
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/E6F73E22B99E11EEBF189021C4F9AE02.roa
File: E6F73E22B99E11EEBF189021C4F9AE02.roa (raw, json)
Hash identifier: 8S+zuChDcqGL9ZeLsJ6JHvqala1ytBwLnGv387U8Cx0=
Subject key identifier: DC:E1:F2:90:35:37:4B:80:C5:BD:B0:8A:E4:D2:D0:76:0B:02:B0:3F
Certificate issuer: /CN=A91CE978/serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
Certificate serial: 3605
Authority key identifier: 6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/E6F73E22B99E11EEBF189021C4F9AE02.roa
Signing time: Tue 12 May 2026 15:13:04 +0000
ROA not before: Tue 12 May 2026 15:13:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24192
IP address blocks: 103.7.168.0/22 maxlen: 24
103.253.192.0/24 maxlen: 24
103.253.194.0/23 maxlen: 24
202.174.81.0/24 maxlen: 24
202.174.82.0/23 maxlen: 24
202.174.84.0/22 maxlen: 24
202.174.112.0/21 maxlen: 21
2406:1200::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl
rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:13:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13829 (0x3605)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE978, serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
Validity
Not Before: May 12 15:13:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a034380-31da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:40:0f:22:05:15:1c:8d:3c:22:08:7f:ab:11:
fb:f5:76:54:f0:c5:34:4f:82:f8:eb:cf:50:82:3e:
d6:63:fb:a3:0c:cc:68:84:bb:3c:a0:97:38:b9:e9:
d3:2a:9a:3d:79:34:aa:2d:1b:36:36:15:fe:55:05:
30:76:e8:78:31:d7:e1:43:cb:8c:c0:b8:9c:90:54:
1c:12:27:b4:94:2d:fa:b3:99:0d:88:c6:c8:c4:c5:
38:ce:af:40:53:aa:4d:80:3b:3e:b1:ce:bf:3d:d3:
3c:91:06:df:1e:a5:18:56:13:09:0e:e1:da:66:f6:
3e:fd:a4:82:15:c9:c0:d5:e7:be:7f:35:8b:ef:06:
04:e4:8a:5c:ac:93:55:8b:c6:0e:66:36:11:0c:1f:
2e:86:98:30:ab:3d:96:5c:5c:be:22:dd:5b:4c:16:
2c:63:18:3d:d9:59:a8:1f:ac:8a:b3:08:4b:1e:28:
0f:89:b7:a2:7a:63:c4:c5:50:0f:5f:1c:a7:14:bf:
72:44:89:fb:3c:da:8b:46:04:57:cb:81:c2:87:f6:
1f:c6:0c:25:50:e3:07:09:d0:3a:04:4f:3d:42:11:
8b:66:46:f3:a3:21:99:4c:23:88:bb:0c:b2:d3:70:
66:e4:c9:b9:79:7d:0d:cb:55:e0:2d:cd:41:78:09:
6f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E1:F2:90:35:37:4B:80:C5:BD:B0:8A:E4:D2:D0:76:0B:02:B0:3F
X509v3 Authority Key Identifier:
keyid:6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/E6F73E22B99E11EEBF189021C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.7.168.0/22
103.253.192.0/24
103.253.194.0/23
202.174.81.0-202.174.87.255
202.174.112.0/21
IPv6:
2406:1200::/32
Signature Algorithm: sha256WithRSAEncryption
2e:8e:63:09:69:5e:f8:08:fa:86:d7:71:25:db:c3:55:1e:91:
dd:20:49:54:e7:97:a8:4e:6e:43:40:e2:df:5a:ad:69:94:e0:
aa:f9:3d:aa:3e:cd:98:35:0a:34:52:9a:25:ac:ad:24:90:7c:
6b:8f:0b:36:ad:03:e7:c1:dc:e0:51:60:86:e7:2b:0e:91:60:
5e:db:dd:d9:af:47:5a:25:fd:71:c9:bd:98:7f:48:4c:0e:0b:
6e:65:57:18:e8:bc:fb:66:61:cb:e7:a8:63:fb:bc:66:a2:fb:
f7:27:fd:f0:d4:7e:2a:e3:cc:5d:f0:2c:9a:45:1b:b9:5e:eb:
ed:ba:65:6d:a9:c9:f3:39:82:ae:19:05:cf:52:70:45:ba:5b:
83:ec:2b:ac:85:fe:f9:9f:ca:44:07:06:23:82:2d:01:23:f4:
18:30:5c:e8:49:96:b4:a5:1a:23:a4:15:53:02:6f:48:6b:ee:
44:0a:65:ec:3d:b2:ac:fd:32:27:9e:1e:13:cb:a9:17:c2:da:
04:8b:59:95:c9:5d:3d:47:9f:9d:4a:66:be:45:90:c6:79:58:
cf:4a:48:52:6c:2b:b4:c8:3a:8f:29:b9:01:22:b6:15:22:85:
f0:1d:4a:5f:bf:0f:5e:66:d5:6d:fe:d5:32:6e:2a:84:a5:2a:
f3:23:6f:49
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 03:37:05 2026 by rpki-client