
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/F2C91F5678BE11EFBB3FC76DC4F9AE02.roa
File: F2C91F5678BE11EFBB3FC76DC4F9AE02.roa (raw, json)
Hash identifier: DRPYHt96EX1APt3QQLSOdPENVuq6bm635GQlVX6wlt4=
Subject key identifier: F6:3D:DE:BA:45:BE:6E:A5:1F:4A:A2:CF:F1:DE:16:B8:04:74:D6:90
Certificate issuer: /CN=A91F2B54/serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675
Certificate serial: 03A5
Authority key identifier: 22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/F2C91F5678BE11EFBB3FC76DC4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:38:06 +0000
ROA not before: Sun 15 Feb 2026 01:21:50 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 134715
IP address blocks: 103.179.206.0/23 maxlen: 24
2400:4e60::/32 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl
rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:23:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 933 (0x3a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2B54, serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675
Validity
Not Before: Feb 15 01:21:50 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a584ae-d27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:24:33:09:67:a8:a0:3d:69:d5:47:e6:c0:
e6:bc:a5:88:97:2b:9a:5b:fd:c6:6b:1e:6e:84:a3:
87:a0:39:31:42:dd:94:fe:ed:26:d1:fd:66:c3:0b:
b5:18:c9:36:1b:dc:bb:21:f4:43:53:e4:45:7a:85:
6d:11:62:2c:7a:64:e7:ee:ee:37:bd:ce:8c:b9:65:
06:07:c6:94:8c:d7:8e:1c:cf:b8:8b:23:02:09:9d:
72:dc:88:68:e0:62:e9:89:ec:dd:8b:49:5f:97:9c:
62:17:61:94:dd:20:43:0d:3f:c5:df:3f:b2:a0:53:
28:9c:c6:47:62:3c:66:f1:77:86:93:88:a7:75:97:
be:48:c2:b3:c9:f6:02:93:6a:ff:48:68:7d:43:c3:
ff:c8:6d:8b:62:d4:42:6d:6a:ef:ab:e7:2a:a5:85:
4d:06:ce:15:36:62:79:94:89:85:e4:68:57:67:17:
2b:7d:a8:e1:5f:d5:26:93:d7:c6:86:9b:3e:6e:56:
32:ce:9e:66:72:43:96:ad:0d:fb:a7:96:e4:51:5d:
d5:41:72:64:34:3a:b7:bb:93:a2:d4:da:4c:22:e1:
79:12:77:ae:1d:d8:59:af:ce:10:50:45:f6:1d:a5:
b2:41:b2:ad:b1:6d:eb:b4:48:44:34:0c:aa:d4:1d:
3e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3D:DE:BA:45:BE:6E:A5:1F:4A:A2:CF:F1:DE:16:B8:04:74:D6:90
X509v3 Authority Key Identifier:
keyid:22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/F2C91F5678BE11EFBB3FC76DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.179.206.0/23
IPv6:
2400:4e60::/32
Signature Algorithm: sha256WithRSAEncryption
01:45:c9:29:6c:32:24:9f:54:91:09:f8:a7:a2:96:54:19:d2:
c9:37:57:c1:7c:57:d0:fe:2c:30:bd:65:d2:c1:98:e1:87:e0:
ff:1f:db:dc:4b:f5:66:d2:c7:ba:0a:f8:26:c6:1f:e9:1f:5b:
7f:56:72:35:ea:da:1a:42:be:66:5f:fa:16:c5:c2:e0:e3:8b:
70:06:28:ef:cd:f8:5b:87:75:e0:0f:5c:7b:ab:d1:e3:51:ca:
96:b8:ab:6e:c7:0e:d0:8c:3f:4f:06:e8:8d:a2:b8:e9:6e:eb:
91:1d:09:c8:df:b2:f6:42:39:ff:08:d8:9e:f9:d7:ac:b4:a9:
ef:1c:64:64:4f:42:c1:64:0a:9e:c1:ca:c4:0e:ab:04:f8:68:
e0:d2:98:20:e3:32:b7:c4:27:dd:68:cd:61:ce:34:ff:b4:9b:
85:18:2a:31:ad:fb:3c:a4:a1:66:ff:fd:fd:50:e0:87:1a:1b:
cb:b0:f7:e7:24:40:67:e2:d8:02:0b:60:ba:a6:96:13:d5:79:
cd:d4:3e:6d:7e:33:9c:7c:34:65:49:2a:ac:06:5b:00:67:8b:
9b:49:21:d4:e9:fc:32:9f:e6:e8:cc:75:8e:80:c2:6c:8b:a4:
79:f1:27:4a:7d:0e:a7:77:e2:aa:8d:cf:0d:b7:54:30:ba:9e:
af:83:71:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:52:42 2026 by rpki-client