
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4A20B66AA5FF11F08004B67CC4F9AE02.roa
File: 4A20B66AA5FF11F08004B67CC4F9AE02.roa (raw, json)
Hash identifier: 3Ia7nEIkOom0lh0ro+iJfhXTB4oo8GC8HRLZDxobk/M=
Subject key identifier: BA:C2:C9:1A:C5:AA:43:E5:30:7A:CD:C3:F3:90:D6:0E:CA:77:3D:0B
Certificate issuer: /CN=A91E3493/serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
Certificate serial: 053E
Authority key identifier: E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4A20B66AA5FF11F08004B67CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:36:51 +0000
ROA not before: Tue 18 Nov 2025 22:44:57 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 53766
IP address blocks: 103.48.252.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl
rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:31:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1342 (0x53e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3493, serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
Validity
Not Before: Nov 18 22:44:57 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a47932-05c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:99:49:10:20:dd:ca:74:16:05:e2:22:d9:13:
63:3d:d2:2f:13:ff:8b:2f:ed:5d:a4:21:ed:3e:24:
46:4c:7d:c7:d3:c6:00:a7:2e:e2:4e:cb:93:c8:c5:
fe:da:79:c1:2a:af:69:dc:de:85:e0:5c:ce:a4:53:
41:9c:7c:fe:02:e5:d7:9a:be:ce:5f:f0:24:18:f1:
c7:ea:9a:94:9c:7b:bc:d1:11:88:a8:6c:24:d5:8f:
78:50:0d:90:82:eb:24:4c:f8:e2:1d:ae:c6:3f:42:
c6:81:c6:2d:23:5e:fd:bf:28:d5:2b:78:4c:41:58:
92:ef:5c:7b:62:61:88:45:2a:03:0c:24:0a:bf:db:
a4:cd:b6:52:0c:49:2f:24:94:1d:6c:9e:01:70:d7:
5a:09:15:d4:f9:f1:71:14:9b:00:a5:19:96:cc:e4:
76:9c:92:5f:88:73:5e:24:ac:c1:a7:44:c0:17:89:
30:08:0c:e2:88:6c:66:86:cd:4a:aa:b6:50:ce:3b:
1e:d8:c2:bc:9b:d0:0b:c2:92:c6:d0:a9:21:49:52:
71:19:dd:12:14:f2:3f:b9:45:64:06:98:c3:20:bd:
49:c9:7c:30:2b:0a:72:d5:88:8c:8f:c3:85:da:28:
16:a7:b2:3b:5e:cc:1c:37:23:ff:df:4f:ac:e0:90:
22:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C2:C9:1A:C5:AA:43:E5:30:7A:CD:C3:F3:90:D6:0E:CA:77:3D:0B
X509v3 Authority Key Identifier:
keyid:E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4A20B66AA5FF11F08004B67CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.48.252.0/22
Signature Algorithm: sha256WithRSAEncryption
65:d0:df:e1:f3:15:09:63:05:51:0a:3e:2c:22:4d:a6:a8:6e:
80:f5:ab:14:0b:a2:a0:d5:78:63:2e:af:0a:63:01:46:0f:15:
8d:cb:44:a2:25:45:19:a7:7e:ec:0c:80:05:aa:5a:2d:08:70:
9f:3a:82:8e:5b:19:00:25:f8:fe:36:bb:0e:1e:7b:64:8f:d2:
32:39:c1:0d:8f:c3:03:c0:b7:a8:c8:e7:d9:2d:e7:56:fb:dd:
e1:13:e9:64:b0:b8:3d:cb:4a:1a:98:d9:24:7d:86:5e:f3:c1:
a6:b9:a5:12:5e:59:a2:1e:9e:ce:38:e7:10:54:d6:41:98:35:
54:d3:a7:2c:ec:f4:6d:74:57:88:21:76:0b:07:71:b0:81:bb:
49:87:c3:d1:69:c1:ca:3c:22:b6:0e:bb:28:37:a0:aa:74:e3:
60:ab:06:a0:29:7b:60:89:85:e9:27:26:a7:a5:a3:0e:84:24:
73:f6:c3:77:14:76:15:a2:50:10:c3:ac:5d:7c:bb:4d:2a:99:
28:33:f4:fd:d8:6a:6c:cb:d3:4a:3d:37:ee:d3:a7:cc:63:71:
18:1c:66:4b:fb:9c:fe:15:fe:58:c2:ac:df:db:d2:af:c3:78:
36:04:be:a6:ff:cb:b9:a2:f5:33:e8:8a:e9:03:aa:ae:ce:05:
fc:b3:89:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:44 2026 by rpki-client