
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/297CAAF2600F11F19DD612FE8747A888.roa
File: 297CAAF2600F11F19DD612FE8747A888.roa (raw, json)
Hash identifier: 3caSMOx+p5Jr6uBlGiryWygb4IBsCl4CdewfhyZYMAk=
Subject key identifier: 39:64:7B:5D:05:48:92:A6:A8:EA:F3:F4:5B:94:89:02:EB:A4:99:01
Certificate issuer: /CN=A91AF01C/serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB
Certificate serial: 024F
Authority key identifier: 5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/297CAAF2600F11F19DD612FE8747A888.roa
Signing time: Fri 05 Jun 2026 03:32:50 +0000
ROA not before: Fri 05 Jun 2026 03:32:50 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 138611
IP address blocks: 103.206.16.0/24 maxlen: 24
2401:160::/32 maxlen: 32
2401:160::/46 maxlen: 46
2401:160::/48 maxlen: 48
2401:160:1::/48 maxlen: 48
2401:160:2::/48 maxlen: 48
2401:160:3::/48 maxlen: 48
2401:160:4::/46 maxlen: 46
2401:160:4::/48 maxlen: 48
2401:160:5::/48 maxlen: 48
2401:160:6::/48 maxlen: 48
2401:160:7::/48 maxlen: 48
2401:160:8::/48 maxlen: 48
2401:160:9::/48 maxlen: 48
2401:160:10::/48 maxlen: 48
2401:160:11::/48 maxlen: 48
2401:160:12::/48 maxlen: 48
2401:160:13::/48 maxlen: 48
2401:160:14::/48 maxlen: 48
2401:160:15::/48 maxlen: 48
2401:160:200::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl
rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 591 (0x24f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF01C, serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB
Validity
Not Before: Jun 5 03:32:50 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a224362-f00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:39:ae:f8:c3:95:ad:ab:28:1c:11:6a:b7:
f0:5f:d0:01:40:35:75:27:04:27:f2:e1:16:58:db:
ee:bb:69:ad:39:a8:03:84:e6:d9:ff:c3:9f:21:9d:
37:7c:83:14:c7:3b:17:13:fe:ca:7f:78:ab:2a:e6:
3b:df:f8:b1:fd:22:01:f1:62:61:1c:99:28:4b:d4:
69:0e:16:d8:dc:82:1b:2f:73:e5:8c:c9:02:82:a8:
1f:94:e3:26:83:1f:35:a1:e4:19:88:1f:94:85:85:
c7:26:07:1e:a6:84:a4:ea:01:23:f1:65:82:25:4b:
bd:3e:41:9e:a2:a3:77:6c:77:26:62:d3:ea:2f:30:
b3:36:c1:dc:12:e9:36:08:ad:e8:2e:9a:18:ee:ef:
eb:51:24:d4:1b:5e:63:1c:88:c6:d8:56:79:98:ae:
84:f8:ec:43:15:12:ad:f2:79:2f:94:53:59:ac:5f:
7d:43:8f:ec:15:2a:94:b2:18:11:18:d5:6b:e7:36:
67:64:ac:0c:ce:8d:59:73:ea:a2:7c:10:0a:a8:4d:
5f:4d:00:84:bb:9e:34:5f:39:b7:5e:f3:5d:f8:cf:
cd:49:73:c3:fa:b6:05:ea:e9:f8:ed:d1:2a:df:b9:
32:73:07:fc:b5:ab:b3:3b:32:f5:78:62:f0:19:22:
04:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:64:7B:5D:05:48:92:A6:A8:EA:F3:F4:5B:94:89:02:EB:A4:99:01
X509v3 Authority Key Identifier:
keyid:5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/297CAAF2600F11F19DD612FE8747A888.roa
sbgp-ipAddrBlock: critical
IPv4:
103.206.16.0/24
IPv6:
2401:160::/32
Signature Algorithm: sha256WithRSAEncryption
80:05:c9:41:e6:af:32:41:35:29:37:be:af:34:b1:72:68:99:
82:88:de:e3:fc:78:0a:b0:38:3b:42:12:51:3e:65:4f:b4:34:
be:31:b2:75:dd:d8:85:5e:ad:08:a5:b9:55:7d:b0:c7:1d:8e:
7f:28:82:22:41:16:74:ff:54:a1:46:2e:03:f6:d8:67:6b:21:
8d:53:88:f5:ed:0c:35:58:9f:3a:ae:ad:b6:93:db:7e:0c:bb:
19:82:e0:3a:03:92:a4:1f:ce:a7:1f:44:79:8f:b3:66:ef:0e:
d0:d6:66:7c:91:85:25:fb:4e:d2:b9:d3:c1:f6:45:43:b4:13:
37:08:99:26:af:02:6d:72:a2:23:76:cf:17:ce:8b:fd:e3:05:
0d:ee:d4:40:05:c3:fc:eb:a0:ec:b2:3c:78:8d:89:a5:75:02:
ad:ed:b8:63:83:6a:90:db:cb:0e:10:a0:85:47:46:7a:7c:0c:
14:f0:f9:58:4f:94:0f:cb:f1:ea:1e:07:45:d9:f5:97:c6:f2:
4c:25:a0:99:3e:ea:54:44:ac:f0:2b:20:c2:a0:03:fe:7e:c6:
a1:4c:17:57:73:fa:40:14:fc:6b:0c:f6:39:66:93:fa:3d:86:
a5:d9:be:30:12:1f:9d:f5:08:95:44:49:ab:cc:0e:72:c1:ef:
fd:e1:fc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:41:48 2026 by rpki-client