
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/AB366D1C409611EE92C55F40C4F9AE02.roa
File: AB366D1C409611EE92C55F40C4F9AE02.roa (raw, json)
Hash identifier: 7N2StUmPE70BVOLqSC1CSXVVp2n3H7wqr0u0r+i43tQ=
Subject key identifier: 21:79:DE:2A:5B:53:8D:66:B0:37:5E:68:D6:F0:CC:E8:BE:79:96:69
Certificate issuer: /CN=A91AE25A/serialNumber=2BCA12D46D4611ED6EF1886F364468DF3D02EDE5
Certificate serial: 021E
Authority key identifier: 2B:CA:12:D4:6D:46:11:ED:6E:F1:88:6F:36:44:68:DF:3D:02:ED:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/AB366D1C409611EE92C55F40C4F9AE02.roa
Signing time: Wed 01 Jul 2026 04:29:53 +0000
ROA not before: Wed 01 Jul 2026 04:29:53 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 18001
IP address blocks: 103.210.128.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl
rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:59:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 542 (0x21e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE25A, serialNumber=2BCA12D46D4611ED6EF1886F364468DF3D02EDE5
Validity
Not Before: Jul 1 04:29:53 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a4497c1-9d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:64:14:27:0c:f7:2a:2a:62:56:ff:f9:b2:03:
18:9d:c1:b5:4a:de:e6:69:97:8e:c4:3e:f5:aa:36:
ac:cd:67:fc:88:30:b8:49:9a:56:87:d4:94:80:ce:
e9:10:af:f7:9c:0a:65:71:90:02:3e:74:a8:e4:2c:
02:6f:79:c4:d1:27:37:82:51:ff:25:65:47:cf:08:
97:bb:cd:29:a4:1c:36:b1:ab:c3:cd:60:b5:c1:2d:
49:fb:b7:94:a7:89:a7:65:31:7d:54:9a:66:6c:99:
96:d0:3a:89:a9:99:ec:98:c1:40:7e:d5:7b:1a:79:
f9:97:60:5d:51:b2:16:41:3d:91:44:12:ad:df:ee:
42:f0:33:c4:36:71:61:d4:5b:37:6e:a4:e0:92:0a:
30:14:36:ee:bb:f2:20:7a:13:af:5e:7b:c4:4c:96:
19:92:ec:6b:48:ab:ed:7b:4b:48:61:dc:8d:46:d9:
64:f8:02:79:ed:af:37:2e:e1:cd:b1:8b:33:be:de:
7d:31:c6:a1:15:9e:30:c4:cd:ed:c4:62:8d:89:29:
9f:0e:d2:8b:f2:9e:55:41:25:26:92:7b:ad:6b:00:
9d:34:44:bd:92:e9:ba:bc:46:5b:80:a1:49:43:ef:
5a:ad:99:9b:97:8f:4c:d4:ed:9c:db:35:0d:39:ac:
47:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:79:DE:2A:5B:53:8D:66:B0:37:5E:68:D6:F0:CC:E8:BE:79:96:69
X509v3 Authority Key Identifier:
keyid:2B:CA:12:D4:6D:46:11:ED:6E:F1:88:6F:36:44:68:DF:3D:02:ED:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/AB366D1C409611EE92C55F40C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.210.128.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:34:0f:8c:66:7e:a1:90:43:21:a2:f8:50:f9:4c:fb:c6:31:
c7:1c:52:c0:fe:13:1e:e6:14:62:43:c4:5f:c6:d2:e1:75:83:
88:b4:26:f8:40:6e:83:f0:6e:62:c5:b5:b2:bd:06:91:26:e4:
e0:a9:a4:17:e9:53:39:1c:ea:21:9a:bb:07:ba:21:7f:e2:82:
b7:7c:b8:5a:ac:6d:d4:4f:9c:cf:da:1c:d9:fe:bf:84:3f:ea:
77:1f:4f:b8:88:e4:8b:7c:e9:59:7e:3b:04:96:0e:d0:2b:3d:
0d:19:6f:8d:3a:f2:2a:96:75:85:23:7b:97:ee:2f:5a:00:6a:
c2:37:ca:cf:05:94:9e:cf:e6:e7:70:6d:fe:32:4a:93:8b:ee:
21:85:5b:ad:81:1c:57:95:a7:1d:21:8e:ba:31:24:d1:35:ed:
ea:9b:be:f9:c2:86:89:04:53:b4:c9:da:ed:22:cc:b1:d8:69:
ec:b1:06:e3:aa:27:af:f1:e6:f5:40:76:c5:6d:4c:d3:71:6c:
1f:1e:0c:aa:66:3d:52:08:f4:aa:3d:d2:1c:fe:60:1b:29:1c:
fc:ed:59:f5:1d:16:4a:e2:b5:47:30:ff:e7:3f:36:6d:0c:91:
de:5e:e2:68:e4:58:1d:a9:1e:53:e2:9c:a7:0b:27:97:5e:62:
77:d1:5e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:40:28 2026 by rpki-client