
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/EC1B43EA393111EAA1873746C4F9AE02.roa
File: EC1B43EA393111EAA1873746C4F9AE02.roa (raw, json)
Hash identifier: Y1gVzkwfOLuyPoIfE59zPK8DMvF4H060KJy8V8tGtwo=
Subject key identifier: F6:BA:64:F4:CF:3E:43:97:32:C1:57:EA:77:52:58:CA:6F:EE:BD:18
Certificate issuer: /CN=A91A70FA/serialNumber=363952B7F417820609300AE8914812184B8FC3DC
Certificate serial: 1CF4
Authority key identifier: 36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/EC1B43EA393111EAA1873746C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:54:37 +0000
ROA not before: Thu 18 Dec 2025 16:13:49 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 45773
IP address blocks: 45.64.24.0/22 maxlen: 24
103.4.92.0/22 maxlen: 24
111.68.96.0/20 maxlen: 24
121.52.144.0/20 maxlen: 24
2400:fc00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl
rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7412 (0x1cf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A70FA, serialNumber=363952B7F417820609300AE8914812184B8FC3DC
Validity
Not Before: Dec 18 16:13:49 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4613d-3a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fc:3d:2f:f2:d3:29:4b:1a:4e:52:0d:0e:0a:
d3:a7:2e:8d:4d:d6:14:2e:a1:ed:f0:b5:95:4e:6f:
c0:c7:66:81:d1:77:87:9e:89:4c:48:c5:84:fb:1b:
27:3e:b4:8d:02:c5:17:16:1a:64:30:c0:ce:b2:2b:
97:29:2b:be:88:7d:0d:2d:bc:10:f7:98:c9:68:83:
d3:c5:8f:6e:4b:74:d4:79:14:73:d1:23:e2:c6:cd:
97:ea:d8:01:c1:7d:4e:5e:90:fe:90:a2:3d:c1:68:
c4:12:39:c1:f5:07:ec:40:79:61:c6:54:3d:56:18:
b4:5b:a7:1a:f8:37:f5:6c:4f:cf:45:0c:37:93:52:
fb:e3:94:62:fd:e6:8b:30:c6:6e:a4:45:cc:14:bf:
97:be:91:d8:d3:0a:4c:24:49:5f:75:92:b5:16:1d:
1a:e3:53:af:8d:3c:12:9d:11:31:86:40:09:15:6b:
8b:d6:33:1d:68:4e:1c:d5:e7:fd:b0:68:86:95:6c:
fd:ed:0b:69:09:ef:fd:a2:49:88:c6:e5:b9:a4:d0:
c0:66:12:89:b7:f0:a9:ed:fb:95:af:64:4d:de:82:
46:fb:67:74:4c:4a:21:1a:28:81:de:21:24:4a:9b:
8e:05:40:68:ad:a8:2c:1c:af:c7:95:fe:c4:5f:b8:
16:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BA:64:F4:CF:3E:43:97:32:C1:57:EA:77:52:58:CA:6F:EE:BD:18
X509v3 Authority Key Identifier:
keyid:36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/EC1B43EA393111EAA1873746C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.64.24.0/22
103.4.92.0/22
111.68.96.0/20
121.52.144.0/20
IPv6:
2400:fc00::/32
Signature Algorithm: sha256WithRSAEncryption
67:0a:c9:38:4a:2e:3e:de:ab:e4:5d:03:a5:95:90:02:8d:60:
54:39:52:f0:9b:83:a2:ff:e8:98:3e:82:ee:18:84:48:8b:48:
89:0c:d8:39:73:cc:d5:c5:b6:d3:75:00:a0:1f:6b:6e:85:da:
5c:fb:d4:e6:94:f9:ec:c1:72:f0:68:58:bb:8f:26:59:14:cd:
87:bd:00:d9:4c:4a:aa:98:a7:9c:97:99:70:99:81:8d:aa:4b:
2b:7c:a9:40:2b:43:47:3b:ab:f1:46:92:87:be:70:7d:75:a2:
ec:e5:f5:95:df:ff:76:67:e0:1b:d6:ae:c3:f5:4c:a4:d6:20:
ff:17:80:82:88:58:e1:2b:47:33:51:8f:a6:5f:92:d1:cd:9e:
c4:92:1e:7f:65:ac:72:26:86:da:4d:7e:4c:61:5e:ef:a9:bf:
91:75:0e:8a:99:14:02:d6:83:61:c7:56:c2:c6:49:50:c7:c0:
53:f0:a2:34:a7:dd:07:63:0e:c5:55:b5:9f:ec:88:92:02:4e:
da:08:0e:6e:b8:b1:c2:7d:6f:02:65:6f:11:66:bd:06:b1:2e:
11:b8:c8:fa:a4:b5:7f:59:b5:a1:70:81:9b:c2:c1:b8:cb:f4:
34:17:5a:39:e8:31:7f:30:29:c0:9f:7e:0d:04:4a:ef:c2:bc:
1e:9d:17:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:50:24 2026 by rpki-client