
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/C2065F2CA5F311E8B54BF03DC4F9AE02.roa
File: C2065F2CA5F311E8B54BF03DC4F9AE02.roa (raw, json)
Hash identifier: +8AddGBFIIMgwGJltYVSUMtKxs5lAyAGDBkgXORqOLk=
Subject key identifier: 0E:0F:0B:5E:00:6C:E0:C1:0F:52:D0:78:D4:0E:14:96:39:AE:30:ED
Certificate issuer: /CN=A91AF406/serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3
Certificate serial: 13D4
Authority key identifier: BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/C2065F2CA5F311E8B54BF03DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:33:29 +0000
ROA not before: Fri 08 Aug 2025 17:25:48 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 137925
IP address blocks: 103.117.80.0/24 maxlen: 24
2001:df5:a300::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl
rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5076 (0x13d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF406, serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3
Validity
Not Before: Aug 8 17:25:48 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a42409-fd57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:af:9b:02:80:e6:c8:76:53:b0:94:b9:df:6f:
fd:c8:33:50:bc:8a:90:36:42:90:57:25:b8:2f:c0:
4c:20:14:c2:25:13:15:47:11:d2:e7:5c:44:47:da:
8a:ac:ff:33:e1:b6:0e:cb:76:fa:32:bd:56:85:64:
1e:fa:81:94:c9:62:d7:a2:48:88:43:43:d1:58:25:
e1:7f:e3:21:8a:61:d7:6e:90:f6:c5:95:3d:89:9c:
d6:37:21:a1:a9:d4:99:63:8b:ec:37:5a:7f:e0:b7:
31:fa:3f:fb:70:eb:94:b9:15:5a:e0:4b:50:81:77:
92:84:96:04:0f:f9:ef:fd:2a:25:52:17:4a:76:1a:
0f:27:90:c3:f6:c9:6e:96:36:61:ac:7a:02:58:9b:
9e:9d:f7:fc:f8:be:82:4e:7e:a0:88:a3:e8:bc:5f:
7c:36:0b:58:5f:b5:69:25:62:b2:3c:cd:ba:7b:7e:
e8:b9:bc:02:e8:b7:33:d4:60:66:d8:3c:61:74:33:
6d:5d:69:7c:7d:29:01:de:2d:4b:2e:32:12:a5:04:
9e:96:01:65:34:3f:eb:3e:43:92:0f:63:8e:4f:c9:
f3:18:7a:fe:b7:ce:a9:95:13:98:96:f5:ca:a2:16:
ba:f8:2d:d8:95:f7:ca:15:4f:36:e5:b2:b2:b8:cc:
97:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0F:0B:5E:00:6C:E0:C1:0F:52:D0:78:D4:0E:14:96:39:AE:30:ED
X509v3 Authority Key Identifier:
keyid:BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/C2065F2CA5F311E8B54BF03DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.117.80.0/24
IPv6:
2001:df5:a300::/48
Signature Algorithm: sha256WithRSAEncryption
46:75:f0:4c:ea:97:39:69:d1:0a:55:c2:41:04:ef:0e:93:87:
18:6a:4c:30:f7:20:e4:e5:a7:c9:24:53:fc:bf:b3:e5:01:37:
5f:c1:ea:8a:fe:d3:1b:3c:0f:c6:61:a2:bb:35:1b:3c:41:8d:
78:da:2c:1a:39:f9:7a:12:ab:c9:71:79:9e:3d:fb:e1:81:6c:
67:90:0d:7f:bc:3b:04:70:55:d4:e8:04:ab:89:40:ff:16:bd:
6e:bb:71:35:77:e1:2b:a1:fc:19:23:5c:54:cb:00:c8:9d:08:
88:3c:08:38:2e:33:5a:0e:e4:18:20:67:3a:bd:6a:3f:36:9f:
f8:b4:68:8d:eb:13:b1:8c:ff:a5:a7:21:8c:40:12:41:27:b5:
0a:b0:88:d9:14:c2:4a:fb:66:a3:67:ca:16:ab:46:7a:84:d7:
ca:5f:4e:4c:52:01:30:df:c2:c1:b0:6a:b7:63:ea:cd:a4:01:
8b:22:24:7f:a9:51:04:ee:ff:5f:61:eb:9e:a4:c3:84:ec:2a:
c2:ba:7d:19:2f:ed:5b:6c:77:7e:c9:2c:6d:32:52:d9:bc:66:
d4:cc:ec:84:cf:cf:4d:8c:85:ad:a1:35:d0:e9:fd:92:9b:b7:
12:0a:41:21:d0:6c:05:4f:98:91:28:00:57:cb:07:e0:08:7f:
f1:2e:c6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:56 2026 by rpki-client