
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/C2AB1A10B64411E89321A417C4F9AE02.roa
File: C2AB1A10B64411E89321A417C4F9AE02.roa (raw, json)
Hash identifier: rmM0QcRqjLZ27Q1JJZQYVuOq7Wu8g9V60G3/mrOlm6Y=
Subject key identifier: 64:C9:B8:69:E1:DB:A2:A4:6F:4A:51:65:65:07:72:6F:27:B4:9D:33
Certificate issuer: /CN=A91D8B7C/serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943
Certificate serial: 144F
Authority key identifier: 24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/C2AB1A10B64411E89321A417C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:32:59 +0000
ROA not before: Fri 04 Jul 2025 17:26:37 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 137952
IP address blocks: 103.118.44.0/22 maxlen: 22
103.118.44.0/24 maxlen: 24
103.118.45.0/24 maxlen: 24
103.118.46.0/24 maxlen: 24
103.118.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl
rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:24:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5199 (0x144f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8B7C, serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943
Validity
Not Before: Jul 4 17:26:37 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a423eb-d2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6e:d7:3a:02:76:36:85:7f:b6:7a:7b:1d:e9:
9f:7f:47:9c:54:5e:74:89:55:d2:7c:53:14:95:e0:
75:22:3f:ba:ee:8b:b1:34:58:d8:f4:88:b6:6c:1a:
50:22:dc:84:a8:6f:e2:42:b9:3e:99:c9:25:a1:cd:
59:bd:3c:96:4c:ed:7a:7d:13:5e:47:50:47:98:8e:
d9:41:a2:af:43:b0:c4:2f:6e:e7:f0:22:7c:42:ef:
7d:4f:7a:3c:c5:87:2f:34:81:af:8c:18:93:db:bf:
33:5e:ce:ae:80:5d:85:ac:75:63:54:9a:05:dc:68:
57:cb:06:81:bd:76:80:9a:0f:fa:6c:ef:cf:8c:5c:
15:fa:c1:98:7b:e4:73:40:3f:73:03:6d:f7:ce:26:
86:b8:bb:36:eb:6c:ab:11:5e:b6:aa:89:75:d4:04:
ab:00:0b:7a:6f:89:5a:56:71:d9:f6:8d:d4:98:32:
09:99:0c:d2:ff:e2:30:7f:64:e6:64:23:f6:32:52:
27:04:4a:15:11:25:1f:88:cd:a4:8d:78:3f:45:81:
95:f2:3a:76:dd:d4:35:90:1d:55:bd:59:da:18:28:
fa:58:e1:a6:de:40:b7:9d:0d:eb:1c:6d:4b:20:f0:
78:49:47:2c:d7:dd:16:2b:55:8a:f8:bd:11:27:44:
97:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C9:B8:69:E1:DB:A2:A4:6F:4A:51:65:65:07:72:6F:27:B4:9D:33
X509v3 Authority Key Identifier:
keyid:24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/C2AB1A10B64411E89321A417C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.118.44.0/22
Signature Algorithm: sha256WithRSAEncryption
85:1c:f8:75:f7:4c:ce:10:92:b7:57:f6:54:eb:33:c5:80:5c:
70:c8:3d:84:cd:a1:e9:f4:56:f8:c9:3e:5d:65:07:9f:3c:38:
a4:54:b9:72:8f:b2:70:99:52:24:cd:f1:d5:c2:c7:be:7e:16:
9e:31:a3:12:8b:e2:67:c1:bd:cf:80:40:56:ea:c8:d2:db:e4:
36:9e:72:6b:de:a7:43:f1:37:e9:df:90:32:a1:03:92:e3:48:
55:12:09:57:90:f1:49:ae:5d:b0:27:64:cd:02:6c:b0:04:5f:
3b:40:5a:4b:af:e2:72:ac:a0:64:ef:69:98:43:ab:a6:39:49:
a2:ec:35:91:dc:cf:05:8b:25:69:e6:b9:ef:06:0c:80:f8:f0:
6d:51:70:d2:fa:6c:89:fc:55:89:7a:98:cb:c1:7d:f2:60:bc:
8f:7d:0b:da:b1:b3:9c:b4:3a:ce:99:5b:0b:b1:3a:78:1e:63:
93:55:5d:47:fe:e5:9c:d4:79:fc:41:5c:b8:3f:b1:b2:c5:1c:
c1:12:d9:40:70:07:42:2e:c9:84:09:73:d7:0b:90:09:0f:b9:
65:4a:a4:42:63:d6:ab:68:07:27:57:31:33:dc:f1:9e:85:e2:
a3:c3:0b:0d:b1:23:24:00:5e:c7:c6:7f:94:05:9a:76:64:3c:
fd:af:1e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:26 2026 by rpki-client