
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/F4777FBEEDDA11EF9731160CC4F9AE02.roa
File: F4777FBEEDDA11EF9731160CC4F9AE02.roa (raw, json)
Hash identifier: tZoqe0Wr8WxlyxJlU9JnoVv0Dbj1abCtUlpInyE8avA=
Subject key identifier: 12:A4:25:2A:35:A2:6C:4D:EA:0C:D4:CF:47:CD:48:BB:8A:B6:F3:B1
Certificate issuer: /CN=A91C8347/serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083
Certificate serial: 01C8
Authority key identifier: 2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/F4777FBEEDDA11EF9731160CC4F9AE02.roa
Signing time: Fri 05 Jun 2026 04:36:39 +0000
ROA not before: Fri 05 Jun 2026 04:36:39 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 63150
IP address blocks: 103.219.192.0/24 maxlen: 24
103.219.193.0/24 maxlen: 24
103.219.194.0/24 maxlen: 24
103.219.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl
rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456 (0x1c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8347, serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083
Validity
Not Before: Jun 5 04:36:39 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a225257-eab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ab:f2:1e:7d:74:54:e0:e8:a1:81:dd:a0:f3:
8b:5c:27:19:9b:38:55:cd:5f:08:7b:e9:b0:6c:38:
aa:2f:5e:5e:bf:d6:9c:21:1d:72:82:50:61:53:a1:
14:0b:f7:e9:32:5a:49:df:0e:89:74:bc:ff:76:b7:
ae:5b:b5:b8:af:31:ae:48:42:ea:17:f4:81:98:a9:
56:f8:8f:ec:c3:1c:22:95:fa:31:f6:cb:eb:df:37:
cf:d4:ea:56:5c:22:7f:75:a8:8d:df:0a:f4:14:4e:
96:c0:52:40:5c:ee:db:5c:93:b1:19:02:18:92:97:
02:cd:68:f0:42:34:ba:3e:a4:c6:58:f3:e9:38:a3:
ea:ae:06:5f:2e:4e:93:f1:8e:f7:fe:40:f3:da:88:
1e:c1:74:8a:ea:f3:dc:05:bd:33:9f:83:8f:5c:56:
2a:8d:af:5f:d3:06:ba:cc:ca:d8:c0:26:1c:d9:ac:
c7:ac:90:0e:25:2e:12:8f:04:34:85:2d:5d:2f:3b:
fc:bd:4e:f1:2b:f1:1d:83:66:25:45:6d:86:86:9d:
9a:cc:6e:f8:64:50:ec:df:2b:e5:df:48:f1:85:bb:
13:fb:c1:df:d0:66:6f:76:58:a8:fb:6a:10:00:7f:
69:be:33:2b:a7:00:af:8d:0f:a9:ae:bb:71:a4:d6:
19:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A4:25:2A:35:A2:6C:4D:EA:0C:D4:CF:47:CD:48:BB:8A:B6:F3:B1
X509v3 Authority Key Identifier:
keyid:2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/F4777FBEEDDA11EF9731160CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.219.192.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:be:8c:c6:e6:fa:2c:fb:62:da:31:42:58:06:e1:6a:59:f6:
11:c5:23:30:16:8e:71:c9:f7:3d:19:52:44:e9:8a:d5:9f:5d:
53:37:1e:be:49:90:cc:7f:e3:9a:35:2b:43:42:2f:ac:62:6a:
de:99:7b:60:57:72:d5:12:23:14:82:14:42:d3:09:80:df:34:
0f:ab:37:9b:65:b2:7d:30:09:dd:18:63:fe:6d:c8:47:4a:41:
e3:e6:33:ca:a0:d7:a2:c1:21:f0:60:1e:38:42:aa:5d:a8:61:
50:a4:db:31:02:7b:ed:71:01:4e:94:8e:64:6f:f8:7b:7a:78:
d2:5d:06:cd:91:5c:cc:d9:d2:ea:10:93:20:c4:90:dd:49:45:
4c:bd:04:25:30:d2:e7:02:ac:d3:dc:13:de:e4:0a:f0:5f:93:
11:27:59:1a:47:5e:35:d5:d6:0f:d5:bd:5d:be:56:4f:8b:d6:
a6:4c:43:a5:75:4e:54:a5:ee:72:5a:82:5c:2b:ef:28:e2:a7:
01:27:2e:f7:77:2c:62:b4:d7:ff:fc:99:c6:5b:27:7f:59:b2:
d7:95:fe:19:f9:80:97:f0:01:9d:0a:3a:96:6d:9f:0c:e5:68:
fb:42:7a:a2:4d:9d:30:72:da:36:60:54:24:cd:7d:2e:b1:b7:
85:b1:41:34
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzgzNDcxMTAvBgNVBAUTKDJBREJCNzFCMTE1MjNDQTMzOTJFNUYzN0Q5REM3NkIy
MTFEQkUwODMwHhcNMjYwNjA1MDQzNjM5WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTIyNTI1Ny1lYWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsKvyHn10VODooYHdoPOLXCcZmzhVzV8Ie+mwbDiqL15ev9acIR1yglBhU6EU
C/fpMlpJ3w6JdLz/dreuW7W4rzGuSELqF/SBmKlW+I/swxwilfox9svr3zfP1OpW
XCJ/daiN3wr0FE6WwFJAXO7bXJOxGQIYkpcCzWjwQjS6PqTGWPPpOKPqrgZfLk6T
8Y73/kDz2ogewXSK6vPcBb0zn4OPXFYqja9f0wa6zMrYwCYc2azHrJAOJS4SjwQ0
hS1dLzv8vU7xK/Edg2YlRW2Ghp2azG74ZFDs3yvl30jxhbsT+8Hf0GZvdlio+2oQ
AH9pvjMrpwCvjQ+prrtxpNYZpwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBKkJSo1
omxN6gzUz0fNSLuKtvOxMB8GA1UdIwQYMBaAFCrbtxsRUjyjOS5fN9ncdrIR2+CD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODM0Ny9DM0U3MjE5MEY5
QTkxMUVFQTgyQTc5MUFDNEY5QUUwMi9LdHUzR3hGU1BLTTVMbDgzMmR4MnNoSGI0
SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0t0dTNHeEZTUEtNNUxsODMyZHgyc2hIYjRJTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzgzNDcvQzNFNzIxOTBGOUE5MTFFRUE4MkE3OTFBQzRGOUFFMDIvRjQ3NzdGQkVF
RERBMTFFRjk3MzExNjBDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ9vAMA0GCSqGSIb3DQEBCwUAA4IBAQAfvozG5vos+2LaMUJYBuFq
WfYRxSMwFo5xyfc9GVJE6YrVn11TNx6+SZDMf+OaNStDQi+sYmremXtgV3LVEiMU
ghRC0wmA3zQPqzebZbJ9MAndGGP+bchHSkHj5jPKoNeiwSHwYB44QqpdqGFQpNsx
AnvtcQFOlI5kb/h7enjSXQbNkVzM2dLqEJMgxJDdSUVMvQQlMNLnAqzT3BPe5Arw
X5MRJ1kaR1411dYP1b1dvlZPi9amTEOldU5Upe5yWoJcK+8o4qcBJy73dyxitNf/
/JnGWyd/WbLXlf4Z+YCX8AGdCjqWbZ8M5Wj7QnqiTZ0wcto2YFQkzX0usbeFsUE0
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:05:28 2026 by rpki-client