
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/416EB4022F6111EE8C156634C4F9AE02.roa
File: 416EB4022F6111EE8C156634C4F9AE02.roa (raw, json)
Hash identifier: fjGpC/tzzFWbeBBortAKHNrafmR/+XWGojeVFa7vFyo=
Subject key identifier: 84:8D:D0:FB:E1:3B:15:3D:5D:B0:57:05:ED:4F:EF:47:19:26:9E:FA
Certificate issuer: /CN=A91B2D4F/serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7
Certificate serial: 01ED
Authority key identifier: 79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/416EB4022F6111EE8C156634C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:01:36 +0000
ROA not before: Sun 05 Oct 2025 03:30:51 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 4826
IP address blocks: 103.170.238.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl
rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:45:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 493 (0x1ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2D4F, serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7
Validity
Not Before: Oct 5 03:30:51 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a438b0-cb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:11:d3:e6:bd:dd:b0:b7:a4:e7:97:b4:df:
11:0b:df:2a:2e:49:a9:84:90:68:6a:96:a0:72:8e:
6a:9e:a6:7b:92:a2:f4:83:74:a9:4b:df:16:53:ae:
42:76:9b:c9:43:01:ca:05:91:fb:99:e3:d5:fc:4f:
8b:ed:20:d8:c5:88:dd:51:10:5e:02:d6:be:d9:83:
24:7b:f6:78:5b:41:98:80:0f:fd:43:1f:0a:a8:cb:
87:a4:1f:4b:7d:c0:5e:27:d0:06:79:6b:49:f3:70:
1d:a3:31:5a:86:09:30:9b:19:db:26:66:e4:19:f4:
74:c5:ee:a8:38:6f:c0:7a:0d:a7:aa:a7:40:f4:32:
e7:18:80:fa:ec:69:f9:42:f1:87:0e:a0:6e:2e:1c:
04:17:1a:f7:b0:b7:bd:ed:83:3d:e1:e6:25:f1:9a:
7b:04:a0:9a:cc:7a:99:41:17:46:9c:12:35:2b:ed:
2e:3c:34:e9:a8:a1:c4:8a:8a:03:6f:e2:0b:52:49:
4c:25:ea:a2:98:bf:85:a1:29:3b:45:e1:d1:c6:19:
94:a5:b2:e2:dc:ca:93:2c:d0:b2:c2:c0:8d:f0:ea:
d8:b9:15:d6:89:9a:f7:ad:fd:da:20:ef:dd:0d:fd:
75:9a:5d:2f:2f:08:7e:2d:61:85:d6:e0:36:11:50:
74:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8D:D0:FB:E1:3B:15:3D:5D:B0:57:05:ED:4F:EF:47:19:26:9E:FA
X509v3 Authority Key Identifier:
keyid:79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/416EB4022F6111EE8C156634C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.170.238.0/23
Signature Algorithm: sha256WithRSAEncryption
24:bd:1d:41:44:d8:fb:3d:a6:45:99:53:76:c3:e5:08:5b:93:
17:e2:e2:62:14:d7:c0:65:1b:48:1d:d1:9e:7c:6a:a3:49:98:
4a:29:fb:1d:bd:11:f8:7b:24:12:e4:d1:7f:e5:d8:66:0e:78:
85:13:e5:a4:c5:e7:3c:b3:ac:23:66:b7:be:48:da:c4:38:b4:
18:93:9a:12:9a:2a:73:ef:2e:88:d1:c5:ff:44:23:2b:b9:e0:
c5:dd:50:ca:c5:37:8c:a1:60:16:0a:7f:37:ff:e1:0c:67:98:
51:e1:37:98:7b:13:57:0c:d7:ea:d9:f1:6d:a9:a5:a0:9b:fc:
74:a0:d5:ff:58:24:98:f1:f9:98:59:13:f6:60:a2:14:8e:86:
d6:f1:d1:90:93:e4:ed:46:da:e2:89:79:b1:f7:e2:80:ed:bc:
6a:9a:42:c7:6a:08:d1:67:6d:5e:71:cf:14:06:76:23:15:02:
cb:f1:d6:9d:8c:c7:11:53:06:ab:a3:5c:3d:64:96:de:d4:7a:
b1:f9:7b:20:17:da:63:e2:b3:4b:7e:42:6e:5c:7c:0a:a5:04:
e3:fa:db:47:52:29:04:d3:7d:63:c0:11:23:64:3e:83:9c:7c:
ec:cd:ee:11:cb:fa:b3:50:84:21:8d:70:72:60:5c:c4:52:83:
e6:70:e4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:36 2026 by rpki-client