
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/996419B6627D11F1B70F09038E47A888.roa
File: 996419B6627D11F1B70F09038E47A888.roa (raw, json)
Hash identifier: 6fwP2rsJ1aYLnM+RF5A41SVQIk30a/xQCKjUg+QU10c=
Subject key identifier: 43:B8:5C:8B:C7:BE:E4:2A:41:48:78:4B:75:D9:36:A8:D6:A2:95:87
Certificate issuer: /CN=A91E6B73/serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877
Certificate serial: 04E5
Authority key identifier: DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/996419B6627D11F1B70F09038E47A888.roa
Signing time: Sun 07 Jun 2026 14:35:23 +0000
ROA not before: Sun 07 Jun 2026 14:35:23 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 149421
IP address blocks: 103.179.24.0/23 maxlen: 24
2001:df0:4540::/48 maxlen: 48
2402:35a0::/32 maxlen: 32
2402:35a0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl
rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1253 (0x4e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6B73, serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877
Validity
Not Before: Jun 7 14:35:23 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6a2581ab-9722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:60:31:bd:20:42:b4:2b:00:5d:cc:2f:e6:76:
18:9b:bf:6b:7f:39:67:60:c2:ec:0b:3e:1a:89:a6:
63:4c:90:67:c7:2e:2d:5a:4b:a8:05:1c:dc:99:1c:
80:f9:aa:1d:ea:67:98:98:4c:13:db:e0:c1:33:3c:
d9:3c:e3:ed:f7:d8:39:67:5b:0e:b3:43:09:fa:ca:
84:2e:3a:6e:e0:55:07:5d:b8:b5:b3:c2:a5:a2:6a:
b6:a5:7c:41:56:bc:27:4e:09:8e:17:6a:5b:88:6b:
e8:40:8f:e6:83:89:49:df:0f:e4:87:b9:dd:a3:bf:
8d:e2:45:30:3a:ae:c6:0c:4d:1d:f3:3b:5e:e0:82:
44:0d:bb:60:2c:82:7a:96:02:f5:b3:db:31:af:ea:
38:33:f8:8b:30:eb:77:39:43:a2:c4:81:1f:f6:50:
72:ad:60:38:85:0c:5d:3d:18:ce:bb:0a:30:57:a5:
90:da:a4:d0:bd:de:ea:9e:af:84:ff:b1:45:e5:10:
b2:13:5c:25:84:fe:74:b1:94:6b:49:33:7c:bc:17:
a9:b6:60:dc:45:09:b8:c7:94:f3:3e:39:23:69:90:
d4:36:0a:cb:4b:04:d8:57:93:5e:66:52:79:e4:d4:
1f:f5:6c:0a:08:b5:6b:97:f4:97:19:d2:5d:86:3b:
40:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B8:5C:8B:C7:BE:E4:2A:41:48:78:4B:75:D9:36:A8:D6:A2:95:87
X509v3 Authority Key Identifier:
keyid:DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/996419B6627D11F1B70F09038E47A888.roa
sbgp-ipAddrBlock: critical
IPv4:
103.179.24.0/23
IPv6:
2001:df0:4540::/48
2402:35a0::/32
Signature Algorithm: sha256WithRSAEncryption
07:e2:87:72:a0:30:1a:4b:ca:66:72:bd:e3:be:0a:37:f3:48:
51:fd:1f:3d:80:55:62:26:90:6e:36:b4:c4:cb:63:0b:9b:ff:
d2:65:b5:d8:a4:1c:8b:e0:98:68:ee:15:e4:a7:92:12:ff:c8:
5c:ac:e9:b9:3a:7e:bc:81:dd:2e:a6:cf:04:e9:d5:6b:8d:55:
60:17:01:c2:a5:81:1d:5a:20:51:b6:42:cc:72:f3:fd:d8:91:
9e:d9:40:41:fe:59:70:89:ca:ba:bc:b8:78:66:88:cb:10:7b:
a2:44:ec:3f:0c:c6:aa:3c:9f:55:dc:58:7a:c1:ce:d5:08:ab:
a5:2d:55:37:fc:62:37:4e:48:aa:ec:7a:36:e9:cc:93:36:5f:
74:15:79:1e:81:fc:01:ca:71:ce:87:d2:e6:29:b3:1f:7f:50:
50:30:d2:9a:d2:ec:4f:62:84:d7:aa:3f:fd:1b:e4:ec:f9:94:
33:bc:0d:b9:f6:a4:23:f6:08:c7:94:4c:2a:09:63:e2:b3:ed:
4d:40:7b:a5:42:98:e9:b6:a9:97:1e:e5:b4:7f:73:15:ac:35:
a7:52:5b:4e:60:ac:ca:86:ef:76:ac:41:d9:04:cc:ce:76:cf:
1b:38:0f:ab:07:17:dc:b1:42:9c:ba:c3:75:d0:6d:78:4d:2c:
74:a5:6f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:48:32 2026 by rpki-client