
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/46602E62E99D11EFB8E6881DC4F9AE02.roa
File: 46602E62E99D11EFB8E6881DC4F9AE02.roa (raw, json)
Hash identifier: ZmtqXPmveCIw89AweUHmN7kqo0fmi3wDzva2kCjXnFI=
Subject key identifier: 20:24:12:7A:4A:B2:3A:66:C1:50:83:FC:08:5D:D8:DC:E3:89:E3:F8
Certificate issuer: /CN=A91D41AC/serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377
Certificate serial: F4
Authority key identifier: BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/46602E62E99D11EFB8E6881DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:14:05 +0000
ROA not before: Thu 13 Feb 2025 00:17:38 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 135513
IP address blocks: 43.252.124.0/22 maxlen: 24
103.9.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl
rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D41AC, serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377
Validity
Not Before: Feb 13 00:17:38 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a481ed-227d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5a:61:6e:15:61:18:72:0d:34:78:bc:a8:eb:
f1:d1:80:cf:2d:43:da:1f:b5:8e:11:3e:7a:1a:f0:
a3:23:5a:20:57:34:40:b8:96:64:2a:c8:06:cb:31:
74:63:27:93:de:13:a7:37:c3:83:27:5d:79:07:58:
30:4b:ac:03:58:64:1a:48:19:d1:a8:7c:b4:b5:e9:
17:9a:db:5d:94:80:5e:80:58:c7:f9:3f:89:45:fe:
b1:31:70:7f:eb:5a:c1:a8:c1:ba:37:66:4c:0a:a2:
24:0b:af:aa:e2:50:8d:1e:b0:65:97:b9:2f:5b:d8:
ca:78:2b:0c:94:06:f7:7b:13:b7:34:20:90:34:42:
c6:e9:fb:2e:54:68:09:81:51:3c:30:3c:e0:4e:83:
47:a8:a2:cc:82:e5:d6:05:f0:ae:5b:6a:33:b9:e6:
29:7e:ce:b8:0d:c7:b4:77:06:53:0f:61:47:cd:ab:
c4:8a:db:f3:32:34:ae:68:10:09:8a:f5:79:fe:c9:
f1:bd:f1:17:fc:5c:5f:e9:f9:63:75:17:81:09:9d:
7b:f0:2f:8f:72:91:5a:fa:9a:1e:a7:04:8f:4d:23:
5a:46:ed:81:c6:b3:a0:8d:8b:93:f7:2a:63:04:3f:
6f:f9:06:f8:12:bc:5f:b0:90:bd:dd:25:b5:b8:ba:
72:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:24:12:7A:4A:B2:3A:66:C1:50:83:FC:08:5D:D8:DC:E3:89:E3:F8
X509v3 Authority Key Identifier:
keyid:BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/46602E62E99D11EFB8E6881DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.252.124.0/22
103.9.52.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:b1:d3:4a:23:a6:3e:27:f8:a6:67:a2:64:6f:f8:f5:dd:b2:
6d:cb:d9:c9:be:38:f6:69:b1:d8:16:2c:11:b0:b1:3b:de:06:
9a:60:72:da:61:52:b6:65:0d:22:4f:bb:e1:08:a1:a6:1d:b3:
bd:ae:2f:74:b0:99:93:7e:ce:e7:8e:05:88:77:11:1c:77:ab:
99:43:75:bc:6f:ac:d8:ef:ec:1d:81:76:5b:47:04:4d:92:97:
d1:1c:8c:7b:75:c4:48:d3:bc:0e:ed:4e:eb:49:a1:07:6d:1c:
53:3a:d2:a1:57:28:b9:c6:d8:b1:30:2e:90:94:4d:f9:f1:aa:
17:b7:26:41:70:0a:7c:9c:7d:48:19:56:e6:78:8d:09:0f:65:
3c:67:80:47:f0:93:0d:56:f6:cd:31:1c:b0:1d:6f:59:dc:c5:
be:cb:a2:13:d8:9b:6e:fd:a6:8b:f5:13:0d:9f:36:14:37:95:
db:db:b1:89:43:ac:ea:f4:e1:78:99:fc:0d:c6:57:7b:14:54:
aa:01:5d:ef:19:8a:b8:f6:97:42:47:c2:57:bd:35:57:60:d6:
da:b1:bb:89:43:06:cd:19:ff:e7:8d:96:ff:6b:33:8a:01:d2:
1a:72:0e:8d:85:ff:0a:b9:52:a9:59:f9:22:ec:6e:92:4a:58:
16:dc:71:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:23:49 2026 by rpki-client