
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/7A6DC1B2ED5011F0BF908D85516F56BC.roa
File: 7A6DC1B2ED5011F0BF908D85516F56BC.roa (raw, json)
Hash identifier: Pf2Xcfz159pyHDj2hXgdqjwAgXXP/RYEqTKSIfi/V/I=
Subject key identifier: E9:DA:C4:17:57:8E:2E:C7:BB:32:96:56:50:CA:A1:96:29:B5:0A:4A
Certificate issuer: /CN=A91C1DB8/serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36
Certificate serial: 1446
Authority key identifier: C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/7A6DC1B2ED5011F0BF908D85516F56BC.roa
Signing time: Sun 01 Mar 2026 18:15:10 +0000
ROA not before: Tue 10 Feb 2026 17:14:42 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 134069
IP address blocks: 203.115.192.0/21 maxlen: 21
203.115.212.0/22 maxlen: 22
203.115.216.0/24 maxlen: 24
203.115.217.0/24 maxlen: 24
203.115.229.0/24 maxlen: 24
203.115.234.0/24 maxlen: 24
203.115.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl
rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5190 (0x1446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1DB8, serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36
Validity
Not Before: Feb 10 17:14:42 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a4822e-5d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fc:46:bf:3c:8b:69:b7:87:e0:10:49:be:f2:
e6:de:7e:3d:f1:2a:d3:aa:f0:54:4a:3e:3e:c7:2a:
c0:5d:7a:40:8b:aa:f4:a3:8b:18:f7:c5:67:40:e0:
16:46:d1:13:de:96:0d:b1:3d:9d:3d:da:b6:87:4e:
39:5a:6a:98:25:b5:d7:86:88:ab:ac:8a:c9:1a:44:
b8:25:61:69:bb:87:0d:21:c0:6d:a1:bb:f7:b4:82:
51:9d:f2:05:26:de:3e:4c:c0:62:92:1e:49:c2:61:
51:46:a1:9d:ed:f6:ff:e8:d9:e8:d1:d2:c2:cf:97:
98:4c:97:29:41:c1:89:0f:91:8f:9f:ab:9e:f1:b0:
17:c7:6a:42:6b:5f:af:84:d8:7a:98:b5:da:64:0d:
8d:e4:95:8f:d7:cd:b8:63:7a:0d:4e:64:a2:73:17:
8f:d0:5a:1c:18:fc:22:55:37:6d:c2:c4:a3:46:4b:
27:51:e7:56:57:6a:a2:11:ab:a6:93:de:02:c2:ae:
71:f0:91:11:1c:54:b3:5c:eb:db:80:2c:12:d2:b0:
8c:2b:66:cc:6a:96:b9:4a:2c:92:8e:75:3c:e0:e7:
69:a4:62:14:fc:96:c1:65:38:ae:f2:b3:ce:8f:36:
7d:ea:6a:33:99:9a:d5:37:97:5d:70:16:98:bf:0b:
4a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DA:C4:17:57:8E:2E:C7:BB:32:96:56:50:CA:A1:96:29:B5:0A:4A
X509v3 Authority Key Identifier:
keyid:C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/7A6DC1B2ED5011F0BF908D85516F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
203.115.192.0/21
203.115.212.0-203.115.217.255
203.115.229.0/24
203.115.234.0/24
203.115.246.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:bb:fb:7c:49:b5:b7:0a:08:c0:9a:43:82:b4:df:43:8d:be:
05:d6:86:df:78:9d:26:9d:a9:11:f7:b5:c1:37:cb:ff:8c:2a:
6a:79:2a:e5:d0:0f:08:ac:de:b6:69:59:29:b2:cf:63:07:bb:
b7:f3:71:36:25:ff:af:04:a6:ce:d4:40:e4:d8:e9:38:5d:0a:
39:2a:54:25:80:3a:28:3c:9b:fe:09:2e:b0:cc:a7:8a:36:e8:
f4:02:e0:6c:3e:76:fe:25:af:05:8b:16:e4:da:9e:d2:b8:83:
56:87:1b:82:00:9d:53:01:b4:8a:15:12:be:59:69:80:4a:dc:
2e:4e:e8:88:06:c8:27:fd:33:15:73:72:01:1c:36:d1:9b:64:
66:e5:5c:b8:78:15:35:a2:b4:42:9c:1a:6c:5e:62:c3:ca:71:
68:ba:60:20:79:09:78:0d:d9:69:27:3c:6f:f2:c2:87:1d:96:
dd:af:6b:70:04:94:8a:e1:18:72:1d:89:b9:d1:8d:b1:b9:11:
11:93:02:ab:5a:84:11:84:d6:0e:d0:4a:2d:91:4b:6d:0f:36:
1a:de:d4:da:29:e8:16:87:1d:32:be:b8:6a:24:d4:39:da:3f:
84:55:96:7e:10:6d:ac:bb:b7:09:96:30:f1:17:25:d6:81:d4:
2f:ee:9c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:11:05 2026 by rpki-client