
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/4405F70C03AE11F08ECE4754C4F9AE02.roa
File: 4405F70C03AE11F08ECE4754C4F9AE02.roa (raw, json)
Hash identifier: X0GjMRG4dEnMLVkFKc2T4kw95ktzxto415/8z5wspik=
Subject key identifier: 98:9E:A6:F2:06:A6:56:7C:E3:E6:0D:01:38:38:28:41:67:78:FF:31
Certificate issuer: /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC
Certificate serial: 0248
Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/4405F70C03AE11F08ECE4754C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:18:16 +0000
ROA not before: Tue 18 Mar 2025 04:05:45 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 153656
IP address blocks: 103.163.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl
rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 584 (0x248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF4A1, serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC
Validity
Not Before: Mar 18 04:05:45 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a458b8-71e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b4:9e:46:7e:92:c8:3d:ac:de:5d:0e:56:20:
79:de:ba:1b:f5:7e:b7:f2:a9:2e:94:c3:9a:3e:9f:
4a:3a:d7:6c:00:c4:7c:e9:a8:42:68:86:0d:d0:85:
fd:75:8b:ce:7c:16:ef:b2:d2:7b:b7:12:ed:d8:a0:
27:87:91:ea:63:cc:8f:43:a9:35:fd:0d:c4:58:72:
f3:fe:91:b9:ab:53:f8:d5:42:7e:0f:1d:5b:31:b0:
41:1b:84:43:24:3e:18:da:a6:29:a1:7d:3d:ef:eb:
d9:d8:46:2a:3d:b0:c2:e3:0d:a3:3b:d5:90:ff:e0:
85:4b:37:cc:33:e4:a2:0f:ef:a0:2e:5b:5f:aa:1f:
f1:5a:cf:bc:69:4a:eb:83:01:60:94:08:e4:78:5e:
75:4e:b0:d1:9b:c6:26:d8:34:70:7f:30:84:df:fd:
c3:e6:f9:52:2a:54:7e:ed:0a:40:36:3a:93:66:08:
b9:b6:e6:8d:07:74:68:22:3e:f2:63:38:90:e4:07:
1d:30:f4:d5:d3:12:4e:65:62:53:14:bf:da:be:f9:
d2:76:e6:f9:dc:c3:01:bf:3f:8c:3c:c0:df:01:37:
1b:ef:1d:89:b7:2b:77:32:0a:3c:fc:10:40:e7:be:
67:c4:0e:1f:d1:d2:14:7d:16:af:49:97:22:fb:fd:
54:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9E:A6:F2:06:A6:56:7C:E3:E6:0D:01:38:38:28:41:67:78:FF:31
X509v3 Authority Key Identifier:
keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/4405F70C03AE11F08ECE4754C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.163.208.0/24
Signature Algorithm: sha256WithRSAEncryption
50:69:03:b7:49:a2:4f:ac:db:97:1c:c8:54:6f:c7:3f:be:fa:
ab:e7:6f:e6:9e:d0:cf:65:34:02:36:1a:dd:af:4c:42:cb:72:
7c:12:90:51:aa:e9:d1:07:21:ae:d0:17:aa:28:f2:2f:aa:e5:
59:f3:51:50:cc:87:8d:da:7d:a9:8a:04:3d:bf:c7:59:ee:80:
e5:e8:37:c3:8d:13:14:b9:6a:bd:49:88:ce:e6:07:f2:b5:cd:
8e:b2:28:5c:ef:bf:d8:0a:de:63:4a:7a:87:68:49:07:04:9c:
f1:26:96:9b:a2:2b:8f:08:19:b1:9d:05:7c:8c:9b:9a:d2:c0:
47:45:d7:5d:95:05:de:fe:9f:3d:8e:d2:4c:46:d7:0a:98:35:
35:8e:6a:97:2d:3c:39:e5:ef:b7:11:6c:dd:8f:1d:72:f6:42:
1d:e3:2c:b1:59:da:6e:48:d8:e6:45:b7:d0:95:02:cb:98:f5:
68:87:80:d2:37:a3:b9:cb:7b:0e:28:2a:55:73:22:5c:55:fb:
e9:c2:1d:e3:41:ca:a6:21:ac:68:92:18:db:65:01:f1:ee:16:
34:c6:f7:20:ce:62:88:d9:8f:51:7f:ea:10:ce:5a:45:43:32:
41:fc:ea:17:68:5b:6e:cf:37:39:84:d3:0c:35:73:95:a3:e3:
95:26:e7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:16 2026 by rpki-client