
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/0000FD82284811EFADB77468C4F9AE02.roa
File: 0000FD82284811EFADB77468C4F9AE02.roa (raw, json)
Hash identifier: 1acrVVEJd8kw2N22g1LtMedfCW7W8wjU1UqkVDifo+c=
Subject key identifier: 40:FB:93:5C:E5:1D:52:54:81:13:65:9D:AA:6A:47:83:C3:C2:16:19
Certificate issuer: /CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Certificate serial: 3597
Authority key identifier: C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/0000FD82284811EFADB77468C4F9AE02.roa
Signing time: Mon 20 Apr 2026 15:13:01 +0000
ROA not before: Mon 20 Apr 2026 15:13:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132145
IP address blocks: 103.6.12.0/22 maxlen: 22
103.6.12.0/24 maxlen: 24
103.6.13.0/24 maxlen: 24
103.6.14.0/24 maxlen: 24
103.6.15.0/24 maxlen: 24
180.233.128.0/22 maxlen: 22
180.233.128.0/24 maxlen: 24
180.233.129.0/24 maxlen: 24
180.233.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:38:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13719 (0x3597)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF59C, serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Validity
Not Before: Apr 20 15:13:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69e6427d-cd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:60:5b:b0:d1:98:43:8c:04:27:72:aa:8c:
4b:f9:58:d0:d9:d8:37:61:e7:ce:b7:b5:1d:70:98:
24:df:68:ad:d3:5d:cb:25:77:ea:02:75:f4:c4:99:
0f:e4:49:10:f9:84:f3:bb:41:7e:82:b9:64:a5:e7:
c4:50:65:75:81:11:68:2a:bb:ca:90:bd:64:08:b6:
cf:75:cd:bd:87:f3:d1:65:f6:ee:72:d1:a3:71:b4:
78:7c:b7:9d:1e:05:71:b0:a2:ac:f4:14:1c:d8:75:
71:2a:6f:2a:5b:7c:0c:ae:63:7a:c3:5c:56:f6:e7:
6d:be:45:80:2e:f1:7b:d8:6c:06:0e:ce:2b:a2:13:
ec:9d:a4:76:e3:df:b8:c6:53:57:eb:74:a8:f6:48:
2e:77:9d:77:b9:f8:f2:b1:c0:a1:db:ed:34:41:96:
9e:da:a2:92:46:dd:35:31:94:11:f1:85:6e:5d:ea:
3c:02:76:11:fb:86:40:e7:d9:be:ed:c1:29:de:ee:
5b:f5:cd:e7:52:3b:61:68:7a:1a:49:fa:be:17:64:
e0:20:46:cc:42:58:a1:b2:65:df:dd:eb:49:f9:13:
93:d9:b8:9e:f6:a5:1a:a9:a8:78:50:cf:be:5f:17:
ab:00:94:73:6c:c8:59:45:91:d6:d0:27:c2:25:6f:
ba:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FB:93:5C:E5:1D:52:54:81:13:65:9D:AA:6A:47:83:C3:C2:16:19
X509v3 Authority Key Identifier:
keyid:C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/0000FD82284811EFADB77468C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.6.12.0/22
180.233.128.0/22
Signature Algorithm: sha256WithRSAEncryption
91:00:3e:b8:f0:03:bb:d9:0c:ed:01:e5:d2:4c:1e:07:0f:11:
31:46:e6:4c:7f:1b:96:bc:11:3c:40:0d:a1:68:de:5f:16:e8:
5d:57:35:df:29:e1:df:52:fa:1a:e0:43:0a:dd:d8:5f:3a:d3:
9a:5d:48:6c:2a:a6:df:cb:75:94:7f:d6:9f:5f:e4:78:13:5a:
14:5d:df:58:f5:44:a1:b2:99:f2:1d:d1:28:6c:46:c3:46:8e:
1c:5d:db:a4:1b:83:6c:91:96:7d:9d:b2:ac:3f:64:c4:88:d8:
f1:ae:0f:f9:e7:10:b2:27:30:aa:6b:37:09:4f:6a:8a:af:5a:
b4:35:64:bf:02:72:90:f6:62:fc:e7:36:1a:80:69:59:b4:77:
25:45:f8:7d:7c:35:3e:ad:df:ca:67:af:4d:9f:ae:00:b6:61:
9f:6c:ca:53:63:cb:aa:f2:02:2d:e2:04:ac:9a:70:2b:05:da:
b8:db:f1:06:b3:be:11:d0:bf:37:7a:83:d5:d6:53:6b:60:d1:
84:62:1b:16:5f:e6:cd:8d:40:20:59:40:e4:eb:1d:28:f4:c7:
f0:7f:3f:b6:e0:9a:dd:df:52:cc:c2:7d:b1:e4:c8:50:09:14:
b7:ee:fc:f6:83:2d:64:94:10:07:a7:20:51:a1:8e:69:13:88:
32:a2:c6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:32:12 2026 by rpki-client