
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/22E7F194D74C11EF9514995EC4F9AE02.roa
File: 22E7F194D74C11EF9514995EC4F9AE02.roa (raw, json)
Hash identifier: KEYXaiiBWJFHMcfHnLqrqVdSkVFoqO7wRbUVLg149Lc=
Subject key identifier: C4:51:93:A9:87:46:C1:45:00:1B:01:72:30:7B:76:02:7E:D4:F3:FE
Certificate issuer: /CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
Certificate serial: 0B69
Authority key identifier: FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/22E7F194D74C11EF9514995EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:45:21 +0000
ROA not before: Sat 28 Feb 2026 20:17:14 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 23607
IP address blocks: 103.17.200.0/24 maxlen: 24
110.34.33.0/24 maxlen: 24
110.34.34.0/24 maxlen: 24
110.34.35.0/24 maxlen: 24
110.34.36.0/24 maxlen: 24
110.34.39.0/24 maxlen: 24
192.135.90.0/24 maxlen: 24
192.135.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl
rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2921 (0xb69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB6EB, serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
Validity
Not Before: Feb 28 20:17:14 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a46d21-1049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:74:81:1b:24:46:73:16:27:71:f0:1d:16:ad:
c1:5e:c7:4f:ac:06:f2:9c:7c:b9:80:25:ae:74:81:
7c:ae:1f:ee:5a:24:9e:ac:01:9f:5d:1d:c5:b4:22:
b6:5a:c0:8c:b2:58:07:cf:f2:e1:04:60:2f:3c:99:
5f:07:63:e6:51:6b:4f:e7:d2:7b:2c:c8:8c:ea:4f:
01:95:4e:2e:96:3e:33:92:99:f5:82:87:94:5b:d1:
85:90:93:a8:8a:e3:df:8e:07:ad:c4:4f:3d:c3:5e:
76:84:f0:b3:62:48:7d:5b:33:77:95:50:21:18:35:
e8:6a:61:35:64:1f:86:f8:db:eb:24:e8:5d:b6:2f:
32:44:f6:bf:df:bc:6f:c8:85:e8:f5:12:a5:21:32:
67:f3:35:a9:4f:39:0f:fc:24:31:7b:ac:0c:09:75:
2c:8a:23:05:25:88:6f:a5:68:bc:e8:a9:24:1d:85:
a8:b8:b0:ac:57:9d:b3:6b:1b:de:eb:ba:41:93:6d:
9f:cf:b6:04:bf:bb:72:64:32:77:5f:c1:5b:b7:f8:
ed:7e:76:ef:99:9d:02:8f:ce:d1:ea:94:19:8c:ad:
4c:55:57:39:79:7c:e2:c6:da:2d:f0:f7:7d:4f:0b:
cf:4b:08:f2:76:ae:10:7d:c7:28:6d:28:39:ef:2a:
f2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:51:93:A9:87:46:C1:45:00:1B:01:72:30:7B:76:02:7E:D4:F3:FE
X509v3 Authority Key Identifier:
keyid:FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/22E7F194D74C11EF9514995EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.17.200.0/24
110.34.33.0-110.34.36.255
110.34.39.0/24
192.135.90.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:02:59:78:f6:3d:cb:fc:ac:12:52:65:9b:61:09:b3:f2:c3:
e3:30:77:45:19:1c:10:d8:70:90:c6:94:7e:a6:c3:c1:5f:05:
51:63:0f:89:03:71:d1:2c:ae:01:b8:13:3a:8d:99:14:0c:27:
cb:6e:4b:80:0b:e3:f9:25:9f:30:38:77:a5:e4:a2:58:20:51:
4b:90:d6:53:d2:0a:29:aa:de:63:3f:86:74:02:69:c8:95:75:
60:6b:68:56:ce:80:26:11:e7:87:b2:9c:59:43:c8:5e:2c:6e:
bb:61:6e:39:19:71:61:26:a1:61:11:b6:a5:1c:3c:53:a0:30:
6d:2a:06:73:9f:26:97:ed:89:ac:22:35:9b:9e:67:a2:51:df:
2b:20:06:09:a2:40:b3:1c:a3:b3:82:d7:d7:e3:c6:65:a4:a7:
47:d0:6f:d5:15:c1:56:a3:b1:b2:bb:3c:e7:63:cc:c2:5e:ee:
2e:2c:55:c1:4f:2b:ae:8c:90:cd:bb:c4:39:18:9a:7e:69:fd:
8a:f9:64:05:49:63:95:e1:a2:24:f2:51:38:19:aa:e5:15:dd:
83:f5:2f:5c:96:fe:2c:8e:b0:22:51:5f:04:6f:3e:08:ed:67:
88:0d:59:00:dc:38:b7:8b:68:aa:54:0b:d1:b0:fd:f7:86:ff:
e9:d6:1b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:59:19 2026 by rpki-client