
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/2DED8B66D02011ECB021972BC4F9AE02.roa
File: 2DED8B66D02011ECB021972BC4F9AE02.roa (raw, json)
Hash identifier: /R3alqOLxHvu/YtPDpFBv0dJvKc+l2o4yXgcxx8ZzWg=
Subject key identifier: C0:1E:24:93:1B:E9:22:84:E5:D0:33:9F:1D:71:75:E1:D7:A5:85:87
Certificate issuer: /CN=A91AE108/serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
Certificate serial: 03E8
Authority key identifier: 02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/2DED8B66D02011ECB021972BC4F9AE02.roa
Signing time: Mon 25 May 2026 01:34:28 +0000
ROA not before: Mon 25 May 2026 01:34:27 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 58606
IP address blocks: 203.175.178.0/24 maxlen: 24
203.175.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl
rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:35:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1000 (0x3e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE108, serialNumber=02BB97FD8B1F620E02A1E2CADB59D656F01ADA45
Validity
Not Before: May 25 01:34:27 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a13a723-f1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6a:62:f5:1c:be:c0:44:4b:c2:1f:8c:48:3f:
e8:ef:04:e0:dc:24:8b:9b:e9:24:a5:2d:be:42:de:
ca:f9:c3:54:1d:cf:8e:76:de:b8:e7:8c:ea:bd:a6:
26:4c:ea:d1:ed:af:11:ba:86:2e:aa:12:37:5a:5e:
25:e4:de:bf:1d:72:1e:6f:e7:c1:24:64:43:f4:d0:
19:d5:29:00:e1:31:97:a0:a8:f8:3d:74:01:91:d7:
93:2d:37:e4:87:d8:a3:42:14:6e:30:6f:d0:69:7b:
be:ea:bd:6c:f2:14:8d:c5:55:21:8f:a6:c7:5f:34:
9d:5f:06:d8:d3:2e:e1:3c:22:db:e9:54:88:7a:73:
99:a3:c1:e3:4d:41:a7:34:f0:3f:e6:1d:3b:e8:e4:
ba:f7:d0:a7:9e:eb:32:10:2f:5a:4c:5a:54:ad:36:
0b:96:34:34:3c:36:18:1f:79:11:40:02:c7:26:97:
1c:18:22:27:bb:62:40:ce:4f:18:4a:a0:af:f5:d4:
33:88:8a:bb:21:4a:32:af:be:a9:1b:46:70:b3:5b:
f6:1e:37:8d:ee:db:74:9d:e8:fc:32:d5:bd:9a:1d:
50:48:e8:68:46:b1:73:77:85:f4:b2:b2:1c:9a:6f:
37:ad:b0:33:ba:b1:1d:ff:a2:c6:c2:5b:e3:24:88:
b6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1E:24:93:1B:E9:22:84:E5:D0:33:9F:1D:71:75:E1:D7:A5:85:87
X509v3 Authority Key Identifier:
keyid:02:BB:97:FD:8B:1F:62:0E:02:A1:E2:CA:DB:59:D6:56:F0:1A:DA:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/AruX_YsfYg4CoeLK21nWVvAa2kU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AruX_YsfYg4CoeLK21nWVvAa2kU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE108/E3B046CCD01C11ECB354AF24C4F9AE02/2DED8B66D02011ECB021972BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.175.178.0/23
Signature Algorithm: sha256WithRSAEncryption
12:0e:97:f3:60:35:28:1e:3d:52:5e:fd:e2:d5:29:db:c3:75:
d9:2b:8e:2c:0f:20:d5:15:cb:5f:bc:64:56:fe:0b:e1:6e:a6:
5d:d9:e9:1c:3e:15:07:45:b0:21:3e:b6:15:e4:fb:fc:64:54:
aa:ee:e4:d7:04:7b:c0:f8:27:49:a5:da:54:82:08:48:d9:3b:
5d:5e:c7:68:c9:42:19:25:b5:d3:c9:ea:21:8c:ba:cf:af:4c:
30:be:3c:08:2c:ba:98:f8:b6:65:b0:4d:73:14:02:cc:dd:68:
e5:20:b8:e9:d9:07:67:d9:1b:a9:bb:15:dc:43:d7:bc:70:1e:
36:58:bc:a4:ac:f0:9e:3c:46:7b:3a:87:0c:68:a4:7c:04:dd:
48:68:9f:5e:25:f6:6f:8f:fc:aa:ce:79:f8:6f:66:73:66:27:
ad:de:a2:a0:93:a9:84:26:7e:f7:ce:91:98:4e:54:c0:15:de:
05:6f:71:25:0a:52:6a:1f:0a:81:28:e3:d0:be:c8:6e:bb:94:
98:d7:b0:d9:92:d3:4f:b0:29:67:44:22:b9:ef:05:14:6b:3d:
d3:5b:a7:34:ac:83:9c:6f:fe:ba:0f:e6:4b:62:ee:eb:f2:26:
86:43:a4:20:81:f5:22:db:56:d0:27:76:21:5d:c2:cd:43:c9:
11:76:43:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:43:07 2026 by rpki-client