
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/64237DC06C3611EBB6BA1A24C4F9AE02.roa
File: 64237DC06C3611EBB6BA1A24C4F9AE02.roa (raw, json)
Hash identifier: s8cYdBa5z6BkvnHETYCPkgU2kRrWkBAHa3ntAoxoQxA=
Subject key identifier: 4C:9C:FE:8D:19:6D:8B:66:C7:25:66:77:DA:2C:9A:99:90:D0:21:BE
Certificate issuer: /CN=A91F1605/serialNumber=F04690BB03E0D3962B4808E4D06CB26A3490E516
Certificate serial: 072D
Authority key identifier: F0:46:90:BB:03:E0:D3:96:2B:48:08:E4:D0:6C:B2:6A:34:90:E5:16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/64237DC06C3611EBB6BA1A24C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:41:51 +0000
ROA not before: Tue 04 Mar 2025 23:41:35 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 135140
IP address blocks: 103.210.220.0/24 maxlen: 24
103.211.198.0/24 maxlen: 24
103.211.236.0/24 maxlen: 24
146.196.84.0/24 maxlen: 24
146.196.85.0/24 maxlen: 24
146.196.86.0/24 maxlen: 24
146.196.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.crl
rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1837 (0x72d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1605, serialNumber=F04690BB03E0D3962B4808E4D06CB26A3490E516
Validity
Not Before: Mar 4 23:41:35 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3fbcf-4890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c5:46:7f:f6:49:03:85:8f:4b:b8:77:c4:11:
da:f0:f3:a9:29:be:d2:2f:f6:2e:06:24:12:9c:da:
58:2d:15:59:22:36:b7:5b:66:f9:a1:0d:26:c2:79:
82:76:7f:42:62:75:54:52:21:7a:c8:96:4f:eb:f5:
24:39:e4:1c:41:05:4e:33:d0:37:64:23:1f:a5:58:
0c:98:e9:5f:bb:bf:34:aa:4e:78:0f:dc:96:5f:68:
fb:66:99:6c:85:fe:d6:10:90:e7:2f:d1:61:6c:1d:
21:e1:0d:f3:f6:6d:55:e6:30:86:5f:bd:7a:28:b4:
63:9e:34:9c:fc:e2:97:57:be:fb:9d:cd:1c:52:7b:
2d:97:f6:cc:1a:40:69:d8:cc:0a:ec:3f:73:c1:8e:
26:59:1a:ca:46:c3:89:a1:72:d6:7e:28:dd:dc:ef:
70:62:b5:fb:63:1e:19:16:65:7e:1d:c0:b4:e8:e7:
96:fa:4c:96:51:65:8a:3f:e1:79:d5:90:c8:79:20:
9d:29:6a:c5:69:c1:fa:41:6b:35:c1:f8:14:e2:02:
b7:fb:c1:64:d7:59:3e:5e:20:c8:c0:99:4b:0e:89:
80:f2:ee:63:e9:b9:88:71:d5:a5:19:b7:61:47:11:
c2:21:86:69:45:f8:23:26:3e:df:f7:9c:1f:7d:f5:
ed:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9C:FE:8D:19:6D:8B:66:C7:25:66:77:DA:2C:9A:99:90:D0:21:BE
X509v3 Authority Key Identifier:
keyid:F0:46:90:BB:03:E0:D3:96:2B:48:08:E4:D0:6C:B2:6A:34:90:E5:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/64237DC06C3611EBB6BA1A24C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.210.220.0/24
103.211.198.0/24
103.211.236.0/24
146.196.84.0/22
Signature Algorithm: sha256WithRSAEncryption
13:f4:79:40:d3:a5:a2:8d:18:41:b3:8b:b7:34:c2:2f:78:79:
e6:3d:2a:f6:81:bc:23:41:2e:0a:b0:16:e9:7e:10:34:a1:28:
f9:ee:fa:69:6e:78:16:ec:b6:64:37:4c:a9:15:25:0e:6c:5f:
d4:57:59:3f:57:3b:25:06:de:bd:57:03:34:5a:9c:03:eb:3e:
93:e7:a8:dd:64:96:e8:8b:71:75:18:8f:01:a5:d4:40:be:dd:
63:73:3c:73:1c:b9:23:19:fc:3f:b5:8d:19:09:00:b1:f7:41:
1a:ee:1a:c5:f7:02:52:de:cb:00:b5:55:2b:7c:0e:df:4f:38:
5f:01:78:ff:ef:43:0c:2b:ed:93:10:af:bd:2d:7c:95:68:24:
76:c7:79:da:ba:75:92:3e:f1:c2:5d:3b:68:8a:0c:7e:38:28:
59:4a:1b:94:78:98:48:44:3c:26:98:d5:92:bc:d8:1b:f2:bd:
68:87:30:dd:51:62:2e:8f:1b:32:d2:ba:35:b4:eb:ad:c7:c3:
3e:3c:49:b5:ee:c9:76:96:61:34:cc:9d:3a:c3:c7:da:00:7f:
fa:98:55:ca:63:a5:08:79:67:1e:7c:9f:be:d4:6f:38:b6:78:
3f:41:0c:3c:a6:e0:8f:dd:ad:36:25:f2:dd:c8:5b:8f:3c:85:
59:8f:19:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:43:27 2026 by rpki-client