
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/D2A2FF4A003B11EFA6658D0DC4F9AE02.roa
File: D2A2FF4A003B11EFA6658D0DC4F9AE02.roa (raw, json)
Hash identifier: ShuWejN2dIhVPSYGiU/45kIcp67jd+NNHpFV+hRD9UQ=
Subject key identifier: C2:BC:08:47:8D:4B:89:46:FF:29:D2:82:EE:29:2B:EE:F0:2D:67:09
Certificate issuer: /CN=A91AE1B5/serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0
Certificate serial: 01AC
Authority key identifier: EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/D2A2FF4A003B11EFA6658D0DC4F9AE02.roa
Signing time: Tue 07 Jul 2026 05:31:37 +0000
ROA not before: Tue 07 Jul 2026 05:31:37 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 135526
IP address blocks: 103.80.69.0/24 maxlen: 24
103.221.245.0/24 maxlen: 24
2001:df2:7e01::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl
rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:32:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428 (0x1ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE1B5, serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0
Validity
Not Before: Jul 7 05:31:37 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4c8f39-f4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:88:da:7b:fa:f0:e2:15:b4:90:e7:34:d4:54:
fa:cd:4b:86:9c:ff:b8:16:38:16:e3:21:77:60:de:
a4:98:5f:c0:ca:e9:c6:23:59:b5:09:19:29:7e:7e:
2f:53:c2:be:74:d8:0d:f6:29:b7:79:4f:07:91:d3:
3b:aa:35:35:ff:7b:00:0f:a2:48:6b:92:7b:2c:07:
c3:fe:dc:75:d3:f0:95:5e:14:10:50:b7:6b:70:ef:
2d:64:8d:f2:d7:35:bc:2c:78:c5:55:20:35:a0:47:
1a:12:c8:6b:18:bd:56:33:99:4a:03:de:a1:ee:79:
09:3e:d9:dc:40:c1:6f:6f:4c:c7:42:25:26:0e:d1:
83:ad:6a:5d:e7:15:af:0c:c1:be:54:6a:e7:49:84:
6e:c4:a9:30:a9:cd:2e:6b:05:a9:a4:c3:49:a2:21:
98:81:5c:59:9d:32:d6:b3:78:ca:84:09:2d:ba:dc:
81:88:b9:83:55:ef:e0:36:36:ea:91:3d:ef:5b:e9:
28:8d:f0:29:b4:f8:42:44:bf:fa:76:e5:00:b8:fb:
26:7e:3a:03:48:ae:60:f8:85:50:84:d0:b0:a7:cc:
6c:ef:f7:e8:66:c8:7e:a6:51:22:47:c0:15:1c:9d:
c6:76:0f:05:27:15:4c:53:0c:73:b2:6f:3b:16:71:
42:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BC:08:47:8D:4B:89:46:FF:29:D2:82:EE:29:2B:EE:F0:2D:67:09
X509v3 Authority Key Identifier:
keyid:EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/D2A2FF4A003B11EFA6658D0DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.80.69.0/24
103.221.245.0/24
IPv6:
2001:df2:7e01::/48
Signature Algorithm: sha256WithRSAEncryption
a2:50:dd:65:98:42:8d:30:dd:20:4c:e8:f5:c8:fc:ea:40:35:
34:c3:6d:66:c2:ce:af:ea:3f:f2:d8:33:4c:88:e7:bc:8a:c2:
1e:5d:d3:ff:47:54:9d:4e:c3:5d:11:3a:e0:d8:9a:df:82:37:
1a:65:fe:b6:18:4b:2e:81:e0:04:52:85:d9:9f:43:a9:e3:83:
7a:b0:eb:1f:b4:5e:d8:ec:24:b5:de:54:73:33:6f:be:67:69:
b5:c7:30:62:eb:83:ac:bb:b6:3d:02:2d:c9:ae:f0:a3:7e:4d:
48:7c:97:13:15:dc:62:85:c2:fd:4e:2a:bc:9a:53:80:d8:f8:
4c:f6:82:e0:62:4c:ff:5a:4d:b3:01:57:38:b7:63:13:6f:a0:
54:83:cb:7d:59:b2:35:39:ef:23:cc:13:89:f9:56:2a:63:6c:
05:a4:6c:15:0a:c2:fb:5a:87:18:3b:c0:b1:19:1e:f0:52:24:
52:20:61:c7:18:35:cd:7e:0d:ec:95:6d:5a:ea:7c:40:64:d6:
8e:cd:cf:01:1f:82:71:2d:e5:20:3b:32:ac:80:fe:ab:61:c6:
67:4b:38:8b:57:8d:6e:09:7c:d4:85:25:6b:48:f1:2a:ec:26:
b3:97:66:25:e6:14:a8:6d:25:7f:29:04:5b:11:1d:33:cb:d8:
73:18:dc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:46:23 2026 by rpki-client