
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/05C6C85CF3C211ED8B9B1450C4F9AE02.roa
File: 05C6C85CF3C211ED8B9B1450C4F9AE02.roa (raw, json)
Hash identifier: pEGca+IPEpfTN7Uoi3ourbTwBrCMtG2fYtPL1tOpv1I=
Subject key identifier: CF:2C:E7:04:7A:90:05:F2:B6:60:BE:8A:7C:C7:A3:5E:5A:43:8A:1E
Certificate issuer: /CN=A91BDA2A/serialNumber=FAE21414D113DB78D54FEABA1B606F854A240BD1
Certificate serial: 0212
Authority key identifier: FA:E2:14:14:D1:13:DB:78:D5:4F:EA:BA:1B:60:6F:85:4A:24:0B:D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/05C6C85CF3C211ED8B9B1450C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:30:37 +0000
ROA not before: Sat 05 Jul 2025 04:09:24 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 151327
IP address blocks: 103.137.46.0/23 maxlen: 23
103.137.46.0/24 maxlen: 24
103.137.47.0/24 maxlen: 24
2001:df2:6640::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.crl
rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:09:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 530 (0x212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDA2A, serialNumber=FAE21414D113DB78D54FEABA1B606F854A240BD1
Validity
Not Before: Jul 5 04:09:24 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a3eb1d-0593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6a:1b:46:48:38:c3:94:21:0c:83:54:bf:f9:
11:79:6c:da:9b:a5:90:bc:27:c7:b0:fa:50:e9:66:
97:a9:f5:62:04:51:93:29:82:89:5e:49:8f:91:58:
4a:88:54:38:89:7a:4d:bb:8c:d0:79:7a:9b:94:9d:
00:50:1d:93:51:b6:50:8f:44:cf:d3:89:c6:10:69:
3c:ef:0b:fe:bc:29:f1:8e:6c:dc:9b:61:b8:e3:29:
c3:60:97:92:a9:2d:36:33:93:d2:13:60:42:96:10:
fd:dd:1b:dc:1c:71:f0:4c:80:dd:26:87:05:c1:37:
0e:28:d9:a1:33:a1:b2:ed:9d:d9:af:dd:a1:f4:12:
55:1f:9a:b4:be:c4:52:16:32:7c:86:78:0f:e8:a6:
0a:78:03:e0:50:c6:20:8a:cd:a2:d6:ce:0d:9d:26:
e6:21:91:79:ad:b9:67:2d:75:9f:a3:bc:37:3a:3b:
12:55:6a:cd:ed:30:b5:39:78:a1:03:3b:86:0d:c5:
0d:76:ad:3f:7a:40:b0:42:12:1e:07:fc:38:2c:8b:
70:14:77:b9:56:cc:6b:c9:01:5f:dd:c7:09:58:ff:
ad:41:a8:52:2e:8d:78:d2:d2:bd:7f:34:19:c5:a2:
4a:d3:a2:16:5f:0f:73:ef:60:b2:e3:7b:98:19:29:
77:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2C:E7:04:7A:90:05:F2:B6:60:BE:8A:7C:C7:A3:5E:5A:43:8A:1E
X509v3 Authority Key Identifier:
keyid:FA:E2:14:14:D1:13:DB:78:D5:4F:EA:BA:1B:60:6F:85:4A:24:0B:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/-uIUFNET23jVT-q6G2BvhUokC9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-uIUFNET23jVT-q6G2BvhUokC9E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA2A/147711B2F3BE11ED9A9AC64FC4F9AE02/05C6C85CF3C211ED8B9B1450C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.137.46.0/23
IPv6:
2001:df2:6640::/48
Signature Algorithm: sha256WithRSAEncryption
2b:6d:96:a0:14:ac:7e:9b:7b:df:9b:bd:c7:69:5b:e0:86:92:
31:21:9a:32:2d:9e:91:ca:6f:f6:37:6f:bd:54:a3:d6:a6:df:
2c:8e:75:3f:8e:9f:a9:a5:4e:17:13:1d:a5:58:8f:b9:bc:70:
80:27:0d:da:04:a0:4c:0b:9a:ea:ec:fa:40:50:f8:1a:7d:6b:
27:c5:29:b0:9f:6a:77:ee:bc:31:6c:7b:22:b8:3f:2b:14:31:
5d:fe:3f:a4:9b:71:cf:eb:7e:73:89:af:96:84:0d:7f:74:d4:
2f:57:7c:54:b2:c8:d1:fd:ef:e1:b1:f9:30:d5:b0:54:bb:6f:
dd:f7:3e:17:2e:c6:a5:e4:f8:c2:9b:d8:58:1c:f5:fb:32:aa:
22:85:91:28:22:6d:27:88:e2:9c:6a:5c:99:d9:8e:2b:2f:ea:
ef:50:2d:67:1d:34:61:76:42:fa:9b:81:bd:b5:9a:c4:c2:fd:
98:20:58:fe:d8:4a:ad:79:98:51:79:7b:4c:95:78:d8:e1:43:
8a:6c:24:9a:20:45:ef:6a:f5:a1:ee:03:3e:f2:c4:83:20:93:
94:91:ad:9f:c9:f8:34:7d:05:d3:2c:83:28:16:49:6f:5e:b9:
8e:29:e6:a9:45:89:42:08:a1:48:d7:ea:f7:68:46:31:81:66:
49:24:c1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:19 2026 by rpki-client