
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/2F05099CEC5611F094F5171C4A6F56BC.roa
File: 2F05099CEC5611F094F5171C4A6F56BC.roa (raw, json)
Hash identifier: hYqPQa2lRgttCCrOWvp1IGQeF9Z/2IqUx+eay8bn3hQ=
Subject key identifier: F9:3C:5E:44:C4:E4:35:88:05:60:59:5A:9B:CF:CD:4E:54:A4:5B:32
Certificate issuer: /CN=A91FD292/serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53
Certificate serial: 0AB7
Authority key identifier: F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/2F05099CEC5611F094F5171C4A6F56BC.roa
Signing time: Sun 01 Mar 2026 11:47:33 +0000
ROA not before: Thu 08 Jan 2026 05:52:15 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 140325
IP address blocks: 103.149.206.0/24 maxlen: 24
103.149.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl
rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:14:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2743 (0xab7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD292, serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53
Validity
Not Before: Jan 8 05:52:15 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a42755-ea71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:12:b6:38:2e:91:4b:d3:53:b5:05:85:ef:
5f:1a:bb:49:5a:6d:3c:de:74:90:85:17:1c:06:c4:
44:09:91:47:dc:31:ca:a8:63:81:a2:f6:fe:e6:72:
a0:55:48:b4:63:a5:be:22:df:81:ad:2c:98:5e:ae:
df:36:84:fb:9b:b2:9c:be:12:5c:71:99:88:60:75:
ff:66:e2:6a:4a:d7:92:79:ef:d3:7f:2a:4e:a0:46:
f8:cb:3a:54:52:18:88:fe:91:98:ed:f8:63:d0:c5:
23:aa:57:11:8c:a8:a8:91:05:a1:d3:92:29:77:c1:
cf:d0:81:9f:1d:44:31:ce:26:a6:6c:d8:2b:2b:33:
93:d9:6e:4c:03:8d:99:21:48:46:3f:5e:6d:82:6a:
35:cd:c2:30:e3:9a:45:19:59:23:60:ee:a9:c7:d1:
39:05:85:a5:46:04:68:23:54:7a:52:1f:a1:ca:9f:
0d:12:3d:ae:98:c4:ab:33:cf:cf:28:d2:2f:72:7e:
a5:ad:7f:7b:9a:ce:85:43:1a:bb:4c:32:73:c1:a9:
69:dc:05:4c:75:af:d1:aa:0f:0f:93:2e:87:26:76:
41:06:c5:18:40:5f:00:58:3a:a1:18:9c:ec:b0:de:
ff:17:9a:70:61:85:6e:36:dc:74:1c:9c:58:ef:03:
6d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3C:5E:44:C4:E4:35:88:05:60:59:5A:9B:CF:CD:4E:54:A4:5B:32
X509v3 Authority Key Identifier:
keyid:F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/2F05099CEC5611F094F5171C4A6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.149.206.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:d7:1a:89:d7:79:68:89:7d:df:b2:43:6b:45:9f:0b:95:47:
c0:6a:ed:8f:41:5f:1f:9e:30:45:0c:7c:99:d5:0c:da:90:cf:
ff:20:c7:23:f3:87:7b:ca:d2:10:f3:9f:b7:00:63:27:ac:e6:
51:82:5a:f3:8f:e6:70:3d:28:fe:61:c6:c5:2e:1d:56:31:ef:
9e:d0:4f:16:82:96:23:8b:24:22:88:00:cf:6e:32:79:c6:cd:
25:94:5a:8d:d4:c2:7c:db:fd:a6:fd:e8:15:ed:12:d6:49:f6:
6b:31:e6:36:72:b9:e1:e4:58:74:24:d3:6b:2d:b5:b5:26:85:
68:f5:76:4a:b5:72:96:01:9b:7d:41:cc:52:00:7c:98:13:0a:
d3:f7:dc:84:77:56:a7:c4:8f:b7:90:a3:32:c0:7b:d3:4b:c1:
a7:c0:e8:82:82:1c:df:b4:a2:47:63:33:4c:fb:c9:ef:6e:30:
30:e5:ca:63:35:4d:52:da:2c:63:a6:8e:06:24:1a:e9:21:74:
5f:07:cc:21:a5:54:53:35:43:50:c7:39:e0:c5:08:d0:6d:ac:
0c:31:7f:23:4c:e1:08:12:30:c7:93:bf:ba:69:75:54:74:4c:
5f:0b:c6:74:14:1d:26:e1:29:61:b8:ac:2c:ee:95:2e:4c:b6:
99:28:04:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:13:36 2026 by rpki-client