
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/6E038820BF6211EA94C2957CC4F9AE02.roa
File: 6E038820BF6211EA94C2957CC4F9AE02.roa (raw, json)
Hash identifier: zpylNEe89CbqVMFt1Qej/SgQec1Qy8+/AmkFsaHZ4JI=
Subject key identifier: CD:D3:B2:F6:82:17:CE:EB:69:B8:80:49:2C:B4:5D:34:3B:56:59:52
Certificate issuer: /CN=A91AE08E/serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4
Certificate serial: 0927
Authority key identifier: D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/6E038820BF6211EA94C2957CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:52:25 +0000
ROA not before: Tue 22 Jul 2025 21:01:05 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 18351
IP address blocks: 103.69.64.0/22 maxlen: 24
203.201.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl
rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2343 (0x927)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE08E, serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4
Validity
Not Before: Jul 22 21:01:05 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a42879-167e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d4:ac:1a:fb:ad:67:e1:b9:c7:50:05:ae:1d:
79:5a:92:6b:14:c0:2f:fd:34:45:57:3d:42:df:4e:
f4:72:59:a2:a1:da:a4:11:f2:a6:0d:0f:12:0b:64:
c8:cc:8d:62:1c:8f:4e:d7:13:04:02:6f:ad:49:e7:
ed:12:f9:47:bb:45:22:66:14:a1:19:0c:90:e6:21:
3e:a1:8e:17:b9:de:e6:cb:53:12:67:17:7e:5d:97:
10:8d:44:b2:a7:ac:eb:19:c1:46:b3:9b:29:35:4c:
33:66:e6:4b:3b:5e:b4:89:d2:58:c4:ad:13:30:83:
8d:32:e3:30:94:ce:b2:86:3a:ae:6f:45:ea:ce:99:
81:58:b5:95:28:fb:f8:94:00:eb:3b:c6:22:68:80:
80:4c:64:c1:58:66:b5:a0:68:3b:ba:64:1e:31:6c:
03:d2:7c:aa:27:6a:9a:b8:8d:28:cc:30:2c:c5:70:
98:67:62:a3:57:6e:42:09:d7:e2:88:85:bd:2a:a5:
15:7d:12:bc:1c:b1:8d:f6:80:cd:c6:71:d0:d2:3f:
20:69:60:c1:dd:f5:6c:82:85:5c:0b:50:4d:4f:ab:
a8:55:09:bc:81:1a:57:61:7b:e1:e6:ad:f3:ee:93:
6b:ac:ee:c0:f5:26:8a:e0:da:c2:31:13:0f:41:7a:
12:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D3:B2:F6:82:17:CE:EB:69:B8:80:49:2C:B4:5D:34:3B:56:59:52
X509v3 Authority Key Identifier:
keyid:D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/6E038820BF6211EA94C2957CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.69.64.0/22
203.201.176.0/22
Signature Algorithm: sha256WithRSAEncryption
74:44:0c:a8:15:0a:4e:d6:5e:87:60:96:45:7d:a6:3f:70:25:
bc:ec:02:bc:81:b9:d9:7a:7a:30:b0:17:35:75:3f:05:54:04:
db:b7:88:80:e5:4c:46:45:2a:63:72:f1:bc:07:c1:d2:77:d5:
ae:09:9f:91:5f:fb:5a:6c:ae:78:25:98:83:4e:7c:cc:02:61:
bf:63:77:f3:e3:38:2a:13:11:d4:6c:61:15:b1:6e:ec:27:4c:
4b:93:f5:a8:86:4a:c0:77:b2:6c:1a:83:a1:d8:90:c5:c9:37:
43:0e:50:0f:3a:5c:bc:b2:ec:11:15:d8:28:23:77:ea:b1:fd:
9c:22:cb:5b:30:ad:9f:b5:89:83:38:5b:18:2b:dc:6a:a1:f2:
d5:90:d7:c0:0d:e1:fa:bf:7d:4c:0a:4a:35:58:02:50:85:5c:
2d:59:f6:cf:55:c1:d0:e0:e9:3e:0e:df:69:c5:e8:58:46:34:
1f:a9:50:4f:35:88:8d:46:eb:15:cc:dc:29:f5:c4:12:95:fb:
cf:c9:ca:1b:3b:89:d2:a8:d4:4e:13:eb:11:e9:35:38:67:5a:
02:55:eb:c3:5e:e2:0e:00:d7:f8:40:ba:e1:42:3a:58:b1:ee:
f4:e1:2b:51:40:70:aa:52:9c:d4:48:59:1f:9d:e6:d6:c6:2c:
8f:0d:0b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:56:58 2026 by rpki-client