
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/42CC52ECC68111EFAE49FF5FC4F9AE02.roa
File: 42CC52ECC68111EFAE49FF5FC4F9AE02.roa (raw, json)
Hash identifier: BpbgeH/Vr/553sYirLn87E6dC8av6GNKTUUgGPnSWFc=
Subject key identifier: E2:A1:BE:58:13:AA:3E:60:17:B9:B3:4E:B5:CD:64:D0:7C:00:93:6F
Certificate issuer: /CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74
Certificate serial: 08EE
Authority key identifier: 49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/42CC52ECC68111EFAE49FF5FC4F9AE02.roa
Signing time: Fri 12 Jun 2026 21:24:13 +0000
ROA not before: Fri 12 Jun 2026 21:24:13 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 55933
IP address blocks: 103.213.244.0/22 maxlen: 24
144.48.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl
rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2286 (0x8ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA10A, serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74
Validity
Not Before: Jun 12 21:24:13 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a2c78fd-57f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4f:a5:bf:f7:ad:35:e3:77:bb:44:55:3e:a8:
f1:c5:47:53:e9:90:00:9e:01:67:d2:23:7b:cc:0f:
9a:54:3b:a0:65:a7:27:a7:2d:9d:56:28:33:d1:f8:
54:5a:36:2b:27:18:c8:9d:31:88:46:d8:b5:d3:a5:
a4:50:51:0e:38:ce:67:54:76:b1:12:bc:06:49:da:
c8:aa:03:e9:26:2b:d8:f8:ff:4a:d0:91:b4:40:45:
d4:22:c2:b7:ac:34:bf:30:5f:96:e6:bc:70:86:79:
d5:25:6e:18:83:ad:5d:09:45:2d:52:c3:21:28:10:
3c:2f:b2:39:a0:cf:d3:bb:c0:b3:cb:3f:58:c3:b1:
65:37:df:22:c2:1f:9b:21:55:fe:36:c6:c0:9a:74:
89:ed:30:6c:9d:d1:5e:95:62:eb:00:24:f6:63:dd:
23:8c:00:41:f5:a9:87:92:db:0b:40:a9:36:68:df:
9b:ed:2d:fb:6a:3b:75:56:a4:70:7f:44:1c:3d:54:
1a:85:8b:f9:b8:b4:dd:e9:e1:93:42:72:3b:ee:54:
ad:cd:4b:45:46:77:10:fb:9d:bb:0b:56:e2:ae:48:
d0:74:43:dc:e0:ed:3b:00:7e:2b:e3:eb:2a:17:c7:
95:47:be:4f:3e:d9:a2:67:92:a4:59:48:6d:fa:7f:
b3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A1:BE:58:13:AA:3E:60:17:B9:B3:4E:B5:CD:64:D0:7C:00:93:6F
X509v3 Authority Key Identifier:
keyid:49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/42CC52ECC68111EFAE49FF5FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.213.244.0/22
144.48.4.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:8b:5c:e0:8f:f4:45:27:3a:54:3d:c1:9c:b5:da:9d:2f:44:
b7:75:6a:b2:0c:88:d2:6b:b2:59:d0:34:f9:0f:a0:60:b0:7a:
42:86:42:b4:e0:cd:34:ee:1e:89:15:1c:9d:18:95:36:93:eb:
db:4c:3d:e4:61:1d:e6:fd:d4:c8:a2:68:e5:5f:6f:a4:f5:51:
05:f0:23:4b:98:b3:7c:26:0e:c2:a5:7e:65:7d:20:b0:c3:c8:
db:57:03:cd:d5:1c:cf:56:0e:10:f9:34:c6:05:6e:26:89:37:
5e:4f:d7:68:b8:27:5d:4a:a5:6a:bc:f4:84:88:65:c9:da:b5:
0d:b7:57:9e:e2:5a:49:79:48:9e:79:ce:1b:c5:1b:b4:b4:13:
3c:fd:f9:c4:30:83:20:e7:84:cb:56:1d:bf:fd:a6:22:78:b5:
9e:85:62:cf:d9:c0:95:98:24:95:d3:2e:00:f3:a2:57:a8:fb:
f7:38:76:3c:10:06:00:3d:6e:39:4d:d6:1e:f1:02:93:5e:43:
dc:1d:65:45:81:74:0a:8a:09:8a:31:b2:6c:32:9d:aa:1a:ee:
10:45:ee:69:d5:6c:ea:df:f1:3c:9d:fd:de:ef:69:e1:0f:57:
c4:a1:f5:b2:bc:33:b0:71:f4:91:e2:a0:4f:0d:cd:fc:f9:70:
86:8d:45:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:32:28 2026 by rpki-client