
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/025F93342CC111F18F49A0CD8E833773.roa
File: 025F93342CC111F18F49A0CD8E833773.roa (raw, json)
Hash identifier: efeH+8ITF9VuqugTdYaNYjer96574XMhIme4L79/0MM=
Subject key identifier: AC:12:4C:B4:6E:F3:43:72:72:43:61:8D:32:8E:3A:66:75:D8:19:5C
Certificate issuer: /CN=A91D7578/serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7
Certificate serial: 06CE
Authority key identifier: EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/025F93342CC111F18F49A0CD8E833773.roa
Signing time: Thu 04 Jun 2026 23:27:18 +0000
ROA not before: Thu 04 Jun 2026 23:27:18 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 134143
IP address blocks: 14.102.164.0/24 maxlen: 24
14.102.165.0/24 maxlen: 24
14.102.166.0/24 maxlen: 24
45.248.196.0/22 maxlen: 24
103.4.55.0/24 maxlen: 24
103.55.92.0/24 maxlen: 24
103.55.93.0/24 maxlen: 24
103.55.94.0/24 maxlen: 24
103.55.95.0/24 maxlen: 24
103.133.52.0/22 maxlen: 24
103.217.164.0/22 maxlen: 24
103.228.104.0/22 maxlen: 24
2405:e180::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl
rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1742 (0x6ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7578, serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7
Validity
Not Before: Jun 4 23:27:18 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a2209d5-6207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9c:33:cd:b0:b2:99:f8:72:45:19:25:2e:93:
f6:89:0c:5c:f9:d9:c4:7e:42:05:51:8d:57:b5:e1:
5a:79:d4:64:bc:77:b5:98:c9:54:6f:a3:92:12:3a:
6b:6f:92:57:62:9a:07:16:d9:af:3d:41:01:a4:03:
7b:a4:e5:67:93:cc:36:f6:9b:44:4f:c9:fc:f1:40:
d7:d9:28:d6:ab:0f:62:47:6b:7e:1d:60:35:42:2a:
ed:30:73:9e:b2:65:b2:99:71:66:9b:38:14:07:fe:
b0:08:21:bc:4d:92:99:b8:d5:0a:fa:62:2a:22:8a:
6e:f5:42:93:87:9d:c5:c9:4f:be:73:f8:8d:0c:c5:
76:62:80:79:32:34:77:c1:9b:6a:c1:d5:d8:3f:43:
87:97:a0:90:97:96:44:f9:b5:68:3f:84:2b:2c:86:
3f:4e:91:f1:a6:de:28:a9:bb:04:6c:1c:c6:09:95:
43:ae:de:48:3b:7c:c3:fc:98:d5:b9:81:14:09:c7:
f1:4e:64:22:c1:4b:79:31:ab:a4:b1:17:ce:e9:43:
e7:4f:f1:39:b4:5a:d3:13:61:4e:c8:33:54:32:59:
8b:5f:63:64:21:03:b2:f7:34:9c:ae:1a:12:49:9e:
d9:3c:4f:e4:78:a1:a3:2e:7a:79:3e:0c:2f:2b:30:
e2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:12:4C:B4:6E:F3:43:72:72:43:61:8D:32:8E:3A:66:75:D8:19:5C
X509v3 Authority Key Identifier:
keyid:EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/025F93342CC111F18F49A0CD8E833773.roa
sbgp-ipAddrBlock: critical
IPv4:
14.102.164.0-14.102.166.255
45.248.196.0/22
103.4.55.0/24
103.55.92.0/22
103.133.52.0/22
103.217.164.0/22
103.228.104.0/22
IPv6:
2405:e180::/32
Signature Algorithm: sha256WithRSAEncryption
35:2b:f6:4d:e3:38:1a:6e:54:aa:e5:65:d7:68:97:6e:4d:c7:
29:49:92:c9:fd:91:0f:31:fb:63:c2:53:b5:f4:46:5f:e0:11:
d5:ca:14:5a:90:77:a7:ce:61:46:ac:f0:8f:5f:96:0f:5c:f3:
a9:85:7d:9c:b0:a0:7d:99:2f:f2:af:4f:0f:a8:3a:69:63:0d:
a3:e3:6b:9c:63:0a:06:43:c0:f5:2d:7e:90:86:fc:54:c8:24:
b0:54:1c:a3:f2:80:f7:ef:cd:f1:95:75:f8:1e:42:05:b2:39:
af:ca:aa:9c:b9:ca:8b:c1:bf:b9:f0:11:39:eb:55:66:7f:a2:
ac:7e:c7:e9:41:b7:a6:1f:10:39:1e:ee:44:b3:51:a2:0e:16:
5e:f6:bf:ee:4e:2b:df:7e:07:4e:06:74:b8:0c:af:1d:e2:ee:
bb:75:1b:3e:e2:23:7e:ca:21:e7:33:e5:58:e6:7f:ee:c7:fe:
e5:0a:2a:15:9f:13:0a:8e:1f:0e:18:c4:04:ee:e3:3e:d9:d2:
11:f5:a2:cd:46:1e:0a:bd:92:c8:37:91:99:d4:68:f7:69:32:
83:a9:ae:d2:88:46:fb:c9:4c:b9:e3:16:9d:37:8e:f5:eb:16:
4a:ee:2a:ac:62:28:2f:0b:52:18:67:c4:bb:3f:2c:7f:c7:cf:
ca:f1:e5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:07:09 2026 by rpki-client