
$ rpki-client -vvf rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/2D613294CD7611EC83259862C4F9AE02.roa
File: 2D613294CD7611EC83259862C4F9AE02.roa (raw, json)
Hash identifier: 6eoyUSOvVZ6K062G+XqAjy4oqU5ot0onLxElkewTe48=
Subject key identifier: 72:38:D1:71:AC:B4:09:80:C1:3E:5D:4C:8E:BF:A0:A6:CE:2E:DD:B1
Certificate issuer: /CN=A91772FA/serialNumber=3B1688A5F7B724AAFBE7820A2C63D97B2EA8E522
Certificate serial: 03B1
Authority key identifier: 3B:16:88:A5:F7:B7:24:AA:FB:E7:82:0A:2C:63:D9:7B:2E:A8:E5:22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OxaIpfe3JKr754IKLGPZey6o5SI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/2D613294CD7611EC83259862C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:04:04 +0000
ROA not before: Wed 07 May 2025 01:07:57 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 103.186.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.crl
rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OxaIpfe3JKr754IKLGPZey6o5SI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 945 (0x3b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91772FA, serialNumber=3B1688A5F7B724AAFBE7820A2C63D97B2EA8E522
Validity
Not Before: May 7 01:07:57 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a40f14-4d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:91:e6:47:57:20:54:29:f5:ba:c3:1e:a0:8d:
fb:8c:72:2e:97:19:74:dc:be:42:45:e8:33:02:83:
4a:d6:30:2d:16:c1:08:98:64:10:31:62:d7:56:ad:
bc:67:3d:0b:b9:0b:66:b8:95:1a:da:84:4c:f1:78:
16:47:d2:9d:e8:d1:af:54:0c:f1:d7:09:03:e7:f0:
d2:5a:08:fc:e6:c2:af:a5:1c:67:a4:a6:72:55:02:
91:dd:9b:39:e1:e3:9c:14:be:bd:4f:c1:0c:b1:04:
08:3e:0a:d8:72:42:0e:a8:43:23:ff:f9:a6:cc:67:
af:59:05:05:cc:66:b6:64:ab:cc:a4:d0:a9:a3:d2:
1f:30:34:b2:63:c1:9e:90:dc:1e:4d:b2:ef:51:b4:
3a:2f:e3:bf:7e:ec:af:d1:89:95:aa:e7:2b:4c:53:
49:07:54:57:03:d8:ed:a1:85:c2:50:68:4e:ec:b1:
aa:7f:a7:5f:87:14:67:8e:03:3c:97:9d:d3:69:97:
6f:d6:d5:1c:5b:6c:24:8b:12:22:62:7c:04:c1:c9:
11:9a:41:ea:bd:c2:5c:8a:1b:e3:18:8e:88:cb:7d:
05:4a:1a:9c:23:51:d9:0a:19:99:de:6d:20:21:9f:
94:6c:38:f4:c4:78:96:1e:35:6d:89:f0:7b:b3:41:
a9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:38:D1:71:AC:B4:09:80:C1:3E:5D:4C:8E:BF:A0:A6:CE:2E:DD:B1
X509v3 Authority Key Identifier:
keyid:3B:16:88:A5:F7:B7:24:AA:FB:E7:82:0A:2C:63:D9:7B:2E:A8:E5:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/OxaIpfe3JKr754IKLGPZey6o5SI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OxaIpfe3JKr754IKLGPZey6o5SI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91772FA/D7244562CD7311ECA0AA8061C4F9AE02/2D613294CD7611EC83259862C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.186.205.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:64:18:80:7b:17:80:11:53:59:01:8d:aa:d2:9c:10:11:94:
94:c4:b6:f0:ef:72:59:ae:99:cd:d9:4e:b8:da:b9:bf:be:8b:
a1:8e:81:9c:25:f6:53:c2:1f:6e:c1:f5:c7:b7:6d:43:66:60:
1a:84:3f:d4:1a:ab:6b:40:2a:1c:16:17:07:7d:b1:eb:7c:28:
87:58:4c:d2:42:04:a3:09:c4:c4:5d:eb:20:2d:f7:61:a7:18:
c4:bc:03:a0:0a:f6:f9:31:39:1b:19:cd:de:e3:a2:8e:9b:87:
f0:9f:31:d6:10:59:51:ef:2b:98:6a:43:a7:a8:b8:3b:f4:68:
4b:ed:fb:77:72:3b:24:87:8c:a0:2d:30:94:fe:5f:de:ec:c8:
2b:f4:91:cf:b5:75:bd:16:7b:a2:21:a6:c4:77:a3:dd:c3:27:
58:2b:aa:af:9a:ff:4e:d9:d6:05:93:31:dc:34:8f:9f:b7:09:
13:96:9a:38:b9:32:e2:f4:c7:b4:06:d0:53:01:57:3f:08:71:
1b:75:03:e8:ca:c2:33:c4:2a:ad:7d:9a:0b:96:5f:5f:6f:59:
11:17:d4:ea:61:e3:b2:1a:23:44:b3:de:d8:24:ef:21:4c:6f:
86:f1:0f:07:9d:d8:62:6c:2b:22:e4:4b:2e:5e:ef:5d:ba:f0:
96:90:7c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:01:19 2026 by rpki-client