3C:B5:6E:1F:40:98:46
Certificate issuer: /CN=A91A4179/serialNumber=1641D13FAD8A20AB0A94F625AEDA106BE2A66E17
Certificate serial: 0684
Authority key identifier: 16:41:D1:3F:AD:8A:20:AB:0A:94:F6:25:AE:DA:10:6B:E2:A6:6E:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/4A5DD9CC091A11F19215EA74393D8C67.roa
Signing time: Sun 01 Mar 2026 09:49:20 +0000
ROA not before: Fri 13 Feb 2026 20:26:35 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 42960
IP address blocks: 103.153.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl
rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 22:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1668 (0x684)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4179, serialNumber=1641D13FAD8A20AB0A94F625AEDA106BE2A66E17
Validity
Not Before: Feb 13 20:26:35 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a40ba0-b5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8e:6f:b1:ab:e3:f4:f1:d8:d3:ef:90:5a:28:
29:bf:f8:ce:a2:c6:61:a6:4e:74:e6:e9:60:8b:d6:
a8:a3:37:4c:b9:d5:7f:b3:62:37:20:ae:e7:db:67:
fd:70:f4:44:5a:0d:54:1b:cd:13:6d:5b:02:ff:a7:
17:af:96:64:3b:89:22:6d:66:31:7e:43:fb:98:19:
8c:3d:cb:97:8b:d8:c4:85:3f:12:4a:3d:13:85:c7:
74:af:69:40:aa:a1:85:08:9c:19:c5:78:00:bf:7f:
08:ec:9d:dc:e0:45:34:2a:fc:13:fd:c7:19:9b:c2:
27:bb:3d:d0:1e:b4:3d:ec:e4:88:44:3c:52:63:1b:
8f:2b:af:ef:3a:76:bc:5a:96:fa:4b:0b:9c:c5:24:
41:18:ed:fd:e8:d9:5a:6e:5b:6f:02:ec:8b:76:8c:
c4:5b:73:a7:32:d4:79:5b:e6:f1:80:0d:ba:b1:ad:
dc:d5:c1:54:f4:d6:c6:fe:a4:86:65:26:fa:d5:92:
e1:89:3d:90:b4:77:e4:ca:0a:f5:76:e4:4c:29:29:
61:4a:10:0c:f6:c8:cf:52:ab:d2:3f:4d:f4:87:c5:
03:53:17:bd:43:39:c3:ea:20:57:ca:ea:e3:45:66:
6a:81:cb:7f:a5:ea:25:ed:69:35:94:48:0d:1c:41:
9a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:86:2F:25:E3:39:4C:08:FB:2C:14:66:B2:3C:B5:6E:1F:40:98:46
X509v3 Authority Key Identifier:
keyid:16:41:D1:3F:AD:8A:20:AB:0A:94:F6:25:AE:DA:10:6B:E2:A6:6E:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/4A5DD9CC091A11F19215EA74393D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.153.4.0/24
Signature Algorithm: sha256WithRSAEncryption
78:37:ac:99:3c:93:56:80:0e:bd:0e:67:a5:d4:0c:25:9a:65:
e2:71:22:56:4e:ee:2d:8f:7a:73:aa:60:7b:f6:c7:7b:a2:92:
c3:be:38:26:93:f0:9a:30:1f:69:1d:d6:da:4c:71:c9:bb:3c:
f5:40:7f:06:b5:29:49:55:a4:0c:7b:9f:cc:b9:41:4f:e6:99:
86:f7:1a:ac:5e:6f:50:2f:da:68:da:59:25:9f:b9:d3:90:f6:
2c:5d:e4:67:6e:cb:d0:cd:5c:8a:4e:1b:ef:42:bd:65:a3:28:
66:78:d3:8b:82:ac:59:ec:59:57:49:52:6d:16:b2:73:56:9c:
eb:62:54:c8:83:e7:3d:71:7f:0e:70:93:ff:76:bb:f0:6b:23:
2f:ca:15:c2:fa:b7:84:ab:77:2c:58:ed:ef:60:50:08:10:4e:
5a:20:b8:76:1f:2f:2d:e9:35:9f:4e:2a:84:97:70:13:82:cc:
38:55:a3:ea:14:ab:05:d7:9e:fb:95:e3:93:0c:42:71:f0:a9:
77:1d:de:dc:8a:f5:98:dc:be:e0:59:01:f3:a3:4e:d6:72:5c:
a8:92:e7:27:60:76:a5:6c:45:22:9e:a0:48:a3:3c:37:9b:4d:
35:33:99:2a:6a:d7:40:20:99:a9:9a:b2:05:89:86:32:fb:ff:
f0:65:4b:af
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQxNzkxMTAvBgNVBAUTKDE2NDFEMTNGQUQ4QTIwQUIwQTk0RjYyNUFFREExMDZC
RTJBNjZFMTcwHhcNMjYwMjEzMjAyNjM1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MGJhMC1iNWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyI5vsavj9PHY0++QWigpv/jOosZhpk505ulgi9aoozdMudV/s2I3IK7n22f9
cPREWg1UG80TbVsC/6cXr5ZkO4kibWYxfkP7mBmMPcuXi9jEhT8SSj0Thcd0r2lA
qqGFCJwZxXgAv38I7J3c4EU0KvwT/ccZm8Inuz3QHrQ97OSIRDxSYxuPK6/vOna8
Wpb6SwucxSRBGO396NlabltvAuyLdozEW3OnMtR5W+bxgA26sa3c1cFU9NbG/qSG
ZSb61ZLhiT2QtHfkygr1duRMKSlhShAM9sjPUqvSP030h8UDUxe9QznD6iBXyurj
RWZqgct/peol7Wk1lEgNHEGa0wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAyGLyXj
OUwI+ywUZrI8tW4fQJhGMB8GA1UdIwQYMBaAFBZB0T+tiiCrCpT2Ja7aEGvipm4X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDE3OS80M0U0QUYyNkI5
NTExMUVCQUE2MENEM0NDNEY5QUUwMi9Ga0hSUDYyS0lLc0tsUFlscnRvUWEtS21i
aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZrSFJQNjJLSUtzS2xQWWxydG9RYS1LbWJoYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTQxNzkvNDNFNEFGMjZCOTUxMTFFQkFBNjBDRDNDQzRGOUFFMDIvNEE1REQ5Q0Mw
OTFBMTFGMTkyMTVFQTc0MzkzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ5kEMA0GCSqGSIb3DQEBCwUAA4IBAQB4N6yZPJNWgA69Dmel1Awl
mmXicSJWTu4tj3pzqmB79sd7opLDvjgmk/CaMB9pHdbaTHHJuzz1QH8GtSlJVaQM
e5/MuUFP5pmG9xqsXm9QL9po2lkln7nTkPYsXeRnbsvQzVyKThvvQr1loyhmeNOL
gqxZ7FlXSVJtFrJzVpzrYlTIg+c9cX8OcJP/drvwayMvyhXC+reEq3csWO3vYFAI
EE5aILh2Hy8t6TWfTiqEl3ATgsw4VaPqFKsF1577leOTDEJx8Kl3Hd7civWY3L7g
WQHzo07WclyokucnYHalbEUinqBIozw3m001M5kqatdAIJmpmrIFiYYy+//wZUuv
-----END CERTIFICATE-----
Generated at Tue Mar 3 01:54:50 2026 by rpki-client