
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/2BC67A2A346711EF9EEB0F52C4F9AE02.roa
File: 2BC67A2A346711EF9EEB0F52C4F9AE02.roa (raw, json)
Hash identifier: CjcEwaNNVpg7IBqag0kmkbsvlpt3zf6Q6hq/E2sJUMo=
Subject key identifier: 32:19:7E:B5:21:E5:D4:A1:70:60:18:59:0B:C6:86:77:FD:5A:46:88
Certificate issuer: /CN=A91B65E6/serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD
Certificate serial: 07AE
Authority key identifier: 88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/2BC67A2A346711EF9EEB0F52C4F9AE02.roa
Signing time: Wed 04 Nov 2026 22:40:04 +0000
ROA not before: Wed 04 Nov 2026 22:40:04 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 138995
IP address blocks: 103.101.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl
rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 21:24:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1966 (0x7ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B65E6, serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD
Validity
Not Before: Nov 4 22:40:04 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6aebb444-f29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b0:80:81:d7:68:37:31:02:74:55:99:8b:c1:
a4:94:f0:f5:a8:6f:b0:aa:1a:8a:f3:e5:10:ab:e3:
43:40:c6:ea:6c:72:d5:bf:59:ad:c2:f6:ec:96:f5:
4f:ea:c0:c7:8f:38:19:27:ae:1b:8a:38:eb:03:65:
3c:46:63:bc:67:8b:8e:64:97:4b:44:b9:e6:3e:64:
81:4a:de:6c:ba:5d:94:c1:16:d9:3f:03:69:4b:65:
df:19:e8:45:48:fb:e0:c4:bb:49:fc:25:41:65:97:
7c:57:ee:77:5e:4b:d1:4d:0b:32:26:1b:dc:7d:69:
04:9f:0c:29:ce:86:ef:e2:f0:55:3e:34:dc:22:0f:
1d:e8:8c:c7:5e:30:47:9f:17:6e:3e:7a:af:eb:6d:
56:19:ec:72:ed:a3:92:32:67:c9:9f:f5:89:db:76:
d2:c4:f7:76:6a:18:6c:bf:8f:75:e7:0e:ff:fb:a7:
04:fc:77:a8:e2:94:1a:bc:f0:ea:9a:bc:51:0a:69:
f4:e2:c7:b8:08:82:e0:bb:c7:60:93:2f:41:37:4e:
5f:4c:97:e1:59:85:d2:78:e4:7f:eb:b9:ff:64:d5:
7c:91:1c:72:7f:0f:c2:8d:9c:e9:5d:24:ba:d8:7f:
12:9b:9f:e4:2a:36:71:5c:0b:71:e1:87:4f:cf:02:
88:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:19:7E:B5:21:E5:D4:A1:70:60:18:59:0B:C6:86:77:FD:5A:46:88
X509v3 Authority Key Identifier:
keyid:88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/2BC67A2A346711EF9EEB0F52C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.101.191.0/24
Signature Algorithm: sha256WithRSAEncryption
71:a1:0a:aa:88:00:73:4d:99:2b:ca:7e:15:0a:65:60:c9:8d:
ec:0d:7b:57:66:9c:c3:39:4e:da:b3:1d:59:1b:63:0a:72:6f:
f5:a3:a3:64:47:da:a7:0c:8a:7a:ca:62:fe:04:da:69:55:28:
0a:9e:3c:c7:79:0e:e1:d7:1d:5b:c3:96:39:94:ea:cb:c3:80:
2c:1c:f5:55:fa:3e:1d:38:b7:8c:27:e2:33:a5:7c:7c:8f:8c:
8d:77:b8:89:03:3a:79:66:15:b1:0c:5e:6a:23:f6:d6:7c:82:
2e:2b:81:ed:15:14:5b:25:31:50:2a:3c:c0:9e:cf:97:25:2f:
73:70:6b:be:c0:54:34:3c:05:9c:14:54:8b:13:66:0a:b7:36:
18:14:18:07:7a:4c:ab:32:8e:ec:44:5f:0a:e0:d7:ac:b1:d8:
6e:b0:5c:36:6b:5e:a1:71:95:03:ce:9c:ee:b7:44:80:c9:da:
78:ae:83:54:e4:07:ed:5e:b9:32:2e:1f:df:7c:b6:0c:a4:7b:
24:06:d0:e9:82:4c:aa:92:12:7a:c7:fb:8e:fc:f1:6b:3d:7b:
5b:b3:f5:73:ee:43:ba:cc:50:bd:26:e7:bc:bd:05:a6:b6:3e:
a5:de:d2:79:38:2b:fa:bc:c5:23:b4:23:b8:d8:b2:b0:e5:dc:
8c:70:55:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:36:44 2026 by rpki-client