
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/4279BBD80C5811EA93151657C4F9AE02.roa
File: 4279BBD80C5811EA93151657C4F9AE02.roa (raw, json)
Hash identifier: wdDYplfzKaYX22uPvzlPb5qqxZS2nS6LfIySpohKPZA=
Subject key identifier: 86:C7:8D:78:60:52:96:E0:28:9D:7F:00:CE:57:A6:81:45:4C:E9:E0
Certificate issuer: /CN=A91A8151/serialNumber=5124A04E23AADDA44D94AB0D4AB2C0B7B20BFC75
Certificate serial: 0CBE
Authority key identifier: 51:24:A0:4E:23:AA:DD:A4:4D:94:AB:0D:4A:B2:C0:B7:B2:0B:FC:75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USSgTiOq3aRNlKsNSrLAt7IL_HU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/4279BBD80C5811EA93151657C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:41:14 +0000
ROA not before: Sat 14 Jun 2025 18:32:30 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 137889
IP address blocks: 103.116.164.0/22 maxlen: 24
2402:fd40::/32 maxlen: 32
2402:fd40::/36 maxlen: 36
2402:fd40:1000::/36 maxlen: 36
2402:fd40:1000::/48 maxlen: 48
2402:fd40:1001::/48 maxlen: 48
2402:fd40:1002::/48 maxlen: 48
2402:fd40:1003::/48 maxlen: 48
2402:fd40:1004::/48 maxlen: 48
2402:fd40:1005::/48 maxlen: 48
2402:fd40:1006::/48 maxlen: 48
2402:fd40:1007::/48 maxlen: 48
2402:fd40:2000::/36 maxlen: 36
2402:fd40:3000::/36 maxlen: 36
2402:fd40:4000::/36 maxlen: 36
2402:fd40:5000::/36 maxlen: 36
2402:fd40:6000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.crl
rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USSgTiOq3aRNlKsNSrLAt7IL_HU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3262 (0xcbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8151, serialNumber=5124A04E23AADDA44D94AB0D4AB2C0B7B20BFC75
Validity
Not Before: Jun 14 18:32:30 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a425d9-2e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:68:a8:fe:57:27:07:b2:c0:cc:0e:3a:5d:44:
07:b4:89:69:13:12:31:bd:a3:ea:51:88:12:71:14:
2a:09:ba:04:a6:3c:80:ba:4e:f6:7f:2c:10:2b:08:
0a:d2:f9:46:24:17:fc:cd:27:1e:23:41:8d:5b:45:
ae:75:ff:18:32:af:4b:6e:b2:4b:34:e2:bb:8c:0c:
a0:eb:f8:ca:ed:a0:7b:6b:bb:23:74:45:bd:16:18:
42:95:3a:35:0c:5b:69:63:58:f5:b4:0e:94:dc:5d:
e1:5e:16:70:25:1c:a2:0b:da:e7:ed:bc:d6:b9:e1:
56:f0:1a:af:8a:a3:91:a6:89:aa:55:87:6d:75:4a:
de:8d:d1:fb:eb:6f:10:93:5f:34:02:68:08:44:94:
ef:17:fa:ca:7e:c5:30:f9:9a:b4:28:22:a4:d2:88:
1f:6a:bc:54:6f:30:63:3b:49:79:18:27:0b:41:e3:
27:72:0f:ac:8c:99:1a:3c:da:5c:da:d6:b3:bc:48:
70:fc:72:29:5e:5e:63:63:01:12:47:f0:3b:06:b6:
75:9b:4c:e4:52:04:bc:94:60:3a:94:c9:8d:ee:f4:
96:1f:eb:d3:dc:9f:74:dd:40:46:ed:ef:e3:82:16:
77:20:72:8a:1c:cc:43:10:4a:a7:3a:6e:f9:56:1e:
e2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C7:8D:78:60:52:96:E0:28:9D:7F:00:CE:57:A6:81:45:4C:E9:E0
X509v3 Authority Key Identifier:
keyid:51:24:A0:4E:23:AA:DD:A4:4D:94:AB:0D:4A:B2:C0:B7:B2:0B:FC:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USSgTiOq3aRNlKsNSrLAt7IL_HU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/4279BBD80C5811EA93151657C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.116.164.0/22
IPv6:
2402:fd40::/32
Signature Algorithm: sha256WithRSAEncryption
6e:10:c2:a9:44:c3:48:48:54:ec:ae:5d:2c:44:e3:6e:ae:53:
80:5e:31:13:10:ba:79:b5:ec:20:42:3d:ec:d9:af:1a:5c:54:
e8:25:87:5d:fd:f8:38:94:89:2e:4d:7b:4b:7f:ac:ff:72:ef:
5f:79:5e:01:88:cb:8e:50:d6:1e:30:b2:43:07:ad:87:61:a7:
56:6c:0b:5d:81:49:87:f8:8a:26:3d:2f:88:43:8d:3c:8e:8e:
d1:85:1b:35:31:8e:e3:79:50:3a:f8:bb:f1:dc:7e:8f:28:80:
01:15:1a:71:75:64:2b:e6:a8:80:05:71:a5:99:76:f6:56:3f:
02:86:f6:0f:5d:1a:05:3c:1e:05:c5:78:ff:fd:6c:b9:f6:d9:
ac:e6:6d:e9:5a:4c:ef:2f:5f:02:7d:04:cf:24:13:ee:28:01:
53:d2:88:a4:e2:7a:a1:ea:85:88:73:f6:81:df:40:d0:64:3c:
84:30:1c:46:f8:23:ec:a6:b9:a1:aa:09:4e:7b:65:8e:6a:1c:
bf:4b:7f:a5:9e:48:a3:ad:04:cd:e6:ed:a7:d3:fe:7a:e9:11:
ef:f6:49:61:d4:d6:6b:a4:3c:e4:28:6c:56:91:81:1f:0b:50:
72:45:25:69:fa:c8:18:a2:28:89:d9:3c:94:8f:8c:1b:68:34:
a2:21:c4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:35:50 2026 by rpki-client