
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/06A899FECCF311EC86719729C4F9AE02.roa
File: 06A899FECCF311EC86719729C4F9AE02.roa (raw, json)
Hash identifier: p+J79GzKxldX7yAyLksNWjFs41wwGXOLgTyuIVmZY2U=
Subject key identifier: FE:E3:0F:8D:99:0D:FE:71:7E:7D:B3:4C:62:09:74:58:DC:2C:F5:28
Certificate issuer: /CN=A91ED6B5/serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C
Certificate serial: 04C3
Authority key identifier: 41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/06A899FECCF311EC86719729C4F9AE02.roa
Signing time: Wed 28 Jan 2026 23:20:24 +0000
ROA not before: Wed 28 Jan 2026 23:20:24 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 4764
IP address blocks: 203.24.73.0/24 maxlen: 24
203.32.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl
rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:28:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1219 (0x4c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED6B5, serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C
Validity
Not Before: Jan 28 23:20:24 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=697a99b8-795a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:38:61:e8:67:3b:f5:24:ba:4c:e1:1e:dd:b4:
a4:b8:f6:7b:e9:63:6c:b9:71:21:73:d0:36:05:7b:
81:21:55:6e:03:bf:80:4e:7c:22:87:a9:f2:6e:39:
4d:60:47:d7:ca:c2:e6:69:85:a1:05:0e:7e:d5:c0:
e5:a2:97:4b:dd:5b:ee:f7:7b:66:ca:97:07:ae:dd:
06:f0:f5:50:6f:1b:73:1f:ef:5f:1f:4f:16:28:23:
07:99:22:f2:00:71:a8:d3:f5:e2:0b:8f:3b:70:55:
70:d7:1d:fc:b2:c4:4b:7a:91:52:9b:1c:04:f6:ed:
9c:41:5f:36:3f:d8:1c:67:3f:a3:e3:37:44:55:a9:
af:fb:38:dc:5d:73:40:b0:b9:bb:33:0f:fd:44:88:
32:8b:04:7b:05:f6:51:87:59:47:a3:2e:09:6c:a7:
13:c1:1e:e6:7c:2e:71:99:fa:ee:21:8d:4a:63:69:
c6:b7:0f:7f:62:1d:ac:74:ce:48:b5:bf:82:6f:e6:
fc:e8:54:16:fd:3d:4a:f1:f3:7c:7c:81:c4:52:31:
08:36:55:6d:93:48:44:1b:28:cd:d0:80:ef:7c:c9:
d2:e9:98:70:18:e1:c5:0b:7e:95:fe:75:d3:fb:6f:
bc:6e:46:4e:c0:c3:e9:c5:a7:99:96:6b:06:3e:c7:
f3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E3:0F:8D:99:0D:FE:71:7E:7D:B3:4C:62:09:74:58:DC:2C:F5:28
X509v3 Authority Key Identifier:
keyid:41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/06A899FECCF311EC86719729C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.24.73.0/24
203.32.71.0/24
Signature Algorithm: sha256WithRSAEncryption
45:3d:45:26:fd:7b:6f:cf:29:af:6c:bb:68:44:d7:f2:d9:e8:
9a:c6:77:d3:d6:7c:db:10:8d:aa:4d:fa:65:13:91:96:ae:f2:
1f:56:d9:a5:b9:26:c4:8c:05:ae:d0:14:09:ec:02:49:bb:9a:
71:43:57:10:b7:0a:5f:80:b6:74:79:e8:dd:ac:f4:bd:96:1f:
e2:df:64:93:a1:eb:b8:af:f6:83:eb:26:6f:0b:e0:59:22:ad:
ae:32:ad:02:4b:45:0f:b6:2d:37:f9:e2:e1:3c:65:73:43:31:
41:68:26:f1:aa:9c:65:ac:55:ba:dc:f4:0a:08:7e:bf:18:f6:
1b:2c:a0:b5:2d:43:36:e3:ef:31:b4:a0:e4:1e:41:d0:ed:73:
6c:b9:22:ca:07:ab:09:18:ec:26:7d:6f:b7:52:d5:9d:71:ed:
52:b7:19:70:65:f1:2a:95:5f:9d:06:61:f3:34:80:50:55:08:
6a:91:70:d0:0b:6e:e4:a5:2a:2e:7a:d6:9a:95:cc:7f:35:a5:
73:78:c4:95:02:a0:c8:4f:6c:fe:e0:a8:e1:8d:c7:ef:f4:75:
aa:45:42:83:11:65:19:85:a7:79:66:ee:6d:7e:0e:96:e6:08:
0a:af:de:ad:5d:ff:ee:66:5d:72:5c:cf:42:10:5d:9f:11:3a:
6c:f0:0b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:43 2026 by rpki-client