
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/44C007B0A0D611EDA2603C4EC4F9AE02.roa
File: 44C007B0A0D611EDA2603C4EC4F9AE02.roa (raw, json)
Hash identifier: BiGEZVCMKiaBfzYBgHxbZXysMYZjnkq8VHhpcCG8AE8=
Subject key identifier: 02:C1:5E:99:E2:35:84:6E:22:CA:AB:24:8F:F8:A5:63:E2:2E:7B:BE
Certificate issuer: /CN=A91FE107/serialNumber=5E6B5A0686F56BA0C0F77FB3BF31B38563220824
Certificate serial: 23A7
Authority key identifier: 5E:6B:5A:06:86:F5:6B:A0:C0:F7:7F:B3:BF:31:B3:85:63:22:08:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmtaBob1a6DA93-zvzGzhWMiCCQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/44C007B0A0D611EDA2603C4EC4F9AE02.roa
Signing time: Sun 31 May 2026 18:00:58 +0000
ROA not before: Sun 31 May 2026 18:00:58 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 55569
IP address blocks: 103.229.140.0/22 maxlen: 22
103.229.140.0/22 maxlen: 24
103.229.140.0/24 maxlen: 24
116.213.20.0/22 maxlen: 22
116.213.20.0/24 maxlen: 24
116.213.21.0/24 maxlen: 24
116.213.22.0/24 maxlen: 24
116.213.23.0/24 maxlen: 24
182.161.72.0/22 maxlen: 22
182.161.72.0/24 maxlen: 24
182.161.73.0/24 maxlen: 24
182.161.74.0/24 maxlen: 24
182.161.75.0/24 maxlen: 24
2406:2600::/32 maxlen: 32
2406:2600::/32 maxlen: 48
2406:2600::/48 maxlen: 48
2406:2600:1::/48 maxlen: 48
2406:2600:2::/48 maxlen: 48
2406:2600:3::/48 maxlen: 48
2406:2600:4::/48 maxlen: 48
2406:2600:5::/48 maxlen: 48
2406:2600:6::/48 maxlen: 48
2406:2600:7::/48 maxlen: 48
2406:2600:8::/48 maxlen: 48
2406:2600:9::/48 maxlen: 48
2406:2600:a::/48 maxlen: 48
2406:2600:b::/48 maxlen: 48
2406:2600:c::/48 maxlen: 48
2406:2600:d::/48 maxlen: 48
2406:2600:e::/48 maxlen: 48
2406:2600:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.crl
rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmtaBob1a6DA93-zvzGzhWMiCCQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:47:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9127 (0x23a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE107, serialNumber=5E6B5A0686F56BA0C0F77FB3BF31B38563220824
Validity
Not Before: May 31 18:00:58 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a1c775a-c006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:15:6b:7a:e9:6c:7b:9f:52:5f:97:da:ed:f5:
fa:4a:7a:9d:ad:7f:67:45:6b:bc:b6:46:9b:6a:7a:
f4:f4:81:2a:07:41:74:35:19:45:d3:8b:28:cb:aa:
3a:f7:bd:80:5d:1a:ea:38:dd:c3:98:30:8c:b7:8c:
18:28:73:8f:f5:f8:54:5e:42:8b:d3:43:a3:e0:aa:
59:91:89:e6:de:c2:37:4b:23:37:12:5d:03:a4:ec:
01:d4:ad:fe:32:f9:90:19:af:71:dd:74:99:2b:3e:
fb:1c:3f:cf:fa:0f:59:05:49:e1:09:b7:94:8a:54:
4e:38:a6:e9:7c:46:dc:e3:30:11:eb:ee:41:7d:04:
24:84:6e:22:18:24:16:8b:dd:17:a0:9c:74:2d:71:
77:6c:f1:30:07:25:d9:30:1d:24:0b:d1:45:67:fe:
f5:c0:3a:ad:46:4c:db:1d:68:fd:83:45:80:ff:ee:
d4:e9:62:5f:30:e8:02:db:ce:67:42:b6:da:cc:95:
31:d6:73:54:9e:c3:91:bb:2f:0c:9e:f2:cf:24:4b:
98:4c:99:9c:d1:11:3a:a1:c1:78:ef:1f:9d:7d:e7:
8b:c4:bd:4e:af:76:67:43:9a:6f:6b:19:d8:49:b4:
a4:8f:c2:37:6c:43:77:f3:ad:90:37:2f:d8:0b:88:
6e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C1:5E:99:E2:35:84:6E:22:CA:AB:24:8F:F8:A5:63:E2:2E:7B:BE
X509v3 Authority Key Identifier:
keyid:5E:6B:5A:06:86:F5:6B:A0:C0:F7:7F:B3:BF:31:B3:85:63:22:08:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmtaBob1a6DA93-zvzGzhWMiCCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/44C007B0A0D611EDA2603C4EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.229.140.0/22
116.213.20.0/22
182.161.72.0/22
IPv6:
2406:2600::/32
Signature Algorithm: sha256WithRSAEncryption
17:af:ef:51:64:b5:dc:b6:b1:0c:87:91:d4:b6:57:e2:37:61:
45:e4:8b:0a:9e:93:a6:96:bf:df:fc:84:94:44:c0:f5:27:08:
b4:25:d6:70:55:8d:c2:1f:24:20:f4:c4:dd:7f:10:9e:b2:ae:
6e:9d:d8:63:e6:68:84:51:29:de:be:23:f5:7b:14:77:49:d6:
e2:93:37:75:d1:73:6c:ea:27:bd:dc:a1:35:f8:52:b6:ad:c4:
97:1a:29:ab:7f:27:a3:a8:7c:e5:4f:aa:13:5e:00:64:ee:42:
00:16:71:e9:bc:bd:d3:b2:01:92:c7:23:c3:0b:64:18:40:d4:
c1:97:dd:40:c9:39:1f:8a:5d:8d:20:b8:99:22:09:b2:b3:aa:
7f:cb:06:56:13:b1:a9:ca:e0:9d:7b:e6:3c:1a:7d:9a:fd:f6:
59:b5:b9:d0:d4:87:5c:f9:3b:76:fa:e9:aa:1e:dc:14:60:a7:
c9:79:a7:01:a4:e5:07:66:17:2b:af:89:83:d2:3f:6b:e5:57:
bb:c6:8d:7f:b4:45:bd:69:d4:45:e5:fa:cc:1a:12:0f:e5:36:
5e:12:bc:f9:2c:01:fd:7a:e0:da:ba:6f:da:c1:a2:cd:c8:ee:
15:95:bd:50:de:f4:98:12:28:3b:7b:ee:2b:a3:c9:a0:bd:26:
c5:6b:99:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:43:38 2026 by rpki-client