
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/2AF8794E3D6C11F19105CB6FB0833773.roa
File: 2AF8794E3D6C11F19105CB6FB0833773.roa (raw, json)
Hash identifier: OB3qLBEa2BUII86QczWvPAVNyrYJB13iZcC7pu2bBbg=
Subject key identifier: 28:01:76:5B:69:D7:22:6A:57:66:AF:14:81:21:55:13:3F:52:43:90
Certificate issuer: /CN=A91AA96A/serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0
Certificate serial: 0149
Authority key identifier: 0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/2AF8794E3D6C11F19105CB6FB0833773.roa
Signing time: Tue 21 Apr 2026 10:23:41 +0000
ROA not before: Tue 21 Apr 2026 10:23:41 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 396982
IP address blocks: 203.1.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl
rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:22:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA96A, serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0
Validity
Not Before: Apr 21 10:23:41 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69e7502d-f956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:97:7c:47:63:a1:5f:38:7c:90:49:63:fd:fe:
ba:99:08:1f:8a:c9:20:95:c6:fa:d7:dc:43:43:ae:
52:9a:d7:e2:b6:14:0e:c5:bc:7f:f4:1a:37:84:00:
a6:b2:31:8e:2d:45:51:0b:af:af:3b:6c:08:93:e4:
a3:07:7e:ee:d5:5f:49:ad:50:ce:9f:33:1b:88:42:
9b:44:7c:bd:fe:e4:c2:7b:66:ad:51:70:9c:60:f9:
1a:91:d8:3a:32:52:6b:21:f9:e9:3c:98:79:6f:fd:
06:56:41:66:35:fa:ef:66:7e:b7:1b:68:7f:00:c7:
03:ea:6a:9c:a3:a2:d6:96:e8:b2:ca:ad:08:27:a8:
df:cd:5c:65:a7:31:cf:53:5b:d5:4a:17:55:8c:1c:
2b:00:61:bc:d0:81:52:32:92:49:b4:a6:f9:6e:3b:
21:fa:f9:1a:e0:4b:05:d7:32:fa:d1:a3:c7:6e:44:
50:f1:f2:b8:16:71:cf:f3:82:89:9b:06:ea:1b:9e:
f7:c0:b1:0d:63:20:50:7f:3e:66:e9:a9:60:ce:3a:
ae:d8:2a:44:8b:51:c3:5e:c1:86:db:35:fe:2a:80:
c4:40:ed:e7:5f:1b:b2:33:e8:8e:9e:2a:24:30:d3:
87:8c:ae:a7:93:a0:ee:12:93:34:bf:55:e9:bb:57:
2c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:01:76:5B:69:D7:22:6A:57:66:AF:14:81:21:55:13:3F:52:43:90
X509v3 Authority Key Identifier:
keyid:0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/2AF8794E3D6C11F19105CB6FB0833773.roa
sbgp-ipAddrBlock: critical
IPv4:
203.1.105.0/24
Signature Algorithm: sha256WithRSAEncryption
29:69:e2:6d:5e:27:e9:75:c7:97:c4:b5:f3:50:0e:2c:b0:d8:
e4:75:18:0a:a3:05:3a:e2:38:9c:81:87:c2:29:6f:4a:41:22:
06:cc:86:84:10:74:69:3e:35:b9:da:1b:16:96:a8:58:d3:45:
84:39:3c:70:63:1a:70:9c:34:17:4f:63:37:63:01:28:d7:5e:
dc:a6:81:f0:0c:25:d6:21:73:0e:36:ad:af:39:98:8e:e5:e9:
ef:6e:5e:ff:a0:f1:4e:05:8c:6f:0c:64:96:9f:b8:9d:fa:9a:
19:fd:c9:2d:b7:a8:66:00:a6:cb:cd:0c:26:49:46:36:de:15:
b3:a1:e8:82:54:ea:22:60:0a:3e:d8:ee:8a:e2:7d:e5:f4:db:
8f:42:32:d8:ae:9e:3d:43:4d:51:1e:5c:40:bc:81:43:da:4e:
1e:6a:11:15:f7:d1:b2:43:47:95:b7:9b:61:03:e5:5d:4d:94:
b4:41:0d:66:3b:6d:a3:eb:55:57:06:4f:c6:6a:65:85:91:91:
05:57:2b:d7:dc:cc:da:05:a1:d0:dd:98:b5:a4:27:a6:00:d2:
42:3a:8c:af:1c:82:dc:e5:ac:39:fe:21:b3:47:57:8d:91:27:
7b:58:a1:83:df:53:5d:19:42:a6:fb:9f:4b:b8:27:a3:2d:55:
5b:f3:a4:d8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUE5NkExMTAvBgNVBAUTKDBDREQ1MDU4MzJFQThDOUE0RDIzQjEwNjM3MjAxRDc5
NDI5NTY0QzAwHhcNMjYwNDIxMTAyMzQxWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWU3NTAyZC1mOTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoJd8R2OhXzh8kElj/f66mQgfiskglcb619xDQ65SmtfithQOxbx/9Bo3hACm
sjGOLUVRC6+vO2wIk+SjB37u1V9JrVDOnzMbiEKbRHy9/uTCe2atUXCcYPkakdg6
MlJrIfnpPJh5b/0GVkFmNfrvZn63G2h/AMcD6mqco6LWluiyyq0IJ6jfzVxlpzHP
U1vVShdVjBwrAGG80IFSMpJJtKb5bjsh+vka4EsF1zL60aPHbkRQ8fK4FnHP84KJ
mwbqG573wLENYyBQfz5m6algzjqu2CpEi1HDXsGG2zX+KoDEQO3nXxuyM+iOniok
MNOHjK6nk6DuEpM0v1Xpu1csUwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCgBdltp
1yJqV2avFIEhVRM/UkOQMB8GA1UdIwQYMBaAFAzdUFgy6oyaTSOxBjcgHXlClWTA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTk2QS9ENEMxNjg4MjZB
NkUxMUVGODRGOThFMzVDNEY5QUUwMi9ETjFRV0RMcWpKcE5JN0VHTnlBZGVVS1Za
TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ROMVFXRExxakpwTkk3RUdOeUFkZVVLVlpNQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUE5NkEvRDRDMTY4ODI2QTZFMTFFRjg0Rjk4RTM1QzRGOUFFMDIvMkFGODc5NEUz
RDZDMTFGMTkxMDVDQjZGQjA4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAywFpMA0GCSqGSIb3DQEBCwUAA4IBAQApaeJtXifpdceXxLXzUA4s
sNjkdRgKowU64jicgYfCKW9KQSIGzIaEEHRpPjW52hsWlqhY00WEOTxwYxpwnDQX
T2M3YwEo117cpoHwDCXWIXMONq2vOZiO5envbl7/oPFOBYxvDGSWn7id+poZ/ckt
t6hmAKbLzQwmSUY23hWzoeiCVOoiYAo+2O6K4n3l9NuPQjLYrp49Q01RHlxAvIFD
2k4eahEV99GyQ0eVt5thA+VdTZS0QQ1mO22j61VXBk/GamWFkZEFVyvX3MzaBaHQ
3Zi1pCemANJCOoyvHILc5aw5/iGzR1eNkSd7WKGD31NdGUKm+59LuCejLVVb86TY
-----END CERTIFICATE-----
Generated at Wed May 13 08:34:56 2026 by rpki-client