
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/4F7AD592169311EB89C20F1DC4F9AE02.roa
File: 4F7AD592169311EB89C20F1DC4F9AE02.roa (raw, json)
Hash identifier: 1tDAaZdsBLGrAgJcWurie9qvnVA10y1wcTP0UPysdSk=
Subject key identifier: 85:7B:4D:DC:DC:96:18:F3:42:AE:59:EC:2B:62:AA:07:7D:A5:0B:C2
Certificate issuer: /CN=A91E77A1/serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A
Certificate serial: 080F
Authority key identifier: B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/4F7AD592169311EB89C20F1DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:39:19 +0000
ROA not before: Fri 28 Mar 2025 21:53:12 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 136986
IP address blocks: 103.149.39.0/24 maxlen: 24
103.162.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl
rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:20:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2063 (0x80f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E77A1, serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A
Validity
Not Before: Mar 28 21:53:12 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a3fb36-a256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a2:10:20:5e:be:d8:d4:df:46:bb:1f:46:9d:
87:95:70:2d:57:8b:08:d8:1c:4b:6b:a5:4d:64:91:
90:5c:aa:a3:08:b1:18:68:da:3e:4d:d6:50:b7:72:
6b:7f:63:4b:f8:51:4b:ce:a8:02:65:7d:e4:c3:e6:
ad:69:2a:08:bc:0b:75:56:c5:ec:d7:9b:43:a4:3d:
a8:38:f1:56:52:fd:6e:77:49:0f:4f:df:e0:a0:5f:
88:b7:39:0b:3e:45:20:0b:0a:81:19:49:4c:7a:51:
f0:5c:9a:30:7b:f2:81:84:56:5e:10:c3:fb:c9:7b:
47:bb:48:78:b0:35:ec:54:18:fc:50:ba:bb:69:20:
c3:cb:b9:41:fb:7d:c9:db:fd:75:84:ed:06:2f:b7:
ef:5d:fe:d9:a5:3f:2c:ea:8d:42:9f:2f:28:ae:2a:
33:a7:cf:b6:a0:8d:de:62:16:47:d5:9d:ca:0f:28:
58:64:5e:b3:2f:8e:7e:e6:ab:31:c0:8b:b2:d0:20:
23:d2:15:ad:f1:0a:f9:df:41:a4:26:e1:f7:80:19:
b2:dd:8d:dd:d7:36:98:a1:e4:a2:2e:54:44:5d:bb:
28:93:a5:af:97:55:01:bc:4c:89:47:50:24:90:b1:
27:30:09:80:f3:5a:b5:29:3a:48:4b:3e:12:82:cf:
1a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7B:4D:DC:DC:96:18:F3:42:AE:59:EC:2B:62:AA:07:7D:A5:0B:C2
X509v3 Authority Key Identifier:
keyid:B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/4F7AD592169311EB89C20F1DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.149.39.0/24
103.162.126.0/24
Signature Algorithm: sha256WithRSAEncryption
85:8d:97:66:f4:b6:26:85:05:c4:70:5d:65:14:b3:4c:65:ac:
aa:89:8e:ea:e1:cc:89:11:84:bd:a9:7f:7f:19:86:a1:59:36:
39:f9:64:8a:98:53:c1:f8:bf:f3:a4:8f:56:b4:19:ff:5b:05:
10:c5:9e:8b:1f:4a:8b:32:d0:a3:bd:2c:14:2a:dc:84:65:9f:
27:0a:77:43:f8:41:0a:43:3f:bb:58:a6:5e:35:3f:03:b8:d5:
08:38:15:40:b6:6e:35:3e:33:3d:fc:ab:ea:15:f7:1d:a4:88:
e0:54:c2:50:25:58:46:c7:b7:29:00:23:af:65:cb:07:79:b1:
a9:bf:f3:7a:9c:e4:b8:93:1a:17:04:f3:bc:bb:dc:4a:ab:c4:
55:85:65:0d:02:3b:58:81:66:eb:d4:98:bf:07:88:05:84:df:
3b:9d:b6:5a:8f:de:80:b6:c2:55:30:b2:83:9f:31:85:40:ff:
88:05:a7:a9:13:ff:0f:7b:33:8a:3d:e6:d9:d9:b8:68:27:68:
8e:da:24:9b:4b:c2:00:7b:8c:8e:81:2a:da:0f:9a:e8:f0:21:
53:b6:f7:e5:2a:b1:13:14:5b:1c:8e:a8:33:41:d8:1f:71:d5:
b6:c0:13:c4:ab:ef:b5:64:93:ab:59:e7:3c:85:d7:36:bd:19:
1c:e3:cb:ab
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICCA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTc3QTExMTAvBgNVBAUTKEIyRTk5Mzg5QzRBQzAzNDhEOEFFQzg3NUI3NDY4OUQw
NEU3MEM4M0EwHhcNMjUwMzI4MjE1MzEyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZmIzNi1hMjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8aIQIF6+2NTfRrsfRp2HlXAtV4sI2BxLa6VNZJGQXKqjCLEYaNo+TdZQt3Jr
f2NL+FFLzqgCZX3kw+ataSoIvAt1VsXs15tDpD2oOPFWUv1ud0kPT9/goF+ItzkL
PkUgCwqBGUlMelHwXJowe/KBhFZeEMP7yXtHu0h4sDXsVBj8ULq7aSDDy7lB+33J
2/11hO0GL7fvXf7ZpT8s6o1Cny8oriozp8+2oI3eYhZH1Z3KDyhYZF6zL45+5qsx
wIuy0CAj0hWt8Qr530GkJuH3gBmy3Y3d1zaYoeSiLlREXbsok6Wvl1UBvEyJR1Ak
kLEnMAmA81q1KTpISz4Sgs8aAQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFIV7Tdzc
lhjzQq5Z7Ctiqgd9pQvCMB8GA1UdIwQYMBaAFLLpk4nErANI2K7IdbdGidBOcMg6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzdBMS9CNUMyN0E4QzE2
OTExMUVCQUFCMzA0MUJDNEY5QUUwMi9zdW1UaWNTc0Ewallyc2gxdDBhSjBFNXd5
RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3N1bVRpY1NzQTBqWXJzaDF0MGFKMEU1d3lEby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTc3QTEvQjVDMjdBOEMxNjkxMTFFQkFBQjMwNDFCQzRGOUFFMDIvNEY3QUQ1OTIx
NjkzMTFFQjg5QzIwRjFEQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ5UnAwQAZ6J+MA0GCSqGSIb3DQEBCwUAA4IBAQCFjZdm9LYmhQXE
cF1lFLNMZayqiY7q4cyJEYS9qX9/GYahWTY5+WSKmFPB+L/zpI9WtBn/WwUQxZ6L
H0qLMtCjvSwUKtyEZZ8nCndD+EEKQz+7WKZeNT8DuNUIOBVAtm41PjM9/KvqFfcd
pIjgVMJQJVhGx7cpACOvZcsHebGpv/N6nOS4kxoXBPO8u9xKq8RVhWUNAjtYgWbr
1Ji/B4gFhN87nbZaj96AtsJVMLKDnzGFQP+IBaepE/8PezOKPebZ2bhoJ2iO2iSb
S8IAe4yOgSraD5ro8CFTtvflKrETFFscjqgzQdgfcdW2wBPEq++1ZJOrWec8hdc2
vRkc48ur
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:09:14 2026 by rpki-client