
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/44BA2B8C671011EEB41FB227C4F9AE02.roa
File: 44BA2B8C671011EEB41FB227C4F9AE02.roa (raw, json)
Hash identifier: uVmZRSTc4x/K1CJySncdCGqBEzUNgcCUoJOuUTYwvwA=
Subject key identifier: F8:53:CD:A7:38:20:8D:14:AF:60:53:BB:61:D0:D2:45:F8:DC:7A:A3
Certificate issuer: /CN=A91BF286/serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D
Certificate serial: 01CA
Authority key identifier: 10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/44BA2B8C671011EEB41FB227C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:22:13 +0000
ROA not before: Wed 31 Dec 2025 03:22:00 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 137263
IP address blocks: 103.126.92.0/22 maxlen: 22
103.126.92.0/23 maxlen: 23
103.126.94.0/23 maxlen: 23
103.126.94.0/24 maxlen: 24
103.126.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl
rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458 (0x1ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF286, serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D
Validity
Not Before: Dec 31 03:22:00 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a41355-a927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:87:9d:45:00:27:0c:9b:ac:9f:75:b7:3c:8e:
ca:20:ae:4b:f9:bd:d0:b7:c5:df:2d:17:b7:a1:09:
3e:cb:12:41:1b:e5:53:7d:a7:cf:db:9b:27:38:8d:
a4:2b:b5:fd:36:43:35:5f:b3:65:a4:ed:c6:09:20:
1c:c4:f9:6b:31:e8:04:e2:c5:7c:77:46:65:df:a8:
77:5c:69:04:00:80:be:5c:4f:47:1b:0b:bb:e6:74:
27:4c:3c:9e:9b:78:16:ca:27:f1:f3:95:14:f8:b0:
bc:bb:53:55:f1:ea:77:55:62:cb:83:c3:2c:08:76:
8f:6d:f8:00:9b:aa:bc:9e:e6:d4:8d:a4:20:c7:10:
1b:27:c8:3c:a4:83:94:0a:6f:5b:ef:43:81:c7:70:
fb:f2:0b:d1:c9:4e:a7:13:3d:13:96:49:ca:92:89:
52:1e:5c:f5:d9:88:da:fd:23:f3:e2:0e:1b:e9:a1:
d7:9c:ec:d3:02:48:65:8f:44:f3:f8:3d:85:dd:1c:
fa:39:8b:83:af:b5:8b:6b:d5:2d:de:a5:a2:28:61:
a5:67:0a:eb:98:1b:27:9f:1a:c8:a5:f0:2b:f4:13:
03:11:1b:42:a4:40:a1:42:30:b6:aa:8a:e3:d6:c1:
8e:b7:3f:b1:49:ce:04:7b:cc:96:b6:4e:5d:11:a6:
1c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:53:CD:A7:38:20:8D:14:AF:60:53:BB:61:D0:D2:45:F8:DC:7A:A3
X509v3 Authority Key Identifier:
keyid:10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/44BA2B8C671011EEB41FB227C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.126.92.0/22
Signature Algorithm: sha256WithRSAEncryption
48:90:ac:c2:e7:2f:3f:78:30:ae:c3:42:4c:d0:4c:4b:3f:bd:
e1:05:45:b1:26:39:e0:a5:28:74:c1:e4:15:a0:13:cd:65:92:
24:aa:36:32:6f:d9:d9:b9:eb:23:d7:2e:ec:51:58:ff:51:4b:
f9:fb:98:fb:bd:bc:73:c9:db:4a:9c:ca:4b:b3:83:8e:37:9d:
68:aa:eb:16:1d:5e:b3:e4:97:00:a3:e4:9e:42:41:a0:e0:4e:
ff:85:f4:c5:20:73:49:7c:4d:4e:a8:ca:e0:f5:2d:b0:95:96:
a0:9f:b7:5a:56:e6:d6:14:db:d9:30:20:a6:5d:b0:cb:86:8b:
09:6d:b5:b2:21:c8:0b:2a:42:09:61:cb:d1:6f:16:c3:ee:cb:
9c:5a:b3:42:8c:48:44:09:0b:83:f3:e8:35:32:83:3d:ed:af:
00:90:42:25:8b:bd:77:28:6d:e1:2f:02:44:97:6c:5e:d6:ff:
3e:63:4e:9e:9a:a1:46:0e:39:03:c5:6a:ed:c4:ee:3a:03:64:
b0:45:14:e6:75:8b:22:89:b2:f2:1a:9c:4a:1f:c6:1e:1c:6a:
29:5a:f7:a7:73:7a:f4:da:37:c7:b8:98:86:f4:e6:18:8f:ef:
f5:08:16:72:e0:40:df:1f:0d:67:28:18:48:e0:af:a0:66:e3:
a4:84:01:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:10 2026 by rpki-client