
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/9985244A2D1411EEAA9EA45DC4F9AE02.roa
File: 9985244A2D1411EEAA9EA45DC4F9AE02.roa (raw, json)
Hash identifier: oPyW8qdakHUnLA7LTQ8ytbz4nmho25dFmY+7i6Z4Noo=
Subject key identifier: 52:C1:E3:81:F4:AD:55:19:4D:45:FE:B2:FD:F1:8F:4F:9E:DC:E3:40
Certificate issuer: /CN=A91E8AF5/serialNumber=E35F7419D572A86F76D2EBF7829AB6D9D0340905
Certificate serial: 021E
Authority key identifier: E3:5F:74:19:D5:72:A8:6F:76:D2:EB:F7:82:9A:B6:D9:D0:34:09:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/9985244A2D1411EEAA9EA45DC4F9AE02.roa
Signing time: Fri 05 Jun 2026 03:34:39 +0000
ROA not before: Fri 05 Jun 2026 03:34:38 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 151342
IP address blocks: 103.219.146.0/24 maxlen: 24
2001:df2:2840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.crl
rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 542 (0x21e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8AF5, serialNumber=E35F7419D572A86F76D2EBF7829AB6D9D0340905
Validity
Not Before: Jun 5 03:34:38 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a2243ce-2b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:95:c8:09:95:27:98:db:6a:b0:0e:47:f4:02:
b9:76:ef:cb:42:82:37:f2:5c:e4:ba:0c:09:84:18:
25:1c:73:9a:f0:08:f8:60:f1:8b:e4:74:92:ff:f0:
df:97:68:02:93:20:b2:95:63:22:b0:8c:09:6d:2e:
9e:0d:c9:72:74:d7:04:74:90:89:f1:a6:a1:8c:e4:
a0:b4:34:b8:0a:5a:83:27:39:ec:f7:02:c5:a4:9b:
48:d8:ba:61:7d:18:59:5e:f8:25:8f:ad:ef:c4:3f:
6b:d1:3a:74:9d:f6:51:15:0e:77:8c:ee:3f:02:c0:
31:bb:50:f1:54:ad:f7:63:70:a9:de:2c:33:5d:2c:
1b:be:4d:f7:a7:7f:db:de:bd:f0:a3:81:44:de:aa:
d5:92:60:f4:f2:f4:54:64:d1:db:f1:96:c0:a4:c5:
86:3a:9a:84:5e:04:fa:51:f7:a8:e8:9c:0d:cf:40:
a5:88:7d:8a:d3:75:c1:55:50:46:f9:f7:c7:d2:7f:
2c:8c:c2:93:c9:13:6a:f8:f2:c5:70:64:83:3a:e7:
d9:34:cf:9d:45:31:72:e2:b8:12:7e:5c:bc:a6:3d:
89:ef:2d:dd:7f:f2:15:26:2f:2e:5a:69:e4:f8:5d:
94:2b:b2:1b:bd:03:cc:d8:16:a8:a3:57:82:7f:3d:
6f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C1:E3:81:F4:AD:55:19:4D:45:FE:B2:FD:F1:8F:4F:9E:DC:E3:40
X509v3 Authority Key Identifier:
keyid:E3:5F:74:19:D5:72:A8:6F:76:D2:EB:F7:82:9A:B6:D9:D0:34:09:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/9985244A2D1411EEAA9EA45DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.219.146.0/24
IPv6:
2001:df2:2840::/48
Signature Algorithm: sha256WithRSAEncryption
b0:58:c9:28:43:8d:b0:65:8d:2c:f8:9c:b7:d0:e5:35:b9:88:
4d:b6:e8:34:5a:81:f8:f3:76:b7:b1:79:5a:c3:52:97:00:2e:
ab:8e:5c:3c:41:a1:4a:a4:25:3a:93:34:09:42:d5:2a:f3:61:
86:d2:91:46:43:92:5e:4e:4f:61:b7:bd:f9:ac:97:11:29:b6:
3f:04:82:df:ad:9c:6f:eb:35:93:2b:f3:ca:b5:4f:da:cb:23:
b6:29:44:27:99:b0:a1:d7:c6:9c:3e:e0:e2:21:c0:13:6d:20:
de:78:03:31:d2:3b:5e:65:d0:1a:eb:33:30:57:d4:9c:3e:15:
06:7c:27:9f:ed:86:27:41:63:d9:6b:fb:61:59:10:29:3e:1f:
81:e0:ba:0b:50:7f:2e:fa:30:a0:95:eb:99:3e:76:72:94:a1:
a9:73:76:bf:1c:d2:81:e6:c2:79:bb:0d:6b:4b:d4:2e:96:11:
62:1b:bd:8c:bc:5d:b4:35:06:53:c9:e9:03:97:2e:1d:f8:82:
50:a8:2d:28:1b:99:e1:6d:71:2f:3b:20:8e:86:af:92:d9:7a:
c7:7b:f5:ad:67:d1:46:7c:50:d4:a4:12:14:2e:b9:8e:70:65:
9b:58:b1:85:ec:31:1b:e0:7a:26:f4:da:bb:a6:f2:5c:bc:a8:
ae:11:70:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:33:01 2026 by rpki-client