
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/041803705DEE11F0B3FA764DC4F9AE02.roa
File: 041803705DEE11F0B3FA764DC4F9AE02.roa (raw, json)
Hash identifier: xuTjK+fWz73yqU/m4ZT9uQGoIAPUGqWFOmnzfiePcSo=
Subject key identifier: 20:71:2F:6E:E9:BE:D0:C2:FB:78:FF:B2:25:A1:9B:50:F6:BD:EA:26
Certificate issuer: /CN=A91E6A01/serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624
Certificate serial: 98
Authority key identifier: A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/041803705DEE11F0B3FA764DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:25:03 +0000
ROA not before: Tue 03 Feb 2026 07:25:49 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 14618
IP address blocks: 203.17.165.0/24 maxlen: 24
203.176.120.0/24 maxlen: 24
203.176.121.0/24 maxlen: 24
2001:df0:219::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl
rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6A01, serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624
Validity
Not Before: Feb 3 07:25:49 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a45a4f-4763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:34:1a:fa:a2:3f:3e:ee:3b:f1:06:5f:a5:0e:
55:86:ad:9d:a6:e1:64:c1:1f:34:04:a4:bb:0f:bd:
f0:0a:16:f4:bb:c3:d0:c9:d0:93:ad:bf:37:e3:56:
0f:d5:52:f9:58:a4:5e:cf:a3:87:af:53:21:2c:24:
7c:8d:86:ad:fd:bb:34:85:0d:cb:ea:bc:bf:f7:48:
a3:9c:82:76:fa:28:33:e2:0a:67:72:47:2e:21:4d:
29:0b:e7:d3:5e:b1:30:3d:54:96:e8:25:8c:71:e4:
2e:5a:f8:15:96:a0:22:8b:60:d0:99:3b:58:c9:f2:
70:b2:af:11:66:55:d4:2f:50:63:fb:71:1c:87:5c:
99:14:43:f1:d7:b4:df:2a:2a:3e:a3:9d:25:eb:09:
4d:7f:b6:a2:38:ca:50:f9:f2:ec:ba:91:73:a4:54:
da:f2:26:e3:09:02:c3:12:0a:87:2d:f0:41:f8:a6:
ab:26:e5:28:7c:61:9d:c9:45:cc:9a:00:fb:8e:34:
a7:82:0d:8b:59:31:db:12:ea:01:50:83:c3:b6:76:
73:0e:38:32:45:9a:b3:bb:0f:5f:a1:f8:fa:c3:89:
f2:81:e4:7a:9a:4e:3e:4f:9b:b8:2e:90:5e:2b:86:
ba:a1:ea:1b:4f:d0:8b:86:1a:b0:52:20:4f:0e:46:
35:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:71:2F:6E:E9:BE:D0:C2:FB:78:FF:B2:25:A1:9B:50:F6:BD:EA:26
X509v3 Authority Key Identifier:
keyid:A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/041803705DEE11F0B3FA764DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.17.165.0/24
203.176.120.0/23
IPv6:
2001:df0:219::/48
Signature Algorithm: sha256WithRSAEncryption
4e:3b:df:4f:62:34:2e:61:da:fc:eb:e8:b6:3e:4c:ec:7c:77:
1d:40:31:83:25:15:70:26:8d:c8:42:10:d9:6c:4f:5a:a4:a3:
da:0f:c6:e6:fe:d9:c9:3b:0e:08:5a:33:d8:d0:6c:fb:70:da:
06:76:aa:cd:90:ee:d2:12:60:97:68:35:62:39:1f:77:ef:65:
6b:a4:89:a1:0b:ef:6c:1a:3d:b7:24:ed:3f:0f:af:20:86:47:
d0:e9:7a:33:6e:ff:72:b9:02:7c:6e:be:6e:3b:74:69:70:7e:
e8:ba:13:40:fc:64:41:b3:cf:1f:5e:aa:55:47:be:6c:3e:34:
31:99:cc:ec:a5:86:54:d4:d6:b0:e0:47:90:ac:df:6b:15:85:
06:99:e9:5f:b2:d1:71:bd:35:21:fb:9c:4d:ed:bb:76:70:4c:
29:8a:5a:f8:a2:e0:f8:dc:22:85:4d:11:55:cf:1f:6e:03:0d:
82:93:d4:c0:21:28:34:e1:35:dd:f5:fb:6d:22:49:28:7b:06:
34:1c:89:c6:59:43:c4:a0:48:2b:f3:58:ed:bd:5d:45:3f:6d:
54:d9:63:a1:cf:eb:f1:41:cc:ce:47:97:c8:36:b8:39:eb:21:
42:dd:7a:6a:0e:34:73:03:49:e1:8e:7f:ed:e4:5e:94:a1:b0:
50:9e:dc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:24:54 2026 by rpki-client