
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/CF5422842CB111F19655F1BDC9833773.roa
File: CF5422842CB111F19655F1BDC9833773.roa (raw, json)
Hash identifier: 8ZwBOZ7hrFX3NuDI+RJpwp5MuhVPjE9cVYyKjGDrr3I=
Subject key identifier: 45:60:44:CD:69:E7:66:01:BB:6E:6A:79:1B:E9:DF:51:E0:89:7E:4B
Certificate issuer: /CN=A91D425A/serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7
Certificate serial: 0BC5
Authority key identifier: 04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/CF5422842CB111F19655F1BDC9833773.roa
Signing time: Mon 13 Apr 2026 05:47:57 +0000
ROA not before: Mon 13 Apr 2026 05:47:57 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 2914
IP address blocks: 103.247.68.0/24 maxlen: 24
103.247.69.0/24 maxlen: 24
103.247.70.0/24 maxlen: 24
103.247.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl
rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:54:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3013 (0xbc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D425A, serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7
Validity
Not Before: Apr 13 05:47:57 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69dc838c-e512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:db:d7:f5:a0:23:f2:1e:48:29:87:bc:2c:
95:a6:b4:b5:71:74:ce:a2:41:e9:8c:c6:b0:8a:e6:
69:ed:8d:9d:60:32:e9:ff:43:bf:23:80:c0:01:ec:
cd:b4:d4:b3:ac:d6:bc:0c:ec:d5:28:16:32:7d:49:
6c:ab:95:f0:52:33:a3:41:26:f9:f1:9a:9d:b4:64:
61:aa:e3:e9:cf:63:12:21:a8:aa:b5:6c:66:df:cd:
2f:1f:1a:ff:94:f1:21:7a:c7:79:7a:5e:cb:ac:03:
c2:cc:30:fa:2a:74:d9:41:1b:42:4a:8a:d8:3e:a6:
81:15:b0:6c:75:68:6f:cf:08:63:43:ef:09:44:8b:
a9:21:5f:fb:91:63:d3:42:87:40:95:b3:c0:a6:45:
5a:69:ad:c8:ba:eb:e7:c1:81:6f:ff:ae:f2:ad:a2:
d9:72:2f:ee:99:91:11:53:9f:02:36:37:26:ae:00:
a9:ee:75:18:47:f4:6e:6e:18:b5:5e:21:17:a3:75:
0b:74:13:3b:84:b6:4d:f5:5f:76:c0:de:fd:f2:51:
ac:ca:9d:df:d7:db:d7:c9:ac:63:d5:cc:2f:b6:df:
e5:ff:5b:98:74:61:52:a3:71:88:78:18:5b:ba:73:
ab:38:e3:32:de:13:24:ad:c1:cb:b0:53:63:21:39:
b9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:60:44:CD:69:E7:66:01:BB:6E:6A:79:1B:E9:DF:51:E0:89:7E:4B
X509v3 Authority Key Identifier:
keyid:04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/CF5422842CB111F19655F1BDC9833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.247.68.0/22
Signature Algorithm: sha256WithRSAEncryption
84:52:74:de:7b:04:8c:f0:e9:2a:55:fe:52:30:95:f7:61:1e:
cf:32:21:73:e4:36:cb:3c:25:ea:51:df:f5:5d:5d:6e:33:3d:
43:8b:ff:68:82:32:02:7c:55:28:92:67:42:d9:4a:84:5a:4e:
9f:c4:ba:6d:f4:af:ae:27:17:30:e5:f3:d4:26:b2:88:34:8c:
c2:76:1d:41:ea:2b:c4:b6:23:00:eb:cc:9f:49:d2:36:fc:5e:
44:15:dc:40:d1:bc:10:ff:cd:cc:41:d4:1f:db:ad:21:9d:f5:
01:26:ad:79:a8:7e:c5:e9:74:6a:cd:ee:c4:bf:bc:80:9b:ab:
53:b5:71:47:24:8d:51:af:6b:22:a5:26:90:a1:9f:6f:cd:94:
f4:e3:63:9d:74:20:0d:20:fe:ee:fe:18:79:c3:9f:28:51:5e:
4a:c2:04:0c:af:03:69:e4:99:8d:01:ad:cf:a2:43:62:2b:92:
07:59:e1:20:3b:7e:ad:17:dc:f5:01:25:d5:b1:de:94:a5:38:
28:e2:81:a7:2b:7f:00:92:4b:19:d3:ac:13:fe:2c:03:3d:4c:
66:22:a6:80:b3:5a:81:25:10:98:4f:0f:12:00:47:ec:a2:ba:
5a:4d:39:84:d1:1a:77:2b:19:4d:a9:4f:37:9c:fb:89:44:7d:
9f:67:3f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:40 2026 by rpki-client