
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/D2A2FF4A003B11EFA6658D0DC4F9AE02.roa
File: D2A2FF4A003B11EFA6658D0DC4F9AE02.roa (raw, json)
Hash identifier: hsvg83rgR4LLPwkP5NM04Dace/cP92iXdlcSROFWaew=
Subject key identifier: 6F:B0:7B:8F:EB:1D:8E:51:6D:51:03:92:7D:27:9B:7A:72:19:C2:48
Certificate issuer: /CN=A91AE1B5/serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0
Certificate serial: 0169
Authority key identifier: EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/D2A2FF4A003B11EFA6658D0DC4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:02:08 +0000
ROA not before: Wed 27 Aug 2025 05:40:13 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 135526
IP address blocks: 103.80.69.0/24 maxlen: 24
103.221.245.0/24 maxlen: 24
2001:df2:7e01::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl
rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE1B5, serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0
Validity
Not Before: Aug 27 05:40:13 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a59860-3228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:08:c7:93:58:77:4e:65:8c:dd:dc:90:0a:
8b:94:ed:b1:fa:97:24:95:99:25:63:83:5e:65:ac:
35:fa:04:c0:d4:36:7f:ad:79:bb:67:11:c6:9b:b0:
d0:bb:36:4a:89:5d:e1:5f:b3:74:29:a8:34:df:18:
ec:62:96:51:99:1c:ed:6b:2f:62:5a:7e:51:ec:e6:
b7:c3:ed:f8:f7:ce:23:95:04:da:c1:83:e1:80:c2:
6f:0d:53:09:14:8c:9e:4a:42:4e:b7:ba:2b:7e:e5:
e4:db:c7:d5:b8:7a:8f:2a:6d:d5:eb:2c:36:6d:e8:
a4:d7:ad:a8:d8:e9:ec:a1:65:6c:de:ac:81:61:b1:
b4:9c:e3:6a:a2:82:fe:98:ba:dc:c2:55:2b:2a:46:
6b:ed:ea:f7:50:39:7b:0d:c3:20:6e:f5:1d:42:f5:
9a:1c:54:11:30:08:2a:3e:ce:f8:33:16:71:a4:72:
66:d2:fa:ae:9a:82:4f:8b:40:25:52:0b:9a:9f:5f:
f6:9c:53:80:e6:c2:6e:04:e0:a4:ca:c2:ab:e1:54:
93:be:12:4e:98:e7:98:66:d0:e8:8c:69:98:2c:76:
e6:49:cd:c3:f3:2c:1d:38:6e:7e:b0:39:dc:1b:18:
cb:82:ac:59:fa:40:8f:f5:2f:54:6a:f6:31:0d:98:
49:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B0:7B:8F:EB:1D:8E:51:6D:51:03:92:7D:27:9B:7A:72:19:C2:48
X509v3 Authority Key Identifier:
keyid:EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/D2A2FF4A003B11EFA6658D0DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.80.69.0/24
103.221.245.0/24
IPv6:
2001:df2:7e01::/48
Signature Algorithm: sha256WithRSAEncryption
28:59:38:21:8b:74:bf:17:4f:27:1f:82:f0:7e:80:29:ee:ea:
08:01:c3:7d:0b:88:65:26:03:13:95:9a:40:0f:cf:87:15:9c:
c3:6a:2b:f6:fd:d8:b6:a1:d1:7e:d6:6e:94:b8:c8:ef:12:51:
35:69:47:12:41:b1:8b:6e:2c:4f:f3:da:94:31:51:4b:e8:f5:
29:05:84:2e:da:72:c1:7b:db:32:5c:bc:d9:45:c6:78:32:28:
ae:43:45:02:a5:db:9f:d0:45:d0:bd:3d:aa:eb:b5:39:97:a9:
ca:c1:b2:e3:09:5b:03:e1:64:e3:ab:9f:c9:0e:53:70:62:46:
5c:8d:54:50:4c:71:82:45:e2:3f:c7:8e:59:3b:98:25:0c:21:
62:8e:bb:13:0b:d4:6c:03:34:81:93:f2:28:75:0f:e9:bb:a8:
c5:63:48:69:3b:e4:b1:75:7b:d3:8b:79:85:1e:d3:0c:3a:69:
86:f0:00:44:bb:c7:07:f9:b3:69:ef:48:e1:f2:39:69:f4:f1:
0f:ae:fa:36:6e:4e:66:78:5c:c4:3a:07:33:29:56:53:17:86:
a8:38:dc:6d:e5:c7:64:0a:a9:1a:b0:27:09:12:f2:02:87:89:
4b:d1:5a:9a:aa:9b:86:23:21:03:3c:31:3f:2c:af:f2:7f:8f:
63:32:4b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:19 2026 by rpki-client