
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/2CB0D29E211411EE82DE6110C4F9AE02.roa
File: 2CB0D29E211411EE82DE6110C4F9AE02.roa (raw, json)
Hash identifier: GX6d+i8T3/UN+jKGMIUnka+ntLmmZDysaw1Q/QF70d0=
Subject key identifier: 1B:CA:89:27:7D:10:7A:C0:65:2F:E9:A2:6C:C6:2C:6D:8D:72:36:C9
Certificate issuer: /CN=A91DC75C/serialNumber=A536A54DB41E441DE74C33F6F736C5AD7A6685C6
Certificate serial: 04BB
Authority key identifier: A5:36:A5:4D:B4:1E:44:1D:E7:4C:33:F6:F7:36:C5:AD:7A:66:85:C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTalTbQeRB3nTDP29zbFrXpmhcY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/2CB0D29E211411EE82DE6110C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:48:23 +0000
ROA not before: Sat 13 Sep 2025 00:36:21 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 151415
IP address blocks: 103.228.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.crl
rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTalTbQeRB3nTDP29zbFrXpmhcY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1211 (0x4bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC75C, serialNumber=A536A54DB41E441DE74C33F6F736C5AD7A6685C6
Validity
Not Before: Sep 13 00:36:21 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a45fc7-08fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1d:f3:62:9a:d3:24:9f:24:39:1b:77:3e:3d:
09:5f:6c:88:50:fe:42:e1:7f:67:67:1f:53:ca:e5:
8f:ec:c3:c4:f8:25:55:c0:a7:a9:da:c3:41:08:dc:
53:21:0d:ee:9e:24:fb:a6:3d:4f:ba:7a:bd:c3:e1:
2f:b9:5e:ae:5f:7e:d9:45:05:cd:1f:64:68:48:ad:
18:71:77:fc:6e:f6:2d:58:14:d1:f9:75:a1:20:e0:
3f:f4:84:1c:2c:08:ce:81:13:d2:cf:4b:16:5a:18:
af:38:81:86:9a:f0:6a:a6:ac:10:8e:d0:a2:c7:d8:
2a:31:82:85:e2:8b:e2:65:da:9b:52:ea:ae:03:73:
16:2b:6b:a5:e4:50:7e:47:0d:38:a3:af:0e:be:8d:
07:71:4b:7d:eb:58:68:04:39:ae:5d:8d:38:3c:9c:
d7:35:a5:a2:43:59:8a:65:aa:4b:0e:11:b1:47:c0:
ae:22:01:6f:ae:9b:07:74:1b:60:4e:cf:69:d6:42:
50:5c:d4:e8:ba:a7:c9:1d:fc:03:e8:56:59:6d:13:
fa:35:78:3d:c1:1e:74:2c:20:7e:a3:9c:c8:7f:d1:
5c:3d:90:fa:15:52:70:b0:83:50:e7:45:0a:7b:40:
4d:7e:2f:13:7c:da:e2:85:d5:3d:d5:06:a7:13:47:
a4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CA:89:27:7D:10:7A:C0:65:2F:E9:A2:6C:C6:2C:6D:8D:72:36:C9
X509v3 Authority Key Identifier:
keyid:A5:36:A5:4D:B4:1E:44:1D:E7:4C:33:F6:F7:36:C5:AD:7A:66:85:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/pTalTbQeRB3nTDP29zbFrXpmhcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTalTbQeRB3nTDP29zbFrXpmhcY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC75C/ACAC39BE687111EC8BDB346BC4F9AE02/2CB0D29E211411EE82DE6110C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.228.124.0/24
Signature Algorithm: sha256WithRSAEncryption
90:95:cb:5d:fc:fb:b5:c2:b3:8d:e3:3c:a5:39:3e:47:30:df:
d4:f2:e7:74:b6:75:b6:15:98:d1:61:fe:7a:75:73:38:13:41:
1c:4e:3f:c9:de:8b:ad:1e:e0:5f:86:05:f9:c7:99:2a:14:f1:
c2:b0:39:8c:17:e6:3e:08:a3:ac:b4:1b:59:af:50:fd:73:8d:
07:b0:be:15:a5:2a:b8:49:1d:76:38:55:26:b8:22:75:77:8c:
a7:f0:5e:01:98:67:df:28:46:41:1f:df:48:48:40:82:a2:50:
bb:e2:5a:4e:05:af:73:a7:6c:b1:2a:35:3b:30:d8:48:db:c3:
21:4c:ae:a8:1e:c8:9b:5b:a9:e2:d3:b6:73:5e:51:66:dc:32:
49:5c:a7:f8:9c:df:9d:7b:53:a4:2e:ac:c3:de:49:41:1a:97:
ca:d2:11:ed:b2:ea:43:66:6e:73:dc:3d:72:0c:7b:06:23:2c:
3b:9f:b7:e8:cc:49:6b:ba:8a:6c:2c:00:7b:79:e5:10:31:4a:
47:c7:b9:09:a9:6a:7f:15:44:de:80:33:b5:4b:18:51:db:dc:
49:0e:7d:5c:1e:cb:b3:1f:5b:7a:51:8d:cf:65:99:f0:5a:a5:
11:c2:1a:85:03:fd:5c:98:4e:9c:a4:29:ae:de:13:3a:ae:37:
e8:62:ad:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:30 2026 by rpki-client