
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/AB366D1C409611EE92C55F40C4F9AE02.roa
File: AB366D1C409611EE92C55F40C4F9AE02.roa (raw, json)
Hash identifier: Lf5S48RM+H6jGhhi+lkOyHY5YBcAJOA0fAYnMQrcmBs=
Subject key identifier: 50:85:5D:B4:50:66:5C:B6:84:11:6A:C2:A3:7B:75:82:94:C1:A9:3F
Certificate issuer: /CN=A91AE25A/serialNumber=2BCA12D46D4611ED6EF1886F364468DF3D02EDE5
Certificate serial: 01DD
Authority key identifier: 2B:CA:12:D4:6D:46:11:ED:6E:F1:88:6F:36:44:68:DF:3D:02:ED:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/AB366D1C409611EE92C55F40C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:38:22 +0000
ROA not before: Wed 11 Jun 2025 03:42:24 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 18001
IP address blocks: 103.210.128.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl
rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:16:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477 (0x1dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE25A, serialNumber=2BCA12D46D4611ED6EF1886F364468DF3D02EDE5
Validity
Not Before: Jun 11 03:42:24 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3dede-4c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7b:70:54:7d:a4:bf:47:1f:e9:82:b8:d7:97:
80:0b:ee:a5:0f:e5:95:2d:d3:c8:32:b8:f9:b0:05:
35:e9:5e:e3:a0:bc:dc:bc:76:58:25:75:7c:c9:e8:
e9:68:c6:3f:13:4b:b2:f2:10:cd:61:48:60:05:2d:
1c:1b:4c:86:c5:c2:7d:2d:7e:4b:77:41:c0:c0:26:
65:c3:c2:66:8d:0c:98:00:b0:56:4f:23:60:3d:c1:
0e:93:98:bd:20:14:6a:2a:a7:ae:89:e3:5d:59:f9:
e5:e6:af:17:f1:03:94:82:7a:90:70:7f:77:95:26:
1c:a7:81:3d:e5:bb:4a:be:72:38:b4:89:65:ec:5f:
37:79:ac:be:1c:46:4c:b7:c4:b6:a9:40:33:d9:08:
f9:1b:7e:48:42:7d:46:8f:82:2a:2b:30:57:41:c5:
6b:3b:17:7e:9c:c2:56:ee:9d:4e:0f:4c:ea:93:fe:
f9:52:61:69:ae:a6:77:7f:fa:70:7d:ab:7f:45:f1:
bc:d3:75:4f:df:f6:4e:a2:2e:ec:3b:3c:0f:f8:5b:
00:20:ae:5e:4e:84:d5:be:0b:a2:27:ed:27:db:69:
ba:10:7a:29:1a:14:9c:84:23:10:29:e6:2f:01:b5:
ff:04:ae:5e:6e:da:b0:c9:03:db:02:e0:5d:ca:2f:
79:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:85:5D:B4:50:66:5C:B6:84:11:6A:C2:A3:7B:75:82:94:C1:A9:3F
X509v3 Authority Key Identifier:
keyid:2B:CA:12:D4:6D:46:11:ED:6E:F1:88:6F:36:44:68:DF:3D:02:ED:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/AB366D1C409611EE92C55F40C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.210.128.0/23
Signature Algorithm: sha256WithRSAEncryption
78:d4:de:8c:14:5e:54:1a:87:de:71:df:b1:1f:73:15:84:b6:
66:c9:60:fb:19:b7:5d:2b:40:4f:99:0f:a3:db:a2:4a:66:8d:
fd:75:c6:4f:c4:f2:fd:61:3e:2c:09:7f:79:57:65:e7:68:7e:
90:89:07:a4:3c:eb:0c:dd:1d:89:ce:f5:cf:22:14:04:e2:e3:
37:78:8a:81:27:c7:07:0e:c4:2a:f3:a8:96:92:9c:f6:09:64:
3d:1e:8e:7e:cf:02:20:98:a4:12:a5:12:83:0d:bc:77:6d:42:
ab:e0:00:0c:1b:0f:66:73:76:90:a1:f9:68:08:96:4e:85:5c:
35:69:a0:2e:a9:23:f0:24:98:20:56:15:08:bf:a6:6a:f7:a7:
b2:80:d1:83:26:af:10:9c:05:6b:90:16:7f:7d:e9:ec:5f:c7:
50:42:e3:36:5a:9d:8f:5e:02:b7:7d:68:45:4e:3c:1a:6f:95:
c6:08:ee:32:18:99:79:e0:de:50:25:68:27:a3:40:a4:2d:5c:
9b:24:f7:37:29:f2:fe:1b:3d:67:48:3d:d0:ea:55:35:a6:d7:
fd:5c:c9:dc:f3:f3:36:78:f2:e7:94:3c:39:25:53:de:47:d7:
b2:26:00:d5:a1:d5:21:f3:a6:32:f3:32:08:26:9f:08:69:1a:
27:1e:3e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:48:32 2026 by rpki-client