
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4E3E76D2A34411F0B6583B4AC4F9AE02.roa
File: 4E3E76D2A34411F0B6583B4AC4F9AE02.roa (raw, json)
Hash identifier: IzWagizW0XDYoCZaRHp7kni/ZM+szLivBvjSuRb92wE=
Subject key identifier: 12:A4:06:3B:BA:AD:24:D6:C3:2D:B0:F5:FE:A4:EA:82:74:0B:46:B7
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2D20
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4E3E76D2A34411F0B6583B4AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 21:27:10 +0000
ROA not before: Tue 07 Oct 2025 06:10:21 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 3561
IP address blocks: 103.11.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11552 (0x2d20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 7 06:10:21 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a4af2d-8db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cf:0a:92:db:0b:5b:b6:9f:a7:44:a5:eb:50:
b2:22:a4:36:24:7d:fc:4c:4b:c0:7d:cc:21:d2:f2:
81:67:58:38:54:64:b2:0e:7b:63:ce:52:81:d7:ea:
69:e4:89:b5:05:e5:4d:57:4a:9b:6c:2e:18:79:e0:
17:8b:a3:7f:f9:de:c3:cd:66:9a:79:4c:7e:9f:b6:
82:47:9b:f2:9f:f2:b6:e9:68:28:a2:d3:89:b5:52:
d7:09:65:93:c6:69:95:98:9c:55:b9:16:57:fd:fc:
61:4b:8f:43:88:8f:2b:d9:72:10:88:e1:1b:38:41:
e0:7e:cc:aa:ec:81:b7:83:85:da:6d:ab:73:e3:75:
87:26:3a:77:81:8e:78:7f:2c:2e:75:29:bf:ce:fc:
83:30:ee:be:73:08:46:27:d3:e6:7f:d6:18:e0:ef:
2a:e4:68:6c:f2:4f:2a:36:9a:a2:f5:83:46:2e:46:
cb:17:31:23:b9:bb:64:a7:74:83:ac:cf:85:33:4a:
c1:50:1c:dd:22:3e:37:f0:8c:2e:49:da:2e:a4:b6:
12:c8:3c:01:c6:23:cd:35:a8:f7:e8:4a:33:a5:ec:
bb:a8:35:29:96:c5:65:86:b1:13:7d:46:a5:a9:c5:
10:49:3e:37:39:78:73:fd:f1:f8:96:09:90:01:c2:
99:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A4:06:3B:BA:AD:24:D6:C3:2D:B0:F5:FE:A4:EA:82:74:0B:46:B7
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4E3E76D2A34411F0B6583B4AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.11.68.0/22
Signature Algorithm: sha256WithRSAEncryption
66:b3:be:0e:f1:14:cb:64:11:e6:66:cf:fa:3e:f1:84:ae:38:
95:5f:62:22:a5:67:24:aa:de:9a:a2:6f:a6:f2:68:f1:a1:2e:
87:3d:b8:23:22:91:8b:13:99:42:4e:f5:ae:e7:3c:aa:d4:58:
50:19:2d:fe:5a:80:d9:81:36:89:56:5a:1a:4f:cc:62:fb:4b:
6d:a1:ac:bb:a9:0e:5c:97:40:8f:b7:ca:6f:3d:2b:08:7d:70:
a9:9e:e9:a3:8d:78:2d:a5:b6:82:26:3c:6a:0b:d3:8d:e1:ff:
8e:a1:a8:fd:f4:81:c1:9a:e7:43:16:02:18:90:e2:ad:fb:72:
24:20:88:4a:60:b6:9b:a8:c4:45:cd:13:00:d5:8e:ff:62:0b:
b0:60:6d:68:1f:5d:13:cf:fa:0c:86:3a:1f:61:88:47:7c:a1:
65:6e:57:5f:05:6c:2d:b1:6d:48:dc:ae:33:f1:bb:7b:ac:5c:
81:ed:b5:cd:0d:c6:2e:da:38:69:50:47:5c:68:f8:00:e7:54:
0b:99:cb:56:f8:ca:b8:ef:f7:12:8e:5a:df:50:7b:1d:6b:86:
23:f9:f0:99:77:be:0c:bf:e0:7f:bb:61:b6:11:74:da:91:c0:
89:30:a6:7e:1e:39:64:b9:50:a7:34:de:af:dd:0e:24:05:ea:
27:e6:9a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:49 2026 by rpki-client