
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/074283A632A511EF84ECD41AC4F9AE02.roa
File: 074283A632A511EF84ECD41AC4F9AE02.roa (raw, json)
Hash identifier: Ig/wbZdh4jHG/0RZspeIPFlmWVtGZIemOVk+yYX06AU=
Subject key identifier: 54:E0:02:7B:C1:B2:FD:58:BF:59:C4:EE:F8:06:35:9D:F5:41:02:67
Certificate issuer: /CN=A91A4DA5/serialNumber=4630A4B026A93D0DFAA8ECEC579CC521382E4E58
Certificate serial: 014A
Authority key identifier: 46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/074283A632A511EF84ECD41AC4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:58:15 +0000
ROA not before: Mon 03 Mar 2025 08:29:13 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 133396
IP address blocks: 103.226.252.0/24 maxlen: 24
103.226.253.0/24 maxlen: 24
103.226.254.0/24 maxlen: 24
103.226.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl
rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:58:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330 (0x14a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4DA5, serialNumber=4630A4B026A93D0DFAA8ECEC579CC521382E4E58
Validity
Not Before: Mar 3 08:29:13 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a5a587-e736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:af:f2:1b:f3:e7:8f:31:b9:ae:77:0d:06:35:
6e:97:a5:6d:a1:2e:e5:09:2d:5d:bf:98:15:79:b7:
ec:6e:a2:d9:b7:42:be:7c:56:0a:92:12:c3:b7:d2:
0c:2f:2f:d1:58:d8:03:eb:48:3b:32:6b:e0:f2:73:
82:7d:73:02:2b:79:60:5e:11:cb:9d:62:bf:a2:2e:
41:bb:63:8a:9a:da:30:ad:84:58:d9:d5:c4:84:0f:
7d:1f:11:6d:12:d8:c3:40:46:d8:a5:11:79:d7:96:
bb:dd:00:ef:0c:87:d5:eb:23:47:c8:14:80:05:c8:
a2:17:da:33:a2:e4:bf:4e:5f:60:fe:61:46:ff:47:
7d:ad:20:6d:42:40:e8:ed:2a:e1:0f:77:c1:16:45:
18:78:f4:f7:2d:a3:52:c4:58:c7:79:39:b4:79:36:
51:ac:e6:e3:50:4f:cc:b3:ab:ed:5f:56:f3:36:97:
ca:25:72:ec:94:9e:d8:cd:dd:aa:30:50:ee:6b:69:
f5:3b:b8:c4:7f:3b:63:52:8f:5e:fb:93:1e:5e:36:
06:b2:b6:c9:85:ec:4f:d3:ce:88:91:a8:a0:7a:42:
6b:48:05:ec:55:bd:9a:8c:e2:82:4c:a0:e6:eb:b5:
36:50:a0:b0:b2:c8:dc:97:fe:9a:c3:ff:60:05:67:
35:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E0:02:7B:C1:B2:FD:58:BF:59:C4:EE:F8:06:35:9D:F5:41:02:67
X509v3 Authority Key Identifier:
keyid:46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/074283A632A511EF84ECD41AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.226.252.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:a8:62:d6:fd:8e:b6:33:ac:60:fc:b2:fd:cb:eb:20:50:5b:
9f:36:dd:2d:f2:8d:f0:d4:ab:92:cb:15:ce:60:41:c5:37:e9:
99:be:7d:4b:b2:14:cb:03:3c:2a:42:5d:e8:c2:d3:3a:72:bf:
a1:d2:ff:73:66:79:e7:12:7a:a6:77:fa:98:cf:d0:94:7b:85:
9a:af:ae:41:47:74:f6:d4:6b:7b:57:9e:76:5f:a6:eb:38:06:
e6:b2:a8:f7:37:b7:8e:d5:fc:27:1f:a6:a5:33:33:b5:c2:88:
70:c4:ed:18:bd:09:bd:12:c1:f1:5f:d3:d2:5b:2b:ab:15:fe:
2e:da:00:61:0c:5a:e0:da:0e:c6:d3:e0:21:bf:fa:f5:a3:04:
a9:9b:40:87:01:87:50:30:d8:2e:e6:b6:ee:b9:de:45:44:bb:
28:ca:8d:34:3a:c7:42:bf:79:6b:2f:11:fa:2a:73:32:b5:4a:
4a:70:27:fa:c3:07:45:77:d1:e0:61:29:c9:00:48:80:d1:d5:
26:9c:35:3a:5b:08:e3:5c:d1:a1:07:f6:19:4c:38:53:15:ed:
47:3a:70:eb:57:04:72:05:08:ef:a1:d5:00:55:25:18:a9:b4:
da:dc:2e:5a:14:04:b4:23:00:38:6d:54:1c:36:dd:62:2d:bf:
28:bd:fa:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:14:56 2026 by rpki-client