
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/5AFFB9E48C2211EDAE44DD87C4F9AE02.roa
File: 5AFFB9E48C2211EDAE44DD87C4F9AE02.roa (raw, json)
Hash identifier: LlM0LhrGriltdbdMRUr59zSlH3wdqan00vlZP+qmiHU=
Subject key identifier: B7:2E:0E:F9:28:6F:AD:FE:1B:85:39:20:16:B9:65:C5:D4:4C:9F:CA
Certificate issuer: /CN=A91E8903/serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8
Certificate serial: 0265
Authority key identifier: 45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/5AFFB9E48C2211EDAE44DD87C4F9AE02.roa
Signing time: Sun 08 Feb 2026 05:58:32 +0000
ROA not before: Sun 08 Feb 2026 05:58:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 131471
IP address blocks: 103.221.246.0/24 maxlen: 24
103.221.247.0/24 maxlen: 24
2001:df0:7880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl
rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:59:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 613 (0x265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8903, serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8
Validity
Not Before: Feb 8 05:58:32 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69882608-95db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a7:e8:0d:d7:1a:9d:a6:59:f3:2d:d4:24:94:
f4:40:ed:db:13:35:a5:ad:60:5a:e2:dc:e1:a5:aa:
dc:3c:52:35:66:62:db:ef:fc:dd:78:d9:be:82:5d:
a6:ce:8b:f0:e3:ab:2b:53:60:fb:ec:08:9c:06:34:
c6:d5:42:33:b7:f6:cc:19:3d:a3:ff:ee:03:f6:a8:
bd:67:cc:7b:38:b1:8c:2a:cd:35:b5:f9:d1:b0:b2:
21:90:5a:df:1b:37:af:21:e3:4b:0a:99:71:63:a3:
55:c4:22:4b:4d:c7:dc:6e:02:98:53:ab:54:a7:0c:
f0:bd:ab:e5:61:61:b8:f9:ba:27:0f:92:8d:2b:3f:
c9:f2:7a:02:5b:7f:2c:f7:78:47:2f:f3:78:b5:14:
6f:09:ba:22:8f:7b:c7:07:91:2d:e5:1f:f7:4f:1e:
77:3d:1f:02:bc:db:ef:b5:09:13:55:f0:a4:4e:08:
27:d9:41:40:00:63:ac:0b:d7:05:1a:c7:b8:8b:d9:
f8:a5:71:a8:10:87:70:0e:ea:b0:34:cf:f6:4c:05:
3c:0e:49:ea:e5:d1:d0:3b:8b:75:20:fb:21:33:cf:
ae:ff:9e:fb:82:18:1e:ef:0d:60:c5:cd:e9:f8:72:
16:30:c0:0a:8a:06:7e:4e:f2:6c:53:b4:4d:11:bf:
64:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2E:0E:F9:28:6F:AD:FE:1B:85:39:20:16:B9:65:C5:D4:4C:9F:CA
X509v3 Authority Key Identifier:
keyid:45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/5AFFB9E48C2211EDAE44DD87C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.246.0/23
IPv6:
2001:df0:7880::/48
Signature Algorithm: sha256WithRSAEncryption
18:43:f1:b7:98:b9:f9:98:73:27:f2:9e:70:9b:34:a8:7d:9f:
0d:33:4d:d3:49:67:a5:ee:b1:f6:15:0c:d4:6d:73:e9:44:41:
73:1a:f7:a2:af:4c:80:f9:0d:54:fe:a7:ed:73:2d:0e:82:4e:
45:1d:ab:37:84:ab:d2:61:59:d9:6f:5c:e8:59:e0:80:49:2d:
52:ac:38:bd:9e:f7:97:f2:f3:91:72:6d:47:26:31:94:83:dd:
bd:2e:22:c9:46:8d:2d:56:8d:43:d3:93:cc:e2:c0:81:b3:1b:
dc:a1:db:e2:01:3e:be:83:7d:af:6a:01:26:66:df:bc:c2:62:
ef:07:41:a9:a9:d2:a0:3e:e8:8f:fd:75:f2:73:47:62:28:f5:
24:0e:85:ac:d8:b1:d3:ca:c6:4f:31:e7:00:dc:00:ad:7a:5c:
99:32:4c:64:a6:45:b1:27:0b:23:62:38:33:06:a8:10:e2:1a:
58:21:51:37:96:58:5b:17:d8:5f:92:5c:0a:c1:93:dc:49:f7:
12:a8:98:72:96:e4:72:55:b2:75:78:f9:10:87:b4:e6:c9:27:
72:22:8a:ef:e0:99:bb:ee:66:3a:62:e1:1f:94:5a:a9:f2:02:
d0:df:b7:69:e9:20:6e:18:1a:cb:a3:a5:90:dd:26:63:07:1f:
91:51:78:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:25:21 2026 by rpki-client