
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/2FBEB0B0D5B011EC90A8A031C4F9AE02.roa
File: 2FBEB0B0D5B011EC90A8A031C4F9AE02.roa (raw, json)
Hash identifier: +CMTAtAhA5A3bcW+qweztRhJOEGADprPEZzn/dd78sw=
Subject key identifier: 87:91:5D:76:74:DE:E3:A5:4B:A1:CE:BE:E9:AD:D2:89:8B:C8:2A:9B
Certificate issuer: /CN=A91F2DDD/serialNumber=C924CDE41545974B6F57832E6C603BCC8966D9E0
Certificate serial: 03A4
Authority key identifier: C9:24:CD:E4:15:45:97:4B:6F:57:83:2E:6C:60:3B:CC:89:66:D9:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySTN5BVFl0tvV4MubGA7zIlm2eA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/2FBEB0B0D5B011EC90A8A031C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:04:06 +0000
ROA not before: Fri 16 Jan 2026 18:14:59 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 135042
IP address blocks: 103.207.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/ySTN5BVFl0tvV4MubGA7zIlm2eA.crl
rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/ySTN5BVFl0tvV4MubGA7zIlm2eA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySTN5BVFl0tvV4MubGA7zIlm2eA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:44:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 932 (0x3a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2DDD, serialNumber=C924CDE41545974B6F57832E6C603BCC8966D9E0
Validity
Not Before: Jan 16 18:14:59 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a48da6-f665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d3:a7:6c:4b:3f:cd:a3:3b:60:c8:d5:0d:32:
5c:ca:37:02:02:7e:07:b9:22:a1:70:aa:70:ab:41:
d5:25:bc:1a:f8:66:88:ac:a7:27:8c:3e:07:dd:0f:
af:4e:ed:59:13:12:7f:ba:18:23:3c:de:bd:50:ec:
05:ef:86:ed:4c:97:5e:4d:38:a2:d8:18:ce:4e:e9:
c8:db:c2:cb:77:61:cc:20:b0:bc:d0:fd:9c:28:0b:
bc:e2:80:6e:82:a7:70:23:5a:93:2e:19:c4:a9:63:
7b:41:14:23:f4:18:1d:27:ac:46:83:84:95:fc:fd:
7b:6d:4d:c9:31:8b:52:0f:c1:bd:68:3b:72:e7:2d:
db:75:cd:20:7f:cc:9d:ea:b1:6a:b5:13:fb:36:35:
fb:f6:4c:3e:d1:03:5b:d8:4d:c7:1f:30:15:1e:14:
04:61:d8:a9:31:fa:ba:41:2e:32:86:c2:75:a4:50:
48:33:00:c4:5a:4d:36:09:0c:67:b0:06:6f:d1:52:
62:ed:b6:d6:c0:db:00:7c:03:5b:cb:b7:a1:5e:d8:
74:82:4a:d7:43:36:e5:f4:02:a8:b3:1a:21:62:ab:
2f:5f:4b:11:39:31:02:cc:5e:42:a7:af:4e:26:47:
43:d9:2c:79:03:87:f6:ba:dc:cf:e2:5e:4a:12:64:
3e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:91:5D:76:74:DE:E3:A5:4B:A1:CE:BE:E9:AD:D2:89:8B:C8:2A:9B
X509v3 Authority Key Identifier:
keyid:C9:24:CD:E4:15:45:97:4B:6F:57:83:2E:6C:60:3B:CC:89:66:D9:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/ySTN5BVFl0tvV4MubGA7zIlm2eA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySTN5BVFl0tvV4MubGA7zIlm2eA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/2FBEB0B0D5B011EC90A8A031C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.207.19.0/24
Signature Algorithm: sha256WithRSAEncryption
70:09:85:2a:9a:4c:8e:4a:9f:d7:0b:b2:91:82:bf:b5:6a:d8:
e3:3e:af:2d:c9:41:b7:b1:bf:c0:b4:3d:d5:b6:8e:be:50:46:
ce:a4:6a:1a:8c:9b:2b:bc:48:60:5a:90:cf:7b:a5:13:94:bc:
cd:fe:2d:7d:98:6c:3d:9b:a6:c5:ec:71:7f:4b:14:4e:b3:6a:
e4:86:45:64:9a:46:3d:2f:e6:9e:b1:35:06:4a:1d:3d:92:f2:
ca:e1:7f:7f:b2:bf:d0:06:ef:c6:dc:29:37:15:df:6e:0f:60:
19:4f:72:86:c8:c8:9c:43:b9:f1:68:6d:af:e5:6d:6d:00:56:
22:2b:76:f0:ac:72:f0:ed:5f:b9:76:45:18:9d:17:71:46:f4:
5d:2f:4e:0b:55:bb:fa:8b:47:62:27:55:b4:84:94:30:d1:ad:
7c:9a:71:ef:99:ff:11:36:a8:cf:47:8c:8c:30:8c:69:dd:c1:
e0:d8:cf:6a:01:a0:ee:03:a2:ba:80:34:e6:ba:17:2d:55:e5:
68:6f:b7:17:45:40:74:3e:ef:b1:2b:c3:2a:7d:aa:06:e7:b4:
6d:d5:9b:bb:b4:04:90:94:fb:3b:5c:a0:47:8b:6e:bb:77:2b:
80:99:04:f0:3c:6c:30:aa:f7:0a:4b:53:42:5d:95:8e:31:01:
7d:68:ab:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:31 2026 by rpki-client