
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/05C6C85CF3C211ED8B9B1450C4F9AE02.roa
File: 05C6C85CF3C211ED8B9B1450C4F9AE02.roa (raw, json)
Hash identifier: 6o/niFLDihK1K3/v4rYofrazOKed9CHeturqiQTfxB4=
Subject key identifier: E5:19:51:F6:EB:2A:37:3B:13:23:83:F0:79:0F:85:00:A2:2D:F4:5C
Certificate issuer: /CN=A91BDA2A/serialNumber=FAE21414D113DB78D54FEABA1B606F854A240BD1
Certificate serial: 025E
Authority key identifier: FA:E2:14:14:D1:13:DB:78:D5:4F:EA:BA:1B:60:6F:85:4A:24:0B:D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/05C6C85CF3C211ED8B9B1450C4F9AE02.roa
Signing time: Thu 23 Jul 2026 03:28:28 +0000
ROA not before: Thu 23 Jul 2026 03:28:28 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 151327
IP address blocks: 103.137.46.0/23 maxlen: 23
103.137.46.0/24 maxlen: 24
103.137.47.0/24 maxlen: 24
2001:df2:6640::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.crl
rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:28:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 606 (0x25e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDA2A, serialNumber=FAE21414D113DB78D54FEABA1B606F854A240BD1
Validity
Not Before: Jul 23 03:28:28 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a618a5b-e33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e8:7b:7d:41:84:09:ae:20:b0:40:81:1a:b6:
cc:d5:87:fb:e2:6d:51:e8:1d:c6:36:97:57:ac:17:
8d:a7:06:82:aa:1b:b6:66:81:55:a5:40:9a:6c:66:
7b:e6:93:75:6b:b0:47:7e:32:ae:54:58:23:66:67:
c2:46:f4:fb:a8:5a:64:f3:5f:5d:cd:22:6c:03:2c:
8d:8c:b4:de:68:8c:db:07:d1:b4:12:91:8f:60:35:
38:42:8b:52:b8:21:bc:c0:01:3d:fe:8d:c3:c0:4f:
e1:fc:ea:f5:24:bb:99:f1:59:fc:be:2c:be:93:50:
b0:14:b2:25:d9:64:6a:27:d2:18:b7:48:e1:55:19:
0a:99:1c:96:6d:df:86:ba:7a:16:b6:2a:23:c2:ec:
97:84:c3:af:96:28:97:c9:99:ae:0e:08:5a:a5:60:
a6:8e:a6:1d:f4:d6:23:64:6c:c7:0f:f0:b7:02:ab:
1b:14:0a:c3:b5:74:12:d5:d2:de:ee:12:81:7c:5a:
a2:ed:ca:58:00:b9:7b:75:8e:c9:7a:43:df:ba:b3:
a9:86:39:fa:fe:ef:c3:c6:aa:f3:05:95:4f:c2:00:
c8:3b:fd:16:27:f1:32:26:2a:ab:5e:ee:09:40:b6:
28:0d:dd:4b:e8:05:01:9b:c1:80:16:bd:d6:44:da:
07:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:19:51:F6:EB:2A:37:3B:13:23:83:F0:79:0F:85:00:A2:2D:F4:5C
X509v3 Authority Key Identifier:
keyid:FA:E2:14:14:D1:13:DB:78:D5:4F:EA:BA:1B:60:6F:85:4A:24:0B:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/05C6C85CF3C211ED8B9B1450C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.137.46.0/23
IPv6:
2001:df2:6640::/48
Signature Algorithm: sha256WithRSAEncryption
c1:ee:77:4a:07:85:72:94:0c:34:90:db:0f:5f:6d:86:89:6b:
bf:53:68:c6:99:48:1e:35:a1:af:d0:d9:bd:97:38:fb:2c:99:
48:c0:e3:4f:ac:3d:bd:a9:1e:41:74:10:03:50:02:f5:c2:99:
be:69:72:3d:86:00:41:93:1b:3d:63:6a:9f:3e:6e:61:a2:ed:
14:4c:a7:6b:ec:be:52:47:ed:ed:89:ac:be:96:c2:29:62:87:
58:8e:8f:0e:53:59:da:af:84:3f:e5:32:57:00:a4:21:e8:79:
17:c6:4f:39:f1:7b:9e:d4:d7:b8:17:8e:99:d2:2d:d7:5a:de:
34:f5:84:48:55:fb:0c:fb:a4:55:6c:09:f5:2f:22:a4:49:b4:
ea:c8:92:bd:87:5a:4c:bd:47:37:80:9d:7f:e3:d3:48:69:ba:
3b:ce:c0:28:5e:bc:d9:72:63:67:87:1a:54:48:6c:3d:f1:bc:
0a:53:ef:c0:d1:d3:7c:d8:40:e6:9b:b7:a9:87:f1:eb:32:a3:
dc:e2:f8:53:6e:41:13:04:48:05:eb:e0:c4:8e:43:b7:05:2e:
b3:ef:f3:24:67:3c:14:4e:6e:49:7c:ac:48:bc:21:98:46:47:
59:45:3c:6c:5d:94:c9:cb:7d:a3:73:fa:39:db:ef:5a:dd:37:
df:c3:10:5f
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkRBMkExMTAvBgNVBAUTKEZBRTIxNDE0RDExM0RCNzhENTRGRUFCQTFCNjA2Rjg1
NEEyNDBCRDEwHhcNMjYwNzIzMDMyODI4WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTYxOGE1Yi1lMzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0uh7fUGECa4gsECBGrbM1Yf74m1R6B3GNpdXrBeNpwaCqhu2ZoFVpUCabGZ7
5pN1a7BHfjKuVFgjZmfCRvT7qFpk819dzSJsAyyNjLTeaIzbB9G0EpGPYDU4QotS
uCG8wAE9/o3DwE/h/Or1JLuZ8Vn8viy+k1CwFLIl2WRqJ9IYt0jhVRkKmRyWbd+G
unoWtiojwuyXhMOvliiXyZmuDghapWCmjqYd9NYjZGzHD/C3AqsbFArDtXQS1dLe
7hKBfFqi7cpYALl7dY7JekPfurOphjn6/u/DxqrzBZVPwgDIO/0WJ/EyJiqrXu4J
QLYoDd1L6AUBm8GAFr3WRNoHMwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFOUZUfbr
Kjc7EyOD8HkPhQCiLfRcMB8GA1UdIwQYMBaAFPriFBTRE9t41U/quhtgb4VKJAvR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREEyQS8xNDc3MTFCMkYz
QkUxMUVEOUE5QUM2NEZDNEY5QUUwMi8tdUlVRk5FVDIzalZULXE2RzJCdmhVb2tD
OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy11SVVGTkVUMjNqVlQtcTZHMkJ2aFVva0M5RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkRBMkEvMTQ3NzExQjJGM0JFMTFFRDlBOUFDNjRGQzRGOUFFMDIvMDVDNkM4NUNG
M0MyMTFFRDhCOUIxNDUwQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ4kuMA8EAgACMAkDBwAgAQ3yZkAwDQYJKoZIhvcNAQELBQADggEB
AMHud0oHhXKUDDSQ2w9fbYaJa79TaMaZSB41oa/Q2b2XOPssmUjA40+sPb2pHkF0
EANQAvXCmb5pcj2GAEGTGz1jap8+bmGi7RRMp2vsvlJH7e2JrL6Wwilih1iOjw5T
WdqvhD/lMlcApCHoeRfGTznxe57U17gXjpnSLdda3jT1hEhV+wz7pFVsCfUvIqRJ
tOrIkr2HWky9RzeAnX/j00hpujvOwChevNlyY2eHGlRIbD3xvApT78DR03zYQOab
t6mH8esyo9zi+FNuQRMESAXr4MSOQ7cFLrPv8yRnPBRObkl8rEi8IZhGR1lFPGxd
lMnLfaNz+jnb71rdN9/DEF8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:50 2026 by rpki-client