
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/A634576635D511F1A68BE981A0833773.roa
File: A634576635D511F1A68BE981A0833773.roa (raw, json)
Hash identifier: 4ZRG+jBKDkZrZQYJ33ftXyXhm7MnH5udmfkKK13Boew=
Subject key identifier: 21:60:D9:7F:18:3C:3C:E4:40:45:6D:AF:B4:92:00:8F:91:4E:69:FD
Certificate issuer: /CN=A91E8D27/serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB
Certificate serial: 34B7
Authority key identifier: 6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/A634576635D511F1A68BE981A0833773.roa
Signing time: Sat 11 Apr 2026 18:40:39 +0000
ROA not before: Sat 11 Apr 2026 18:40:39 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 133027
IP address blocks: 103.244.52.0/23 maxlen: 23
103.244.52.0/24 maxlen: 24
103.244.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.crl
rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:17:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13495 (0x34b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8D27, serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB
Validity
Not Before: Apr 11 18:40:39 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69da95a7-d130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9a:ca:b8:83:47:b6:5d:7c:51:b2:71:5e:7b:
b0:5d:96:38:28:be:b1:84:14:d1:ab:fb:65:00:cc:
3b:04:c5:50:f3:07:10:87:27:45:d3:ba:63:30:2b:
8c:1d:78:80:50:40:27:82:c0:a2:5c:5e:28:e0:2f:
f7:9a:6f:f7:c2:0b:67:26:cc:de:e0:12:cf:69:97:
6d:f0:b6:08:cc:08:3c:46:bd:59:4e:f9:37:43:f3:
13:1c:82:74:eb:2c:84:ef:6f:ad:2c:bb:eb:b5:f9:
b6:7a:e7:89:02:c7:45:ed:fb:25:bf:04:01:b4:82:
e1:1e:04:1e:74:3b:69:4e:60:24:e4:fb:5d:84:73:
80:6d:8c:e3:d4:8f:54:bc:db:ea:78:ba:2f:d8:00:
57:e4:27:02:ac:01:5b:0b:07:ff:ba:f8:9a:35:ce:
26:ce:a6:bf:6d:bf:65:76:ef:cf:93:5c:25:1a:df:
05:19:02:fb:ad:c5:94:bd:03:8e:a0:08:2a:02:6f:
9c:38:7c:1a:0b:63:1f:43:f7:de:5a:d6:5e:f7:39:
61:23:c2:ea:c4:6c:40:ea:c4:b0:67:c5:1b:0d:81:
03:95:fd:41:2b:6f:af:e5:30:33:11:ce:04:4c:a4:
6d:18:b3:67:f1:dc:1e:14:67:95:a8:9e:c0:c7:85:
e5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:60:D9:7F:18:3C:3C:E4:40:45:6D:AF:B4:92:00:8F:91:4E:69:FD
X509v3 Authority Key Identifier:
keyid:6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/A634576635D511F1A68BE981A0833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.244.52.0/23
Signature Algorithm: sha256WithRSAEncryption
49:59:00:31:b7:05:c9:b3:b7:38:89:3e:0f:4c:69:41:6d:b6:
27:d5:55:53:19:5c:e2:51:c4:ab:11:0d:e4:3d:de:c8:4d:73:
d2:90:2f:5f:ac:0a:db:ab:e4:62:49:05:c8:c7:98:72:a4:32:
d6:9b:7d:0a:59:7d:14:39:8f:5f:0b:98:60:65:a8:be:0c:96:
fe:29:a5:2e:ff:c6:cb:05:3f:74:3d:46:d2:b1:7a:f6:29:1a:
64:49:8a:71:09:72:09:10:eb:d7:19:c0:da:bc:71:a9:e7:8c:
1b:7c:93:03:9f:ba:ae:c2:75:f6:a2:03:de:a0:65:f6:ae:8a:
68:ca:a6:de:6f:c4:25:41:92:84:cc:b0:ab:c1:d3:8d:b0:81:
ef:fc:ad:e7:93:3f:3c:b1:7d:4f:35:d3:e9:67:d2:ba:6b:53:
2e:8c:c8:03:d7:5d:28:d7:5f:ab:72:a6:cf:33:5d:d8:c9:fb:
a0:bc:ff:e8:38:26:0e:08:a1:d4:a5:07:c8:3d:46:03:92:b1:
ae:7d:68:b7:31:3e:87:35:d7:fd:7d:1d:3a:cf:d7:64:a8:00:
bd:66:32:e3:5d:bc:c6:38:31:7e:c1:2a:8c:fb:75:b8:d3:15:
11:e8:e4:87:15:13:80:98:38:25:de:96:87:7c:de:6f:38:bc:
84:22:83:d3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICNLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThEMjcxMTAvBgNVBAUTKDZCRTQzRTZCMTM5NjQzQ0I0QzE5RTZERjczMjNCNTAz
QzQ5MzExREIwHhcNMjYwNDExMTg0MDM5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWRhOTVhNy1kMTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkJrKuINHtl18UbJxXnuwXZY4KL6xhBTRq/tlAMw7BMVQ8wcQhydF07pjMCuM
HXiAUEAngsCiXF4o4C/3mm/3wgtnJsze4BLPaZdt8LYIzAg8Rr1ZTvk3Q/MTHIJ0
6yyE72+tLLvrtfm2eueJAsdF7fslvwQBtILhHgQedDtpTmAk5PtdhHOAbYzj1I9U
vNvqeLov2ABX5CcCrAFbCwf/uviaNc4mzqa/bb9ldu/Pk1wlGt8FGQL7rcWUvQOO
oAgqAm+cOHwaC2MfQ/feWtZe9zlhI8LqxGxA6sSwZ8UbDYEDlf1BK2+v5TAzEc4E
TKRtGLNn8dweFGeVqJ7Ax4XlDQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCFg2X8Y
PDzkQEVtr7SSAI+RTmn9MB8GA1UdIwQYMBaAFGvkPmsTlkPLTBnm33MjtQPEkxHb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQyNy9DMEM1ODA3MDQy
RTkxMUUyOTc1MEEzMkUyOTc5QkIyMC9hLVEtYXhPV1E4dE1HZWJmY3lPMUE4U1RF
ZHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2EtUS1heE9XUTh0TUdlYmZjeU8xQThTVEVkcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RThEMjcvQzBDNTgwNzA0MkU5MTFFMjk3NTBBMzJFMjk3OUJCMjAvQTYzNDU3NjYz
NUQ1MTFGMUE2OEJFOTgxQTA4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ/Q0MA0GCSqGSIb3DQEBCwUAA4IBAQBJWQAxtwXJs7c4iT4PTGlB
bbYn1VVTGVziUcSrEQ3kPd7ITXPSkC9frArbq+RiSQXIx5hypDLWm30KWX0UOY9f
C5hgZai+DJb+KaUu/8bLBT90PUbSsXr2KRpkSYpxCXIJEOvXGcDavHGp54wbfJMD
n7quwnX2ogPeoGX2ropoyqbeb8QlQZKEzLCrwdONsIHv/K3nkz88sX1PNdPpZ9K6
a1MujMgD110o11+rcqbPM13YyfugvP/oOCYOCKHUpQfIPUYDkrGufWi3MT6HNdf9
fR06z9dkqAC9ZjLjXbzGODF+wSqM+3W40xUR6OSHFROAmDgl3paHfN5vOLyEIoPT
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:05:14 2026 by rpki-client