
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/0665D2328D1A11EB80593760C4F9AE02.roa
File: 0665D2328D1A11EB80593760C4F9AE02.roa (raw, json)
Hash identifier: oswZbi98lBFbTOsN/D9Inuh/1yJOiKpEn94+Noc/S+8=
Subject key identifier: 18:02:E8:9B:65:D6:4C:D2:59:38:A0:8D:E3:66:80:17:79:4D:2B:BB
Certificate issuer: /CN=A91E04ED/serialNumber=EDA2AABB40212EB3C092AAEAF15142A769EF5907
Certificate serial: 06FF
Authority key identifier: ED:A2:AA:BB:40:21:2E:B3:C0:92:AA:EA:F1:51:42:A7:69:EF:59:07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/0665D2328D1A11EB80593760C4F9AE02.roa
Signing time: Mon 20 Apr 2026 22:28:47 +0000
ROA not before: Mon 20 Apr 2026 22:28:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132372
IP address blocks: 103.27.255.0/24 maxlen: 24
103.164.203.0/24 maxlen: 24
2001:df2:3bc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl
rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1791 (0x6ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E04ED, serialNumber=EDA2AABB40212EB3C092AAEAF15142A769EF5907
Validity
Not Before: Apr 20 22:28:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69e6a89f-bf62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:ef:87:db:78:17:4f:b6:02:b8:af:1d:16:
88:46:40:fb:fd:74:6a:71:30:76:e8:57:5c:53:47:
c9:f7:79:c2:e1:be:dd:ce:b7:91:8e:65:0d:d1:a9:
54:0c:0a:3d:d5:9b:14:03:31:5c:b0:15:5b:7f:95:
75:d8:89:2d:e9:2f:ba:4d:4d:9f:75:33:42:54:95:
fc:09:bb:bf:25:b7:f2:e4:e7:0c:85:c9:4b:57:1b:
d9:50:f6:7d:8c:0c:e9:70:d0:84:fd:f5:d9:51:f6:
a8:6b:1b:38:7f:44:c6:14:7c:ec:55:76:23:81:30:
c7:5c:31:79:f7:a8:cf:2b:35:a0:89:d3:ac:92:47:
57:a3:a5:27:99:44:90:9e:d0:17:4c:50:1c:08:4f:
e8:43:6a:dc:39:ac:2b:39:94:45:c1:c9:96:b9:ee:
cf:0f:79:9d:ec:74:ab:6f:2f:63:dd:9c:f2:7d:7d:
32:cf:7b:68:3b:c8:e2:c5:e8:36:5f:bc:ee:dc:8e:
76:bb:25:5e:a0:b9:9f:31:99:d8:db:04:87:00:e3:
a0:5a:54:32:c6:b4:79:90:d5:2f:e1:e6:16:a5:14:
47:e4:22:52:cc:6f:d9:cf:56:67:2c:13:17:25:c6:
ee:cd:96:7f:b6:30:53:9a:e4:59:57:ae:41:ec:22:
2d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:02:E8:9B:65:D6:4C:D2:59:38:A0:8D:E3:66:80:17:79:4D:2B:BB
X509v3 Authority Key Identifier:
keyid:ED:A2:AA:BB:40:21:2E:B3:C0:92:AA:EA:F1:51:42:A7:69:EF:59:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/0665D2328D1A11EB80593760C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.27.255.0/24
103.164.203.0/24
IPv6:
2001:df2:3bc0::/48
Signature Algorithm: sha256WithRSAEncryption
0b:0c:f4:86:27:01:6d:62:e7:1d:5e:34:d6:d0:d5:0a:76:6a:
0f:2d:e9:11:29:3c:30:75:16:b6:d0:de:fe:b0:81:c7:77:d9:
14:d7:35:76:86:c5:55:15:11:37:24:c2:d9:13:0f:12:30:b9:
43:d2:f1:ba:48:3b:a8:46:26:04:0a:5c:e1:f4:86:c5:b6:d6:
c2:8a:98:7f:c8:ed:a2:71:85:e1:d1:ed:17:88:4c:01:b6:e3:
28:95:38:fa:e4:1a:ed:f0:e7:2a:52:16:80:5c:8d:f1:59:2a:
b2:18:21:f7:a3:e2:c3:cc:f6:a8:76:3f:59:34:ad:f1:69:32:
4d:bb:e9:ba:04:6a:10:a2:82:02:db:7a:7d:e3:ec:e1:3e:3c:
04:ce:40:06:17:41:fd:22:23:65:f3:eb:2e:0e:57:dc:0d:2d:
13:50:3d:77:82:9b:3f:e1:53:e9:dc:28:b1:ca:4f:f6:72:74:
7e:63:4a:e3:f9:85:e2:7b:dd:28:02:48:ee:79:0b:23:e7:9e:
9e:39:ec:a4:56:72:20:14:88:9c:0d:48:2e:c1:63:c5:b2:5a:
be:15:16:60:fc:39:56:5a:f7:29:12:a7:87:26:72:9f:24:46:
6d:d3:8d:81:7d:04:b5:0f:e6:f7:4c:d6:10:72:88:6d:c0:77:
12:78:1e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:17:23 2026 by rpki-client