
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/4D9099E66F9411F18CD406106EA30FBC.roa
File: 4D9099E66F9411F18CD406106EA30FBC.roa (raw, json)
Hash identifier: KhV4pO08T7ByOxUr4S8oxiImOdoh9Kqbs9FBQHAW+9Y=
Subject key identifier: CB:9B:DA:B6:5B:CF:65:0F:48:2E:74:6E:13:33:8B:B4:F5:F3:C1:6E
Certificate issuer: /CN=A91F832B/serialNumber=246828778202CDBB82C567253BA9C39C3CB9D42B
Certificate serial: 24
Authority key identifier: 24:68:28:77:82:02:CD:BB:82:C5:67:25:3B:A9:C3:9C:3C:B9:D4:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGgod4ICzbuCxWclO6nDnDy51Cs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/4D9099E66F9411F18CD406106EA30FBC.roa
Signing time: Fri 21 Aug 2026 08:59:53 +0000
ROA not before: Fri 21 Aug 2026 08:59:53 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 140325
IP address blocks: 103.151.224.0/23 maxlen: 24
103.247.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.crl
rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGgod4ICzbuCxWclO6nDnDy51Cs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:40:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F832B, serialNumber=246828778202CDBB82C567253BA9C39C3CB9D42B
Validity
Not Before: Aug 21 08:59:53 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a881389-5ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d8:6a:e7:1f:22:3e:ce:b7:84:f9:0b:c7:95:
d1:38:6c:01:9d:24:f9:97:95:fd:b7:05:03:1a:bf:
cd:ee:1a:8e:b8:e1:e4:ca:fc:2e:5d:c7:ae:57:69:
cb:85:4e:18:41:8b:18:48:76:7a:88:01:09:c0:c4:
dc:81:dc:fb:fa:63:a5:ed:d3:7f:e6:18:a3:a8:17:
69:7d:25:71:46:81:ab:bc:0d:85:d2:35:e4:d7:19:
7d:9d:c5:b3:00:53:51:b5:ba:5d:83:95:ac:0a:b6:
bd:a7:6d:db:76:4e:49:3f:b3:d9:47:75:1a:b7:32:
f8:3b:83:fd:6d:74:a7:3d:a9:53:ea:e5:cf:71:46:
6a:c6:0b:64:ca:9c:8f:be:8e:1a:6c:ee:9b:75:f4:
1a:89:5c:65:1b:bb:e9:4a:89:d3:ea:a4:59:d2:c5:
a7:c7:38:4d:cc:b3:76:aa:97:b4:f6:0e:15:18:43:
7d:25:a3:18:26:73:ce:e7:b6:3b:21:73:ae:06:ec:
1d:a2:05:35:f3:19:8c:b5:22:a4:64:4c:29:33:50:
56:71:2f:93:d2:25:b6:42:c9:64:f1:f5:10:3d:99:
17:47:a3:a8:3c:99:21:98:eb:a2:54:fc:73:e0:77:
70:b9:6f:db:ba:9d:98:51:f3:1e:79:17:7a:bf:df:
1c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9B:DA:B6:5B:CF:65:0F:48:2E:74:6E:13:33:8B:B4:F5:F3:C1:6E
X509v3 Authority Key Identifier:
keyid:24:68:28:77:82:02:CD:BB:82:C5:67:25:3B:A9:C3:9C:3C:B9:D4:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/JGgod4ICzbuCxWclO6nDnDy51Cs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGgod4ICzbuCxWclO6nDnDy51Cs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F832B/DF16A04C6F8D11F192EBA0236BA30FBC/4D9099E66F9411F18CD406106EA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.151.224.0/23
103.247.76.0/22
Signature Algorithm: sha256WithRSAEncryption
50:e3:52:7b:49:30:85:ea:6a:79:1a:a0:fd:3a:e5:a3:d0:c4:
9c:d7:52:9d:45:b9:8b:5f:a6:7f:62:51:52:a0:9b:23:41:db:
5d:d7:d5:ee:48:5b:f6:5a:3a:14:b2:f4:a8:4b:43:b6:48:37:
92:34:13:62:51:e0:d3:f5:db:99:ef:ee:e4:05:59:46:a5:7a:
bf:1b:76:a0:2a:be:de:b0:92:e4:ef:39:50:61:08:1c:85:b6:
1e:8e:c9:3e:2a:1d:d3:c7:16:67:1a:20:c0:f1:b8:c3:d5:f5:
82:bc:11:a9:b1:f3:39:fb:67:20:88:d0:10:3b:72:90:34:54:
b6:87:d0:3d:27:41:bd:7c:7c:ee:bc:b6:2a:ce:ae:22:3f:c3:
c1:b5:fd:f5:54:f6:48:95:e7:db:f2:d1:82:37:77:e7:00:d4:
aa:08:7c:5d:b5:af:90:87:89:82:25:bb:9a:44:a5:98:d9:b5:
f0:2f:5e:e4:af:10:db:f0:87:d2:a5:bd:2b:34:9a:5b:30:e6:
a9:84:b0:21:e0:13:6a:3c:0f:d2:8f:46:e0:5a:f8:30:42:8c:
1e:ef:09:17:0c:fd:42:01:e4:03:27:fc:0b:86:c3:6f:b8:c1:
7c:d4:18:b5:cf:fb:12:ab:4c:a6:d7:c0:e3:dc:c5:c5:46:3f:
ec:b3:74:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:28:51 2026 by rpki-client