
$ rpki-client -vvf rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2E0A645AD3B211EF83FA102FC4F9AE02.roa
File: 2E0A645AD3B211EF83FA102FC4F9AE02.roa (raw, json)
Hash identifier: WMKhPELFr7sydQirrifvcLQGLjTAgGeSRNjGOKEEwqU=
Subject key identifier: B0:2C:B2:3C:79:99:DC:9A:93:86:B7:2E:BF:0D:C7:A4:FD:02:53:46
Certificate issuer: /CN=A91912DD/serialNumber=DAE7508D11E47228DA1FE0032597BBD29F75890C
Certificate serial: 1762
Authority key identifier: DA:E7:50:8D:11:E4:72:28:DA:1F:E0:03:25:97:BB:D2:9F:75:89:0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2udQjRHkcijaH-ADJZe70p91iQw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2E0A645AD3B211EF83FA102FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:49:54 +0000
ROA not before: Thu 26 Feb 2026 17:14:16 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 35634
IP address blocks: 103.63.188.0/24 maxlen: 24
2001:df3:e000::/48 maxlen: 48
2402:8d80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.crl
rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2udQjRHkcijaH-ADJZe70p91iQw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5986 (0x1762)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91912DD, serialNumber=DAE7508D11E47228DA1FE0032597BBD29F75890C
Validity
Not Before: Feb 26 17:14:16 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a47c42-2ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cc:04:87:a7:6f:df:65:6e:b7:ee:44:32:4a:
d0:71:c6:dd:ee:2c:4b:3e:8f:17:65:e5:da:f2:3d:
3b:9f:8d:6e:c2:72:d7:51:b7:a8:66:0c:7e:c0:95:
97:00:27:a3:f8:cd:a1:b2:e1:4c:3e:13:be:ea:ec:
65:56:20:f6:98:4d:ee:75:c5:30:ff:2e:9a:2d:29:
4c:69:dc:69:7d:69:ef:09:39:8c:56:8b:87:8c:1e:
c5:8f:05:5d:04:ca:64:c3:83:98:ed:26:41:a7:61:
f0:24:d9:55:74:e1:fb:af:99:5a:47:d1:6e:68:9c:
57:ac:5c:69:9e:e3:c7:0c:5b:9c:24:06:81:e6:23:
e9:18:aa:97:95:a7:f5:c0:66:7f:aa:37:79:64:00:
79:d6:cd:85:59:a1:1d:e4:22:13:02:ca:ac:4e:a2:
13:ab:13:46:78:6a:cd:00:64:1c:76:7f:9e:aa:17:
82:94:db:5d:57:67:ab:41:c4:61:ca:17:12:ed:12:
8a:9d:fd:76:fc:c0:87:88:ea:89:9a:05:9a:51:e9:
dc:cf:bf:38:bd:dc:de:45:c3:46:cc:b5:8c:fe:4d:
c0:57:94:1c:d1:1c:f4:ec:2e:a7:dc:8d:8f:5c:fc:
6d:1c:b5:40:b7:ff:49:65:68:94:9f:c7:89:36:e1:
77:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2C:B2:3C:79:99:DC:9A:93:86:B7:2E:BF:0D:C7:A4:FD:02:53:46
X509v3 Authority Key Identifier:
keyid:DA:E7:50:8D:11:E4:72:28:DA:1F:E0:03:25:97:BB:D2:9F:75:89:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2udQjRHkcijaH-ADJZe70p91iQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2E0A645AD3B211EF83FA102FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.63.188.0/24
IPv6:
2001:df3:e000::/48
2402:8d80::/32
Signature Algorithm: sha256WithRSAEncryption
1e:e6:45:97:40:01:8e:ee:be:6b:e5:c3:81:bb:b6:2e:4a:0e:
ba:c0:dc:0b:93:27:2e:51:db:bd:f2:c9:92:79:a3:a6:de:68:
3b:2a:51:63:0b:66:f5:fe:2e:fb:30:2f:42:01:54:d5:5a:1c:
97:3b:f4:02:50:c4:b4:df:09:29:e6:a1:f0:11:c8:4b:90:fc:
bb:18:89:d3:c3:8c:8f:fb:78:08:5b:63:d6:f8:cb:27:6b:24:
ee:82:3b:d8:29:f5:ff:1a:0d:81:83:0f:20:3d:76:22:b9:8c:
62:a4:19:bb:94:fd:3e:71:4a:ec:db:12:4a:8e:5a:a0:a4:d9:
e0:97:b7:eb:1c:0a:d8:f9:02:10:ab:df:38:e3:23:ee:28:3d:
4b:5c:dc:a0:96:32:21:45:bb:88:d7:0e:f2:b3:a4:86:a5:64:
eb:91:3f:59:74:13:ef:3d:3e:e5:91:01:b5:a9:c1:41:b2:de:
32:92:3c:b0:78:08:95:f8:f1:c1:7e:e9:a8:5e:8f:95:aa:ca:
ad:b2:b8:0d:6d:fa:d8:37:1c:02:76:91:b0:0c:c3:fd:be:d1:
87:8d:29:99:a2:3c:01:8b:ae:6b:52:03:12:f2:c3:60:2f:14:
90:0a:de:00:c6:92:dd:3b:6d:6b:d9:12:c3:50:e2:bb:cf:2e:
25:ed:a1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:28:59 2026 by rpki-client