
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/DFEA30745C3011EEB250DE0EC4F9AE02.roa
File: DFEA30745C3011EEB250DE0EC4F9AE02.roa (raw, json)
Hash identifier: i/znacwdWC+cJbSfpSGuIUnxdzdxG75j2+xmoBgpqDI=
Subject key identifier: 0E:DA:A0:4E:1E:FB:7A:F8:37:C0:21:95:69:CC:1F:CD:E2:B3:86:14
Certificate issuer: /CN=A91AAEC2/serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A
Certificate serial: 0912
Authority key identifier: 3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/DFEA30745C3011EEB250DE0EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:53:06 +0000
ROA not before: Fri 08 Aug 2025 21:01:56 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 135580
IP address blocks: 45.255.252.0/22 maxlen: 24
103.65.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl
rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2322 (0x912)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAEC2, serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A
Validity
Not Before: Aug 8 21:01:56 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a428a2-fa54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:dd:fd:f6:22:d0:5a:af:90:f2:5c:3b:c3:a0:
30:9b:c0:87:05:77:80:6e:f9:38:66:05:60:c6:a0:
0e:43:c8:a9:28:c2:f5:1d:76:10:20:e0:0f:5d:cc:
4a:8f:9c:1c:eb:16:49:30:ed:c1:b2:d9:29:a7:bf:
a6:6e:f7:bc:60:62:d6:dc:4e:13:e4:4f:da:06:ee:
5f:eb:3b:f3:12:39:74:00:96:78:e8:af:ce:dc:92:
90:ae:5c:e1:31:48:2d:f5:e5:6f:7c:b5:fe:f1:17:
19:08:eb:6c:a4:93:82:f2:42:05:94:76:97:b5:59:
5b:14:d7:40:3b:52:ce:bb:3a:c9:48:a9:b6:33:b5:
4d:8f:fc:93:5c:ae:32:30:82:a8:c2:64:c8:4a:58:
53:bc:f4:3d:97:ef:db:64:fd:47:08:32:77:08:ff:
1f:60:42:52:a0:83:be:7b:f3:e6:fd:3f:12:85:75:
8c:95:2d:9f:cb:67:fa:49:4b:32:7d:d6:6f:5e:9a:
ea:8f:70:9c:97:f0:15:9c:51:5d:94:9c:f1:e9:c1:
d8:2c:c9:47:31:a9:00:33:51:dd:97:7d:a4:10:f7:
7e:ad:a6:47:80:13:d5:77:57:bd:fd:78:94:19:64:
51:df:f9:b7:bf:cc:ef:2c:41:8e:b9:0e:a9:64:d0:
4c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DA:A0:4E:1E:FB:7A:F8:37:C0:21:95:69:CC:1F:CD:E2:B3:86:14
X509v3 Authority Key Identifier:
keyid:3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/DFEA30745C3011EEB250DE0EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.255.252.0/22
103.65.176.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:e6:45:67:82:ab:f8:c5:48:90:fa:72:0a:3e:2f:11:19:04:
08:8d:9b:a2:ac:79:a4:15:cb:cf:d4:2a:04:1d:4f:58:02:7b:
bf:29:69:93:95:5e:9e:80:60:81:70:e0:61:80:90:de:96:99:
cd:20:43:88:52:bb:86:ef:c6:ed:4a:ed:e6:63:14:23:0d:59:
0d:5c:f0:08:24:57:7d:39:31:ec:b2:82:2e:fe:d9:29:82:63:
be:3c:ed:75:9f:9f:df:a3:40:92:03:fa:4e:c3:ef:ec:15:02:
77:11:4c:56:ab:87:31:97:68:74:3c:9c:3a:47:18:a3:ce:d3:
3f:7b:8c:8e:ad:cc:a4:76:7f:c5:57:be:95:c6:46:66:35:fb:
20:d5:44:85:95:24:d8:7a:c0:45:3c:ee:3f:07:c1:27:28:09:
14:a0:ba:69:cf:8f:8c:93:cf:5c:65:1a:47:32:41:81:6e:4a:
ff:56:05:67:f0:6b:41:d7:f5:65:5e:60:69:18:b0:74:75:bb:
0e:ce:c0:96:d2:57:6d:06:f0:91:7d:98:93:dc:62:7c:e4:29:
b7:09:ca:53:55:5c:6d:1a:e1:ac:69:db:06:a3:08:ee:ae:20:
17:d4:fd:65:67:46:03:f6:fd:64:38:e2:26:2c:4b:d3:ce:7f:
30:18:53:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:27:15 2026 by rpki-client