
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/0665D2328D1A11EB80593760C4F9AE02.roa
File: 0665D2328D1A11EB80593760C4F9AE02.roa (raw, json)
Hash identifier: 4BP9RA5edvRIYEOJDfl9qmd/eccUjRwBS2/hmKl9/us=
Subject key identifier: A9:ED:04:04:4D:13:5C:17:3A:CB:01:72:F2:A5:D6:B4:8F:D4:2A:8E
Certificate issuer: /CN=A91E04ED/serialNumber=EDA2AABB40212EB3C092AAEAF15142A769EF5907
Certificate serial: 06E1
Authority key identifier: ED:A2:AA:BB:40:21:2E:B3:C0:92:AA:EA:F1:51:42:A7:69:EF:59:07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/0665D2328D1A11EB80593760C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:44:53 +0000
ROA not before: Sun 04 May 2025 22:33:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132372
IP address blocks: 103.27.255.0/24 maxlen: 24
103.164.203.0/24 maxlen: 24
2001:df2:3bc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl
rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:51:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1761 (0x6e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E04ED, serialNumber=EDA2AABB40212EB3C092AAEAF15142A769EF5907
Validity
Not Before: May 4 22:33:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3fc85-cba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:4c:6f:9e:20:18:93:24:b5:0d:54:36:23:
18:4e:72:b9:5e:1e:e5:c9:23:de:75:25:95:f3:b2:
85:10:f5:f6:85:8a:0e:ca:84:5e:7b:7a:6b:58:7d:
50:a0:bd:ce:1d:7c:c8:52:35:ff:aa:5b:ae:c3:bc:
8a:0e:b3:df:22:9c:b4:b4:ac:ec:6b:70:5e:2c:b5:
35:4e:00:34:35:c4:e6:16:44:f8:20:90:58:1c:db:
31:4d:58:e4:c5:02:8f:78:eb:17:5a:b9:1e:55:60:
83:34:f2:0e:7e:b8:a9:c3:06:33:16:6f:b3:9c:4d:
5b:9f:21:7f:2a:62:72:55:8a:3a:56:d5:89:d8:98:
f4:92:0b:72:70:9a:f6:bc:33:22:35:99:af:03:92:
ee:69:64:9b:c9:73:02:d3:ee:c8:14:dc:aa:c0:cb:
5c:73:c9:9e:6c:8d:37:6c:a1:ee:03:28:47:7c:c3:
dc:6f:b6:74:41:e8:27:53:d3:e0:30:97:cb:c2:cf:
27:6f:56:38:1a:65:ba:16:66:47:71:94:c7:fc:6b:
64:92:08:bc:2f:18:6d:f4:e3:1d:45:ea:c9:57:e1:
90:09:15:60:cd:28:4b:49:8e:41:f6:c3:b4:83:ea:
aa:57:6d:e6:35:ef:10:7f:0c:45:0e:bb:dc:46:cb:
e2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:ED:04:04:4D:13:5C:17:3A:CB:01:72:F2:A5:D6:B4:8F:D4:2A:8E
X509v3 Authority Key Identifier:
keyid:ED:A2:AA:BB:40:21:2E:B3:C0:92:AA:EA:F1:51:42:A7:69:EF:59:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/0665D2328D1A11EB80593760C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.27.255.0/24
103.164.203.0/24
IPv6:
2001:df2:3bc0::/48
Signature Algorithm: sha256WithRSAEncryption
87:ed:83:43:a4:3e:ba:19:57:bf:c3:d9:0b:ee:d3:99:92:d7:
fe:93:1b:3c:c2:ab:e4:ea:ed:1c:56:1a:8d:de:8f:67:30:f5:
27:2c:5a:4a:58:7d:99:cb:b6:6a:10:3a:b4:ed:08:e1:1d:99:
4e:c7:09:66:01:17:94:67:94:dc:0b:ed:92:61:f0:1a:68:85:
08:f3:22:40:a2:1f:8d:ba:74:a2:4a:0b:38:b8:68:40:79:09:
8d:04:9b:6b:2e:82:d6:e8:49:9c:c9:49:93:8f:bd:2a:c4:9f:
79:21:9c:ec:a0:2d:71:23:ae:ee:83:2a:7d:e9:61:98:56:fe:
c1:b0:2c:3c:1b:93:cd:82:30:99:61:b2:83:76:17:c8:cf:f3:
7f:03:2e:07:d2:0c:83:b4:87:f3:14:39:68:c7:dd:73:4f:14:
ad:e0:42:07:ae:45:55:ba:24:cb:f7:22:64:83:bd:bc:b5:c0:
b3:f6:7d:2d:57:b2:38:f4:2e:df:be:ab:54:50:41:15:38:bb:
0b:df:d5:f3:2c:23:9b:c1:eb:9e:b1:4c:53:6d:1b:d5:bc:84:
51:e8:e1:25:9e:c4:1d:d4:ce:2b:f3:fa:d1:19:30:9d:22:fc:
51:16:5e:a1:65:f1:d8:b5:c2:d0:23:60:76:6e:8f:ec:f2:95:
e1:9b:c4:53
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgICBuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTA0RUQxMTAvBgNVBAUTKEVEQTJBQUJCNDAyMTJFQjNDMDkyQUFFQUYxNTE0MkE3
NjlFRjU5MDcwHhcNMjUwNTA0MjIzMzQzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZmM4NS1jYmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu9BMb54gGJMktQ1UNiMYTnK5Xh7lySPedSWV87KFEPX2hYoOyoRee3prWH1Q
oL3OHXzIUjX/qluuw7yKDrPfIpy0tKzsa3BeLLU1TgA0NcTmFkT4IJBYHNsxTVjk
xQKPeOsXWrkeVWCDNPIOfripwwYzFm+znE1bnyF/KmJyVYo6VtWJ2Jj0kgtycJr2
vDMiNZmvA5LuaWSbyXMC0+7IFNyqwMtcc8mebI03bKHuAyhHfMPcb7Z0QegnU9Pg
MJfLws8nb1Y4GmW6FmZHcZTH/Gtkkgi8Lxht9OMdRerJV+GQCRVgzShLSY5B9sO0
g+qqV23mNe8QfwxFDrvcRsvitQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFKntBARN
E1wXOssBcvKl1rSP1CqOMB8GA1UdIwQYMBaAFO2iqrtAIS6zwJKq6vFRQqdp71kH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDRFRC9EQkU5MEJBQzhE
MTcxMUVCOTM2ODg1NUNDNEY5QUUwMi83YUtxdTBBaExyUEFrcXJxOFZGQ3AybnZX
UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdhS3F1MEFoTHJQQWtxcnE4VkZDcDJudldRYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTA0RUQvREJFOTBCQUM4RDE3MTFFQjkzNjg4NTVDQzRGOUFFMDIvMDY2NUQyMzI4
RDFBMTFFQjgwNTkzNzYwQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS
BAIAATAMAwQAZxv/AwQAZ6TLMA8EAgACMAkDBwAgAQ3yO8AwDQYJKoZIhvcNAQEL
BQADggEBAIftg0OkProZV7/D2Qvu05mS1/6TGzzCq+Tq7RxWGo3ej2cw9ScsWkpY
fZnLtmoQOrTtCOEdmU7HCWYBF5RnlNwL7ZJh8BpohQjzIkCiH426dKJKCzi4aEB5
CY0Em2sugtboSZzJSZOPvSrEn3khnOygLXEjru6DKn3pYZhW/sGwLDwbk82CMJlh
soN2F8jP838DLgfSDIO0h/MUOWjH3XNPFK3gQgeuRVW6JMv3ImSDvby1wLP2fS1X
sjj0Lt++q1RQQRU4uwvf1fMsI5vB656xTFNtG9W8hFHo4SWexB3Uzivz+tEZMJ0i
/FEWXqFl8di1wtAjYHZuj+zyleGbxFM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:02:42 2026 by rpki-client