
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/4A81F344C34111EB855D7C84C4F9AE02.roa
File: 4A81F344C34111EB855D7C84C4F9AE02.roa (raw, json)
Hash identifier: NTZYpBwfz3MFFsFX93cSlvxKSWnC0xJLfEsB3AUxbQ0=
Subject key identifier: 03:1B:B3:3A:F1:5E:51:0E:53:BB:AE:F5:FC:E5:8C:D4:8D:7B:7F:1B
Certificate issuer: /CN=A91FA729/serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758
Certificate serial: 17AF
Authority key identifier: CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/4A81F344C34111EB855D7C84C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:35:03 +0000
ROA not before: Tue 30 Dec 2025 17:13:51 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 137226
IP address blocks: 103.105.88.0/22 maxlen: 22
103.105.88.0/24 maxlen: 24
103.105.89.0/24 maxlen: 24
103.105.90.0/24 maxlen: 24
103.105.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl
rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:40:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6063 (0x17af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA729, serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758
Validity
Not Before: Dec 30 17:13:51 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a44e97-5594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:da:fe:94:73:5e:10:b1:f8:b2:2f:e5:ca:3d:
14:19:7b:5a:ec:45:61:1d:97:a5:57:bf:ed:5f:cf:
45:6d:12:3d:bd:2f:5d:f8:df:ee:7a:12:c6:58:f7:
14:c7:09:c1:0d:ab:9b:a0:8b:4e:e7:f1:25:49:5a:
96:74:d2:dd:b6:7d:00:e7:98:46:3a:dd:56:d6:c9:
92:3c:97:da:b6:e5:33:05:00:dd:6e:7c:25:e3:65:
55:84:ff:5e:c1:93:42:c0:37:29:26:20:62:ff:6b:
08:f4:c9:0d:26:fd:bb:c5:85:67:e0:e4:15:db:a1:
ad:6f:ce:57:49:af:97:cc:88:39:81:6e:d9:12:6d:
b1:f1:15:fb:89:31:cc:ab:60:2f:d5:4d:4d:0d:2f:
03:85:93:4a:f3:be:ac:6a:4f:84:c9:4d:da:ac:a0:
00:90:7f:54:46:55:be:99:41:5c:78:47:85:53:55:
dc:28:be:00:7a:65:7c:9e:04:f0:54:cd:1e:10:79:
e8:ee:51:db:b9:e0:c7:c7:a7:9e:ee:9a:77:56:4f:
05:0d:25:fe:84:fe:c5:15:68:fe:8b:5b:52:0b:f9:
37:5d:2c:ef:65:f7:c1:a0:60:97:66:be:c2:a7:75:
70:fd:0f:05:27:8a:19:9f:cf:20:47:12:7d:36:df:
72:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1B:B3:3A:F1:5E:51:0E:53:BB:AE:F5:FC:E5:8C:D4:8D:7B:7F:1B
X509v3 Authority Key Identifier:
keyid:CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/4A81F344C34111EB855D7C84C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.105.88.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:21:7b:65:d8:8f:b4:38:5d:44:60:e0:66:40:1b:54:e2:5b:
ba:11:e3:04:91:91:1e:12:e5:0e:a9:3d:30:cf:0a:da:18:df:
d6:59:f3:16:79:1e:45:56:77:0d:ce:cf:9b:35:6a:33:cf:0d:
e2:b0:aa:47:c2:e6:0a:a9:32:e4:27:20:26:82:04:d9:d9:41:
de:9a:1c:48:db:9c:4d:a4:e9:89:45:bf:aa:37:36:e7:10:4e:
6b:d9:bd:71:23:b7:90:93:bb:d9:28:7a:83:3b:92:37:03:fd:
b6:db:6e:9a:87:e4:53:69:da:42:95:cb:88:cf:f5:28:e2:20:
11:eb:0e:03:fa:e7:c0:79:ce:ab:00:33:d4:db:8f:0d:7a:d4:
e1:05:62:6e:66:26:a9:c2:77:9b:b1:61:59:bb:72:5d:40:61:
ed:e8:51:b4:5a:5d:f8:2d:27:cb:49:cc:22:c5:70:bc:2a:c7:
98:17:26:e0:b3:c6:43:40:87:61:25:85:8a:4e:2c:62:a5:c2:
9d:19:1b:47:07:3c:df:de:76:44:06:2e:80:b0:0c:e3:58:3c:
0a:9f:c9:30:4b:13:04:d1:e2:13:12:69:c2:eb:27:97:6b:4c:
ff:44:b3:b6:94:8b:c8:39:7b:44:48:57:0f:b1:e2:6b:e4:db:
44:e4:47:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:55 2026 by rpki-client