
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/2B24D5DC854511EB9B57240FC4F9AE02.roa
File: 2B24D5DC854511EB9B57240FC4F9AE02.roa (raw, json)
Hash identifier: Wx3wh0FX9RN/H0djKjf0msN4+MsFhYpyxoof9NySlqU=
Subject key identifier: B1:2F:FC:70:08:C7:FE:61:76:18:27:0D:85:D4:77:79:48:72:C0:B0
Certificate issuer: /CN=A91B994F/serialNumber=7CB063072D2E4892598614AD5BAB53E1DEAFF701
Certificate serial: 08B2
Authority key identifier: 7C:B0:63:07:2D:2E:48:92:59:86:14:AD:5B:AB:53:E1:DE:AF:F7:01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/2B24D5DC854511EB9B57240FC4F9AE02.roa
Signing time: Sat 02 May 2026 21:25:56 +0000
ROA not before: Sat 02 May 2026 21:25:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138956
IP address blocks: 103.137.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.crl
rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:34:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2226 (0x8b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B994F, serialNumber=7CB063072D2E4892598614AD5BAB53E1DEAFF701
Validity
Not Before: May 2 21:25:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f66be4-203e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9e:b7:23:58:27:05:71:cc:2d:1a:ca:8d:69:
3b:49:c2:b5:8e:f5:8d:87:81:5b:3d:fb:c2:76:fa:
65:f0:f3:fd:f4:91:02:ff:f3:c2:ee:53:b9:96:4d:
73:d9:52:28:95:d3:9c:90:ca:d3:3b:52:fc:e0:51:
90:c7:cb:22:38:c8:b5:f2:a4:34:2f:04:56:71:97:
bb:bc:0c:f1:40:bc:6f:b4:a2:46:d8:09:25:12:21:
5f:d7:b5:86:a9:be:e2:5c:68:f6:b9:48:a5:6b:13:
0e:c0:71:a4:82:f0:54:7e:a8:af:e3:62:4c:f3:b0:
c2:60:61:df:d2:5c:62:50:2a:a5:87:ce:b9:6f:6c:
af:9b:b0:bc:b8:eb:06:df:89:01:9c:22:88:28:56:
6c:a6:9a:ec:61:1b:8a:63:7f:66:4b:d5:fe:8e:05:
56:6b:2b:ae:b3:b6:bb:d2:15:05:af:b4:57:d7:15:
88:d2:2b:0b:35:fa:ec:2d:db:d3:28:49:d3:ed:92:
fe:0b:e6:b4:d2:bb:40:4b:b0:55:b8:7c:8b:05:6b:
8d:d9:3f:92:d5:45:9c:15:ec:b3:58:7d:d7:33:55:
ec:18:94:fc:9d:30:fc:93:1b:ef:90:4e:cc:23:cb:
c2:bc:cf:74:a7:8f:b0:32:e9:fd:28:a1:66:70:a6:
09:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2F:FC:70:08:C7:FE:61:76:18:27:0D:85:D4:77:79:48:72:C0:B0
X509v3 Authority Key Identifier:
keyid:7C:B0:63:07:2D:2E:48:92:59:86:14:AD:5B:AB:53:E1:DE:AF:F7:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/2B24D5DC854511EB9B57240FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.137.164.0/24
Signature Algorithm: sha256WithRSAEncryption
97:62:77:08:ab:d4:d2:9b:08:0d:2b:9d:c2:82:fb:57:c2:62:
fc:23:a3:a8:03:70:f3:32:b7:e2:16:91:f6:66:34:1a:f3:3d:
d3:3f:4e:b2:db:fa:05:3c:ce:f5:00:b8:9f:0b:d0:90:77:85:
12:2d:b4:ad:7b:e1:9a:2e:a8:65:32:bf:51:20:c8:34:f6:1e:
cc:2b:4d:c6:46:b0:fa:36:56:5d:20:f3:34:9d:74:f9:3a:68:
b7:38:1a:53:91:82:22:5e:37:2f:40:9b:90:49:50:3d:86:2a:
36:d0:fe:32:d3:8c:fc:59:4e:2e:77:72:7f:25:63:54:83:23:
5a:c5:33:d2:e4:2c:62:83:9a:0c:fb:81:83:45:ca:88:b8:e6:
e6:17:c0:14:1b:c0:94:a3:ed:62:ba:1e:e9:66:7f:77:b2:d9:
e9:de:be:09:55:3e:57:56:1d:9f:bf:40:1a:65:3d:63:98:a0:
2d:6d:ad:c8:ef:06:1b:fa:88:12:75:a3:b2:31:5a:38:85:91:
96:f2:db:c2:e6:bd:bf:28:bf:bd:e9:dd:b2:45:d3:b7:b6:c6:
3a:1b:b1:33:b7:cc:9c:99:79:5f:58:11:88:ab:51:56:65:f4:
a8:f1:6c:50:c4:16:a5:c8:fe:14:86:b2:7a:ae:be:e2:9d:9e:
60:7f:09:1e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjk5NEYxMTAvBgNVBAUTKDdDQjA2MzA3MkQyRTQ4OTI1OTg2MTRBRDVCQUI1M0Ux
REVBRkY3MDEwHhcNMjYwNTAyMjEyNTU2WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWY2NmJlNC0yMDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmp63I1gnBXHMLRrKjWk7ScK1jvWNh4FbPfvCdvpl8PP99JEC//PC7lO5lk1z
2VIoldOckMrTO1L84FGQx8siOMi18qQ0LwRWcZe7vAzxQLxvtKJG2AklEiFf17WG
qb7iXGj2uUilaxMOwHGkgvBUfqiv42JM87DCYGHf0lxiUCqlh865b2yvm7C8uOsG
34kBnCKIKFZspprsYRuKY39mS9X+jgVWayuus7a70hUFr7RX1xWI0isLNfrsLdvT
KEnT7ZL+C+a00rtAS7BVuHyLBWuN2T+S1UWcFeyzWH3XM1XsGJT8nTD8kxvvkE7M
I8vCvM90p4+wMun9KKFmcKYJxQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLEv/HAI
x/5hdhgnDYXUd3lIcsCwMB8GA1UdIwQYMBaAFHywYwctLkiSWYYUrVurU+Her/cB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTk0Ri9BQUZEMTRFQ0U1
QTIxMUVBODlBMzYwNkRDNEY5QUUwMi9mTEJqQnkwdVNKSlpoaFN0VzZ0VDRkNnY5
d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZMQmpCeTB1U0pKWmhoU3RXNnRUNGQ2djl3RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Qjk5NEYvQUFGRDE0RUNFNUEyMTFFQTg5QTM2MDZEQzRGOUFFMDIvMkIyNEQ1REM4
NTQ1MTFFQjlCNTcyNDBGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ4mkMA0GCSqGSIb3DQEBCwUAA4IBAQCXYncIq9TSmwgNK53CgvtX
wmL8I6OoA3DzMrfiFpH2ZjQa8z3TP06y2/oFPM71ALifC9CQd4USLbSte+GaLqhl
Mr9RIMg09h7MK03GRrD6NlZdIPM0nXT5Omi3OBpTkYIiXjcvQJuQSVA9hio20P4y
04z8WU4ud3J/JWNUgyNaxTPS5Cxig5oM+4GDRcqIuObmF8AUG8CUo+1iuh7pZn93
stnp3r4JVT5XVh2fv0AaZT1jmKAtba3I7wYb+ogSdaOyMVo4hZGW8tvC5r2/KL+9
6d2yRdO3tsY6G7Ezt8ycmXlfWBGIq1FWZfSo8WxQxBalyP4UhrJ6rr7inZ5gfwke
-----END CERTIFICATE-----
Generated at Wed May 13 05:29:40 2026 by rpki-client