
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/45E6E5BA06DC11EA9B939B64C4F9AE02.roa
File: 45E6E5BA06DC11EA9B939B64C4F9AE02.roa (raw, json)
Hash identifier: 0G6OMftV6r7pwXRj79WaOdv+JwEFm4GYWS5bUDm09Lk=
Subject key identifier: 75:CF:6F:A9:A8:91:66:9F:24:29:13:D5:DC:2A:3F:EC:64:89:0E:3E
Certificate issuer: /CN=A91D921D/serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81
Certificate serial: 0D00
Authority key identifier: CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/45E6E5BA06DC11EA9B939B64C4F9AE02.roa
Signing time: Sat 30 May 2026 18:22:11 +0000
ROA not before: Sat 30 May 2026 18:22:11 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 137579
IP address blocks: 103.114.20.0/22 maxlen: 24
2402:c8c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl
rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:24:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3328 (0xd00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D921D, serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81
Validity
Not Before: May 30 18:22:11 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a1b2ad3-1d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:16:09:f0:31:e1:a8:2e:cb:0c:e1:e5:6b:c3:
df:5d:c6:e0:b9:73:45:82:e4:44:35:c9:72:b0:35:
8f:b2:3a:da:10:82:a3:15:d3:46:e2:b0:cc:11:17:
32:73:e8:26:1b:aa:e1:12:23:40:99:96:d6:90:3e:
66:6c:22:2f:8f:af:24:11:b8:ae:19:31:f4:c4:ff:
4f:dd:22:78:5e:52:f7:33:96:13:8a:f3:03:71:ff:
96:e2:21:e8:01:6b:1b:d1:73:c9:a8:64:94:ec:65:
e6:2e:9e:f9:de:23:f6:57:d2:bc:29:81:cd:6e:af:
85:ef:14:fd:fa:24:a1:96:25:9f:89:7a:1f:50:4b:
71:fb:8d:69:65:2a:a3:c1:0c:48:f7:5c:03:f4:4d:
e4:2b:cb:19:60:ff:89:c6:79:6a:25:bf:b8:79:c0:
42:03:ff:1e:dd:ab:29:c9:52:a7:f8:5b:13:70:6b:
87:b9:2c:84:b9:5d:20:58:f7:a1:be:05:29:96:46:
ff:6e:e2:51:b4:58:dd:df:b4:a3:cd:52:38:06:61:
21:c3:04:71:60:b7:b8:51:65:ba:4d:a2:98:b9:c9:
d3:a6:7b:c8:e7:21:1e:a1:c7:08:87:9a:c9:43:1e:
39:c9:16:ac:56:81:9c:fc:4c:1b:7e:f7:d1:b9:7f:
b1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CF:6F:A9:A8:91:66:9F:24:29:13:D5:DC:2A:3F:EC:64:89:0E:3E
X509v3 Authority Key Identifier:
keyid:CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/45E6E5BA06DC11EA9B939B64C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.114.20.0/22
IPv6:
2402:c8c0::/32
Signature Algorithm: sha256WithRSAEncryption
52:60:a5:a9:fc:20:bd:75:a8:b4:4c:d8:11:7d:5b:b7:4d:e0:
6f:a0:fe:d9:18:ba:92:0d:39:9f:97:fc:ee:9d:93:74:77:5f:
a0:17:e6:d5:98:58:f4:a2:1a:c2:d4:41:bc:99:ea:a2:fb:d3:
78:b4:8a:34:34:7e:ea:30:f0:07:95:f7:b0:11:25:f8:d7:a2:
0c:3d:c9:70:46:36:7b:6f:5e:ab:39:26:d5:5b:cd:b2:4b:87:
11:3b:3c:2d:6c:b0:f6:b6:95:f0:c1:36:15:a9:ee:28:a3:cd:
2e:5b:83:ce:73:fa:c5:2f:c2:f0:6d:f3:a6:1d:9a:6e:d2:48:
d5:b0:82:c0:b9:16:1c:b8:00:24:16:32:f0:51:58:68:73:f9:
29:11:c7:8e:27:24:87:ff:da:2f:81:41:0e:1a:12:e9:bd:7b:
c7:bb:01:ea:6e:da:cd:1a:1c:c2:46:13:23:d6:b6:f7:02:aa:
fa:bf:57:8a:b3:c8:91:8d:03:c0:22:d9:a0:fb:fb:39:97:83:
cb:a5:1d:11:f9:c7:1c:a1:29:c5:0a:2b:72:57:a9:a1:bd:3d:
81:64:5e:17:91:ca:e8:78:6b:75:61:e9:b8:94:97:75:64:61:
03:50:61:7d:e4:27:7e:15:04:79:01:5e:d6:26:ee:8f:7a:9e:
fc:fd:91:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:44:56 2026 by rpki-client