
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/EA18D5547D8F11EC8E894A1DC4F9AE02.roa
File: EA18D5547D8F11EC8E894A1DC4F9AE02.roa (raw, json)
Hash identifier: XMEHY700mwLD1H5UH+kDiYWGkC5d0JNM+7D3NKZezoM=
Subject key identifier: F0:F0:10:DB:82:08:FA:26:51:88:D9:D0:4D:CC:12:20:8B:58:01:CD
Certificate issuer: /CN=A91F61DA/serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB
Certificate serial: 0D39
Authority key identifier: A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/EA18D5547D8F11EC8E894A1DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:39:44 +0000
ROA not before: Fri 20 Feb 2026 18:15:42 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 58795
IP address blocks: 103.244.246.0/24 maxlen: 24
2001:df0:44f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl
rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:09:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3385 (0xd39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F61DA, serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB
Validity
Not Before: Feb 20 18:15:42 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a44fb0-f6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f1:46:a3:07:36:26:a2:73:f3:b2:3b:06:b2:
80:93:49:97:78:34:24:6c:8a:39:f4:ee:2c:9d:5a:
de:9b:57:11:dc:0c:86:8f:bc:1f:b7:25:50:4e:98:
40:9e:d5:11:ea:0d:30:e0:89:9c:c7:1b:28:69:3b:
f3:25:51:c0:03:13:84:cb:26:c8:c1:e2:16:bc:42:
85:77:64:02:7c:3e:cc:b7:4e:23:47:55:a5:13:bd:
58:66:56:61:c9:98:01:f4:27:18:7a:6c:c0:84:cf:
fd:73:e9:ca:4f:02:ee:99:53:e3:e1:66:e6:f4:d6:
91:34:e1:6c:94:0d:8d:0a:9c:98:58:15:fd:b0:08:
be:f5:f3:86:bc:51:da:62:5a:f3:e0:a3:41:2f:ba:
10:d4:af:95:3e:ca:e4:b9:82:1f:6f:5c:e4:62:e9:
f7:43:0b:df:05:26:ef:7a:8b:e7:08:0c:9d:ed:e0:
b0:f6:6a:78:90:85:f3:d1:03:91:e8:2a:2d:65:98:
33:19:1d:8e:8e:21:f2:ec:3f:3c:1e:54:48:59:38:
07:39:87:6f:5a:23:a6:6c:24:92:f1:eb:c9:d2:bf:
1c:c7:d6:6b:49:b2:89:97:17:de:63:f5:3b:77:12:
46:d2:12:42:0b:1e:c8:2c:97:cc:4c:19:d3:5e:a2:
f5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F0:10:DB:82:08:FA:26:51:88:D9:D0:4D:CC:12:20:8B:58:01:CD
X509v3 Authority Key Identifier:
keyid:A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/EA18D5547D8F11EC8E894A1DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.244.246.0/24
IPv6:
2001:df0:44f::/48
Signature Algorithm: sha256WithRSAEncryption
24:2c:3d:cd:89:01:da:60:d5:73:5d:97:a7:82:bc:32:b3:a0:
54:f4:a6:61:b5:1d:5e:ea:8a:63:ab:c7:49:23:fb:5b:d3:50:
6d:82:8a:0b:a1:a9:cd:22:39:c5:49:56:43:71:52:65:e9:49:
8a:63:1a:5f:2b:49:74:9b:eb:27:d1:e3:6a:d9:76:fc:51:55:
d0:96:58:ca:4e:89:32:4b:5d:e3:c8:1d:dd:c9:73:6f:b3:85:
65:8a:59:93:fd:8e:38:88:bb:e4:26:d8:f7:9f:49:13:cf:32:
64:63:d6:7a:26:07:6f:bc:3e:ae:35:de:91:7e:c3:97:e0:0d:
84:be:40:6e:23:38:95:74:0c:d7:dd:20:25:30:38:d1:0c:5d:
3a:19:dd:67:4e:61:52:a2:cc:09:3d:f9:f5:dd:a8:5c:be:49:
fa:fa:30:35:1e:20:ef:07:ca:dc:5e:64:22:d5:f2:7b:75:19:
ea:b2:f4:f8:4a:cf:dc:28:2d:09:2c:62:83:b8:ff:5e:3d:4a:
35:bb:31:28:56:38:51:2b:50:51:d1:71:a4:17:d0:87:03:07:
ba:84:5a:43:e2:0e:59:9a:dc:08:35:58:2b:23:ee:49:77:0a:
68:f5:7d:34:5c:91:24:26:8f:93:1f:5a:59:57:5a:6a:7a:4c:
5e:e2:7d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:42 2026 by rpki-client