
$ rpki-client -vvf rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/06A2C3E2C1E211EC86C79687C4F9AE02.roa
File: 06A2C3E2C1E211EC86C79687C4F9AE02.roa (raw, json)
Hash identifier: XV4+6RexVCN6qV3gQG680PT5iGhrAgYP0jd0N7lfisU=
Subject key identifier: 6A:09:D1:4A:F3:1E:BA:A6:06:91:93:7E:68:51:C9:A0:67:E0:4D:6D
Certificate issuer: /CN=A91348DF/serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990
Certificate serial: 0400
Authority key identifier: F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/06A2C3E2C1E211EC86C79687C4F9AE02.roa
Signing time: Fri 05 Jun 2026 01:29:45 +0000
ROA not before: Fri 05 Jun 2026 01:29:45 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 58507
IP address blocks: 103.186.28.0/23 maxlen: 24
2400:6ce0::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl
rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:28:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1024 (0x400)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91348DF, serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990
Validity
Not Before: Jun 5 01:29:45 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a222688-0fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2e:cb:a2:62:54:98:87:69:99:6f:57:d1:72:
5b:35:0c:59:be:fc:96:29:2d:81:25:8d:32:01:ed:
50:02:26:4b:1b:b0:5d:e0:5d:e4:24:b6:ae:d3:0e:
36:fb:2a:ef:2b:08:c9:cc:87:74:7b:9a:79:ee:4c:
51:16:3b:21:a1:a5:ab:34:9f:5b:8b:8b:d6:54:f1:
9a:5c:23:22:58:bb:a0:8b:3a:38:e5:9b:69:14:fc:
8d:09:ca:96:16:60:39:c6:81:55:60:9d:7b:cf:89:
db:ce:f0:80:ad:55:6d:4e:65:12:05:21:65:e1:7b:
de:c5:15:6a:95:cd:9a:fb:ee:e2:8e:b7:4c:d2:e0:
a5:5f:5c:17:d1:0f:31:4b:16:05:43:c9:83:45:cd:
16:52:5d:5a:05:60:b2:1a:8c:ff:1f:92:a6:74:57:
a4:7e:89:ff:8d:f0:7e:74:1f:63:d5:3f:46:49:03:
df:ab:af:fd:9d:96:fe:93:0e:d1:5e:a7:dd:64:70:
41:44:cf:a7:e9:6d:86:78:60:62:09:22:49:f4:c0:
e8:4c:c0:c7:52:e8:23:a3:a4:dc:70:5e:b0:94:f9:
02:6f:6c:a1:e4:1d:82:53:a3:38:8a:22:97:80:8b:
c2:12:1d:08:54:6c:81:cd:a5:14:90:be:07:a4:4f:
42:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:09:D1:4A:F3:1E:BA:A6:06:91:93:7E:68:51:C9:A0:67:E0:4D:6D
X509v3 Authority Key Identifier:
keyid:F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/06A2C3E2C1E211EC86C79687C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.186.28.0/23
IPv6:
2400:6ce0::/32
Signature Algorithm: sha256WithRSAEncryption
55:17:2f:66:86:38:62:8e:27:00:96:67:86:7f:de:1e:1b:2f:
cf:db:e4:e0:4d:8f:f3:d5:09:5c:08:71:0b:b5:b2:31:2a:44:
75:50:4d:12:cf:3b:7b:76:89:a1:64:2c:e0:77:8c:8f:11:1c:
e3:4e:c5:00:eb:a5:8e:de:49:f0:ef:a2:e5:67:f3:17:96:d2:
d4:1f:c8:14:18:ba:06:7f:ec:60:10:f8:51:b8:56:66:2d:fe:
e5:a1:d1:02:a1:8d:9d:fd:02:56:2d:6f:4f:ec:ec:ca:ae:c9:
bb:03:18:10:17:a2:62:b3:19:bf:d3:74:7c:26:a1:3e:bc:7e:
39:9a:7e:09:99:e3:2b:f4:28:6d:ee:66:09:69:35:8d:d9:4f:
aa:e3:6a:ae:0d:59:89:a3:cd:50:ef:74:8c:8f:89:57:df:83:
2b:e2:26:db:8a:da:27:5e:80:e9:27:3c:b8:52:a8:85:72:bf:
33:97:9a:bf:4e:29:c2:62:a2:14:ac:f8:7f:52:6a:3d:ab:77:
95:f0:12:ab:7e:82:1d:42:96:3b:9f:d0:1b:7d:3c:8e:e4:cb:
1c:ea:d6:b1:d0:fc:3d:68:f4:3a:35:3a:d4:2b:c0:48:3b:12:
93:f7:6a:58:aa:5e:35:39:e2:17:f3:d6:59:e4:0b:d1:3a:92:
bd:dc:d1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:13:37 2026 by rpki-client