
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/2D0DE7E686F011F19E006003A7EE528E.roa
File: 2D0DE7E686F011F19E006003A7EE528E.roa (raw, json)
Hash identifier: rGULIr/0PbAQmWI1eqw0UeD5is0Q7jDMnhNuffPvPUM=
Subject key identifier: B5:F2:F5:B6:E7:93:88:EC:5C:F4:6C:55:0D:C5:48:03:8D:70:B9:A2
Certificate issuer: /CN=A91CDE0E/serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2
Certificate serial: 1768
Authority key identifier: 73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/2D0DE7E686F011F19E006003A7EE528E.roa
Signing time: Fri 31 Jul 2026 17:29:59 +0000
ROA not before: Fri 31 Jul 2026 17:29:59 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 4647
IP address blocks: 103.246.28.0/22 maxlen: 24
203.30.140.0/24 maxlen: 24
2404:fc80::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl
rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 16:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5992 (0x1768)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDE0E, serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2
Validity
Not Before: Jul 31 17:29:59 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a6cdb97-05da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:60:3f:c6:7f:c2:43:bf:1a:05:77:89:0b:30:
cd:8e:07:b9:0f:60:a9:bd:e9:0a:1d:f4:c5:6c:9e:
f5:88:9a:8c:4b:95:8a:0a:d3:5a:e2:68:42:18:42:
70:8e:de:81:14:59:48:47:b2:62:a2:fc:9f:1b:76:
5d:bb:83:63:8c:16:7b:cc:50:fc:1f:1d:8f:e1:ca:
4b:ac:b5:02:9c:fa:98:2a:75:bc:5b:d8:b9:9c:5a:
01:77:01:63:b6:c4:c3:a6:96:18:bd:2a:ce:a5:bc:
0e:2a:54:b2:aa:4b:12:5b:f5:08:94:57:53:86:35:
43:37:3a:56:81:98:81:69:cd:fd:d3:98:d8:8e:89:
49:b4:19:d0:62:27:32:ee:57:ac:13:db:ae:97:a8:
c7:18:2d:31:12:be:d4:24:95:fd:74:06:15:5b:f6:
b3:f9:7b:dc:14:7a:c5:70:da:d4:60:a0:ce:d2:82:
e5:0c:61:ed:2c:e8:8f:02:59:ba:a7:aa:b5:b0:91:
c5:6a:72:b9:cf:75:35:e3:8d:9b:36:50:59:f5:f1:
d2:ca:d6:39:a5:4c:37:63:1d:2d:31:7c:17:c0:2b:
fd:0c:5f:99:74:30:75:ae:e4:e6:e3:33:72:0a:30:
d1:7b:da:90:17:ac:b0:3c:62:19:bf:3a:cb:3f:2f:
cd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F2:F5:B6:E7:93:88:EC:5C:F4:6C:55:0D:C5:48:03:8D:70:B9:A2
X509v3 Authority Key Identifier:
keyid:73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/2D0DE7E686F011F19E006003A7EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
103.246.28.0/22
203.30.140.0/24
IPv6:
2404:fc80::/32
Signature Algorithm: sha256WithRSAEncryption
10:b7:9b:b1:38:69:bb:1b:79:23:d9:c5:70:a2:71:fe:90:eb:
dc:98:74:5d:40:ec:5a:d3:4a:78:d7:f0:bc:da:b9:cf:04:78:
b8:b8:47:06:37:58:b1:ea:e3:70:22:f3:05:42:ea:70:07:6b:
18:a2:7b:c2:b0:e0:25:35:28:25:b4:7f:df:db:98:eb:ba:88:
de:4e:3c:da:03:4f:4d:cb:59:98:89:43:a2:35:85:bc:bb:29:
16:85:79:c3:2f:41:34:8b:87:86:c8:d5:05:b4:ca:ef:d8:c5:
dc:87:66:af:b0:42:33:fe:88:f9:64:17:6a:19:1d:7c:c6:29:
f6:73:16:3a:f8:e7:25:92:19:cb:d0:42:28:6f:f3:13:3f:6e:
04:a8:3c:0f:13:34:55:a5:41:43:d1:af:ad:d5:00:c8:72:52:
05:60:55:93:15:57:81:ff:93:d7:4d:65:a3:02:cf:aa:39:13:
51:75:71:0d:35:f6:7b:dd:b3:0c:e0:62:2b:6f:f4:ee:f6:fb:
a8:73:42:1f:ae:0b:8f:4d:1d:34:cf:64:24:f4:02:1d:20:7f:
84:94:e0:ae:2a:eb:a4:76:fd:7f:6a:91:3c:4c:2e:d1:6f:fd:
6d:54:bb:2a:e1:3d:cd:6d:71:bb:b0:e4:cf:30:53:0e:80:af:
68:2d:32:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:12:14 2026 by rpki-client