
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/E0BC0B4C011411EAAB0EF153C4F9AE02.roa
File: E0BC0B4C011411EAAB0EF153C4F9AE02.roa (raw, json)
Hash identifier: TQPUr83+4QFfxrmveT7ts0ztgC3olEi7fsnrMHT3vIA=
Subject key identifier: 9B:07:BC:FD:5A:1A:A8:70:DB:99:6D:1C:5D:38:4F:D2:C3:6C:79:96
Certificate issuer: /CN=A91E4023/serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F
Certificate serial: 0CF8
Authority key identifier: 67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/E0BC0B4C011411EAAB0EF153C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:52:38 +0000
ROA not before: Tue 08 Jul 2025 18:58:01 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 131996
IP address blocks: 103.69.208.0/24 maxlen: 24
103.69.209.0/24 maxlen: 24
103.69.210.0/24 maxlen: 24
2001:df3:5a00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl
rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:53:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3320 (0xcf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4023, serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F
Validity
Not Before: Jul 8 18:58:01 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a444a6-8cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c2:99:03:dd:ea:e3:49:68:5a:d1:7d:ee:f0:
77:a9:2b:f2:a8:94:c1:35:60:39:c1:68:f7:de:7a:
ed:f0:09:9d:8d:6d:47:4a:da:c2:cc:f6:fc:75:e5:
fe:18:3b:46:9b:8b:f8:70:44:ae:94:1d:65:f5:eb:
b8:1d:73:2d:39:76:56:63:4f:a5:4e:27:a5:27:be:
a5:f3:ea:b4:16:c0:18:0c:d9:c3:5c:9c:2a:d6:75:
28:bc:93:48:d0:f8:ea:0f:47:9e:cc:21:b7:f1:bb:
7f:9c:df:59:67:32:0b:41:d6:66:dd:f3:94:9e:93:
24:36:e1:5e:94:57:5b:4a:89:92:70:c5:c0:da:93:
8b:75:0e:91:9d:85:62:d7:19:fd:a7:a6:61:80:20:
51:d8:34:58:3b:d2:7a:c7:d7:69:a6:eb:14:10:fb:
94:83:81:40:6a:8a:20:44:1b:3a:dd:f6:b9:a7:be:
58:70:e0:5c:d8:94:b6:9e:a1:ce:27:c0:65:0d:a2:
a5:3d:31:b5:1b:64:f6:8c:a1:0d:d2:38:5f:d0:18:
24:05:3e:b8:1c:8b:70:e5:e5:cc:70:ed:7c:1a:a5:
61:9b:37:89:6e:25:49:46:09:dd:ba:8f:d8:61:fc:
48:39:c0:16:a0:99:6c:db:0e:8c:22:14:7f:6d:58:
41:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:07:BC:FD:5A:1A:A8:70:DB:99:6D:1C:5D:38:4F:D2:C3:6C:79:96
X509v3 Authority Key Identifier:
keyid:67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/E0BC0B4C011411EAAB0EF153C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.69.208.0-103.69.210.255
IPv6:
2001:df3:5a00::/48
Signature Algorithm: sha256WithRSAEncryption
3a:f6:8d:da:d7:e0:d6:95:0b:ea:d1:d2:39:00:a4:da:4b:1b:
fa:01:f0:ad:37:23:22:c5:92:b5:c4:6a:70:af:a4:99:aa:16:
b7:a2:2e:e9:e0:35:ad:48:66:84:2a:79:2f:dd:66:62:75:fc:
f4:3b:0c:6e:99:17:1e:ea:02:35:74:9d:2d:21:47:3b:d2:b7:
d5:2c:bb:b4:22:61:1b:d6:b6:6b:6f:3c:11:4a:d5:cd:9f:21:
a0:69:56:a2:c7:33:22:83:0e:4e:da:fa:d6:39:d2:cd:0d:05:
5b:1f:62:00:0a:2b:cc:07:53:fe:5c:43:58:26:b2:41:c0:0f:
b6:35:4f:f5:3d:4a:a1:5b:af:f2:ce:29:d0:80:2c:5d:c2:5e:
62:cf:78:04:fc:10:51:24:9e:e7:fd:44:eb:87:b3:3b:f1:8b:
02:51:95:a1:d2:32:95:72:3c:53:8c:00:c3:95:ce:bb:fe:25:
0b:c1:a9:24:d8:f9:64:5d:f7:92:4c:d9:e7:26:f9:f0:14:4f:
ba:ba:4b:54:be:84:d1:03:3e:a5:f1:46:9c:a6:c6:f6:bf:12:
6d:8a:1f:5e:35:9e:79:4f:86:3d:f6:69:78:bd:56:2a:1c:dd:
91:94:55:f1:36:79:bb:d6:ff:1b:a1:d5:03:8c:8b:e0:ea:4f:
9f:ba:17:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:44:46 2026 by rpki-client