
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/AE0AFE846ADE11ECADF2FE5DC4F9AE02.roa
File: AE0AFE846ADE11ECADF2FE5DC4F9AE02.roa (raw, json)
Hash identifier: toAgoicPvnytN26APU/UVJy8/sTKyifpzMMMZrUhYGw=
Subject key identifier: F3:5E:4B:AF:64:C9:C1:B9:92:73:C7:C3:CF:FB:09:81:18:64:A1:DE
Certificate issuer: /CN=A91C6CD5/serialNumber=4B4C3ACC7620CA8D269F77C2F8BE6CA0DA217627
Certificate serial: 04B2
Authority key identifier: 4B:4C:3A:CC:76:20:CA:8D:26:9F:77:C2:F8:BE:6C:A0:DA:21:76:27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/AE0AFE846ADE11ECADF2FE5DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:20:48 +0000
ROA not before: Thu 12 Feb 2026 23:20:02 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 149415
IP address blocks: 103.178.238.0/23 maxlen: 24
2001:df0:4240::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.crl
rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:52:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1202 (0x4b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6CD5, serialNumber=4B4C3ACC7620CA8D269F77C2F8BE6CA0DA217627
Validity
Not Before: Feb 12 23:20:02 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a44b40-cee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:26:66:77:74:7b:85:4d:ba:9e:b1:26:71:c0:
71:69:ba:0b:a7:fb:d8:36:01:9f:df:78:18:b2:fe:
c1:a4:e1:42:c2:91:2f:8a:11:e7:68:a2:a4:02:aa:
a7:f1:78:4d:14:56:79:31:8e:a7:3c:7c:78:e7:52:
02:66:48:e2:e3:a5:31:2e:75:76:b8:f1:3a:8f:52:
a7:e8:ff:96:c3:8b:6d:bb:30:bd:32:9c:c1:f7:35:
f3:63:6d:f4:91:84:27:5f:ce:4b:65:60:18:28:9e:
3c:cd:7d:47:b7:7e:5b:95:08:35:41:38:3b:92:61:
cc:dc:0b:30:fe:33:b4:3b:3b:8b:45:97:3d:26:7a:
a6:69:d4:e4:df:ee:5f:57:34:d6:d9:2e:6f:b4:06:
34:50:b1:54:82:f2:bc:58:9d:62:33:79:a2:f6:0e:
fe:b1:12:dd:35:eb:7f:ac:cb:b0:e1:87:e6:a7:7f:
d1:99:9c:d8:0b:fc:c5:7f:5c:27:ec:5f:65:3a:65:
60:fb:39:98:46:78:d5:c9:8a:54:37:72:a8:96:fd:
66:6f:e5:cc:cc:d8:1f:9c:0e:cd:e5:83:7d:6a:bd:
02:ba:a8:70:b0:f7:c6:07:7d:e6:c2:b2:bf:9c:58:
30:72:75:e2:38:13:d9:70:96:a0:41:75:f3:ba:0b:
7f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5E:4B:AF:64:C9:C1:B9:92:73:C7:C3:CF:FB:09:81:18:64:A1:DE
X509v3 Authority Key Identifier:
keyid:4B:4C:3A:CC:76:20:CA:8D:26:9F:77:C2:F8:BE:6C:A0:DA:21:76:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/AE0AFE846ADE11ECADF2FE5DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.178.238.0/23
IPv6:
2001:df0:4240::/48
Signature Algorithm: sha256WithRSAEncryption
4a:ec:a8:e6:c2:18:e3:e4:65:7e:9f:56:7a:2d:2b:f3:44:d9:
73:09:75:96:e6:65:4e:03:0a:fe:06:20:86:9d:9d:bd:47:df:
dd:5d:e9:e5:6c:2a:51:99:99:a3:96:95:91:de:fa:76:6f:3a:
d4:4b:45:c4:b6:87:44:57:73:5a:25:a3:a4:37:99:0f:97:13:
81:67:a9:d9:1c:e5:cd:8a:6b:c6:38:fa:a6:60:7e:41:ea:8d:
cf:65:3c:bc:b8:a7:35:77:e3:de:2d:dd:a0:b9:c9:bd:e4:9d:
35:ad:93:34:21:20:2b:1e:81:ad:c6:7c:1d:bc:ef:af:ad:d5:
47:ac:f7:b9:40:d5:bc:ba:d3:9b:18:1e:10:a6:a2:ec:72:77:
bf:fb:e8:d4:e2:84:c6:90:50:bc:61:91:46:d3:68:37:0a:3a:
7f:51:ed:df:d1:29:72:be:8f:2c:c3:0c:68:31:2c:ac:d6:8a:
cc:6e:c9:83:8f:7c:e6:b8:a9:89:3b:4e:26:8d:99:2f:a8:f9:
b5:ca:ce:be:06:b4:17:01:ca:6b:a5:69:be:bf:8a:6f:1c:90:
39:8b:25:81:a1:fe:41:8e:71:98:f6:84:e0:f3:3b:0c:ed:01:
2c:cb:51:37:76:3f:75:15:7e:29:7e:bb:47:1a:4a:54:ce:af:
f8:cf:53:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:35:17 2026 by rpki-client