
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/29ED0D46839011EE946C5E63C4F9AE02.roa
File: 29ED0D46839011EE946C5E63C4F9AE02.roa (raw, json)
Hash identifier: QiP/Tw9hklight716IQFhsBaTNPHXt42nLTbqUKFQ1w=
Subject key identifier: 60:35:5F:5E:83:AB:04:34:D8:6F:D2:3C:2B:76:A8:34:D3:C8:DF:A0
Certificate issuer: /CN=A91E3E33/serialNumber=379743714CE012230AA978BB1AA8C790E70667AB
Certificate serial: 12C1
Authority key identifier: 37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/29ED0D46839011EE946C5E63C4F9AE02.roa
Signing time: Thu 16 Apr 2026 02:58:48 +0000
ROA not before: Thu 16 Apr 2026 02:58:48 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 63916
IP address blocks: 103.70.59.0/24 maxlen: 24
103.81.247.0/24 maxlen: 24
103.82.4.0/24 maxlen: 24
103.82.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl
rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4801 (0x12c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3E33, serialNumber=379743714CE012230AA978BB1AA8C790E70667AB
Validity
Not Before: Apr 16 02:58:48 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69e05068-f559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:24:d9:d5:a2:1c:93:32:16:ad:3c:76:b4:96:
4f:0e:df:73:11:e5:78:a3:20:88:37:fa:16:50:50:
94:f2:50:d5:02:10:e9:ae:30:2c:99:19:31:1f:8e:
fc:86:19:3b:6f:21:54:ec:e1:49:6c:36:f5:19:54:
2d:c1:2d:00:f3:db:90:67:83:dc:d5:7e:dc:d6:f1:
bf:d5:f3:79:53:1a:c8:c3:e4:77:8b:6a:96:18:6a:
ab:33:43:62:e0:df:c6:ae:c0:ba:01:0b:7a:8d:1c:
80:f1:e4:09:52:bd:a1:9d:9e:7d:27:fe:3e:af:97:
41:aa:fa:43:cb:7a:bd:ce:4d:8d:29:95:91:8e:35:
3f:34:64:a5:0d:78:de:4c:02:ef:93:07:69:02:b9:
f7:44:ff:0e:12:fb:e3:bb:10:d8:30:b6:db:9d:d2:
5e:db:63:1b:22:de:a4:ca:d4:c0:37:fe:3f:59:0d:
89:fa:81:e4:28:4b:83:ef:4d:f2:6a:61:f3:df:d0:
43:46:fd:e7:42:28:2e:f0:28:2a:82:e4:10:c1:89:
fa:4f:e8:60:42:c2:f7:69:b6:84:22:69:86:00:f2:
6b:3e:c0:24:6d:4d:4c:45:f5:76:8c:b7:9c:3d:cd:
cb:e5:da:f5:47:2a:b7:99:e0:7a:72:1e:ab:e9:3c:
15:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:35:5F:5E:83:AB:04:34:D8:6F:D2:3C:2B:76:A8:34:D3:C8:DF:A0
X509v3 Authority Key Identifier:
keyid:37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/29ED0D46839011EE946C5E63C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.70.59.0/24
103.81.247.0/24
103.82.4.0/23
Signature Algorithm: sha256WithRSAEncryption
87:de:46:fd:67:61:28:4d:e2:09:21:a9:b4:18:66:ce:30:05:
64:f2:65:e4:ea:a0:2f:5b:63:87:43:31:03:59:33:5e:9b:29:
22:0a:64:3c:41:e7:74:b6:1e:9e:1e:8f:e9:d5:80:e8:1d:b0:
dd:67:45:55:fd:69:31:ee:f7:8e:24:b6:33:bc:c7:5f:fd:fe:
ea:da:94:f6:20:8b:8a:32:62:87:1b:59:bf:58:18:6d:03:a1:
46:cc:02:66:63:e3:11:ee:c4:d4:d0:5b:4a:02:b1:87:2d:c9:
72:bc:1f:8b:34:9c:e8:8b:ee:11:a2:1e:79:3a:18:db:4b:8b:
65:e5:e9:ea:f3:1f:a3:b2:79:8f:5b:61:4e:87:84:44:02:c4:
69:24:0a:62:24:c0:d5:bc:1d:93:7f:46:9d:e9:90:e6:87:6f:
b1:b2:28:0c:99:d1:d8:50:74:70:72:76:ad:84:b2:d5:70:6c:
3b:d3:18:02:c4:9d:c3:29:c0:98:36:ba:29:20:4e:ae:62:99:
6e:73:28:3e:ae:2a:b0:2a:e0:c8:a9:38:ec:1e:38:06:54:1e:
63:ce:11:d7:95:22:6c:49:c9:7e:ef:a7:54:c1:f3:8b:bd:5f:
00:64:05:6d:41:92:c7:df:72:da:e8:40:ab:1d:5b:f9:02:16:
7d:bd:b9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:10:01 2026 by rpki-client