
$ rpki-client -vvf rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/06A2C3E2C1E211EC86C79687C4F9AE02.roa
File: 06A2C3E2C1E211EC86C79687C4F9AE02.roa (raw, json)
Hash identifier: i4wGybB1WdffwImrTNHdx7mWqUy/NNLm8IvjBsrlwTs=
Subject key identifier: 30:44:7E:30:71:65:79:18:60:95:64:76:36:40:A1:0B:3C:89:91:C8
Certificate issuer: /CN=A91348DF/serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990
Certificate serial: 03CC
Authority key identifier: F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/06A2C3E2C1E211EC86C79687C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:28:06 +0000
ROA not before: Thu 05 Jun 2025 01:07:39 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 58507
IP address blocks: 103.186.28.0/23 maxlen: 24
2400:6ce0::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl
rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:13:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 972 (0x3cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91348DF, serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990
Validity
Not Before: Jun 5 01:07:39 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a59e76-45ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:da:ad:d3:88:60:84:99:91:35:86:b5:a5:c4:
67:04:8f:8b:11:c7:60:a4:95:57:3c:e7:a4:04:3d:
71:e5:ec:12:aa:27:eb:c6:cb:6e:b9:fa:07:93:ae:
40:d0:0e:2d:f0:f5:67:18:f7:65:6b:cd:59:14:8f:
87:2a:ea:f5:30:8c:aa:86:d0:1f:09:62:19:6a:aa:
c4:d7:17:8e:e2:8e:4a:59:d2:a7:aa:96:5b:81:14:
48:0b:10:f5:d8:61:f6:bf:a1:8e:77:35:14:3c:2b:
18:19:bf:98:b1:aa:d9:89:90:a1:93:8a:9c:b1:54:
02:30:16:e6:82:5d:23:74:c0:40:fb:0f:70:94:07:
7b:13:6b:a6:1c:f3:ca:da:cc:83:07:af:1f:6e:6f:
e5:7a:2e:f5:46:53:32:bb:ea:60:7b:61:6f:ab:ba:
e0:98:9c:7a:a5:dc:e4:f8:c9:83:ab:32:c3:74:78:
2b:89:75:61:f7:14:0a:87:88:c9:28:51:6e:b3:f1:
51:05:f9:f9:a0:ff:da:1f:60:22:0b:3f:c8:f5:93:
de:90:08:8c:a2:85:d0:f6:20:8c:3f:90:46:23:35:
d3:e7:8f:1f:7a:e7:09:10:11:cd:e3:00:d2:a1:04:
4a:9e:b5:54:af:9c:5c:0b:06:53:57:dc:d0:de:ed:
a9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:44:7E:30:71:65:79:18:60:95:64:76:36:40:A1:0B:3C:89:91:C8
X509v3 Authority Key Identifier:
keyid:F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/06A2C3E2C1E211EC86C79687C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.186.28.0/23
IPv6:
2400:6ce0::/32
Signature Algorithm: sha256WithRSAEncryption
b9:27:00:ac:cd:78:01:75:0c:26:67:f8:bd:ed:11:af:21:99:
cc:98:b3:a8:44:61:96:73:e8:f0:2f:be:14:10:db:bb:4d:73:
9b:2e:c4:97:a2:c7:69:1a:80:52:f2:6f:cd:c2:34:d4:f1:f9:
55:bc:10:fb:89:9c:d5:d0:80:0e:31:7d:79:6b:1e:81:55:18:
a8:d7:b8:27:ce:43:d9:39:0f:47:93:ed:45:0e:76:e7:a4:08:
4f:8d:e1:e8:37:72:d2:f7:a4:1c:52:97:06:c6:64:5f:7a:41:
f6:f1:c8:4d:76:59:55:7e:86:ce:bc:49:4d:c4:61:2b:8d:e8:
17:51:0d:81:a4:42:ec:4c:9a:72:e3:60:1e:4d:d2:d8:25:c5:
7a:ba:de:f2:78:a8:ac:58:b7:01:25:ea:88:d4:67:c2:ef:96:
9a:b7:ed:18:81:33:63:1b:de:dd:e9:4e:3a:76:45:8f:cd:3d:
aa:75:08:48:49:0b:22:5e:43:59:31:f5:8f:15:0a:31:f0:f7:
ca:b3:c4:eb:8d:6a:7c:3e:dc:34:b1:0a:64:27:22:09:95:15:
5c:3c:dc:ea:be:c4:34:d7:50:13:dc:42:e0:46:95:8a:6c:56:
de:12:50:47:30:08:e3:3b:17:72:f0:bf:02:a2:04:4f:96:e1:
6e:c6:9e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:24:08 2026 by rpki-client