
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/AAF361C0D18B11EF810E8B66C4F9AE02.roa
File: AAF361C0D18B11EF810E8B66C4F9AE02.roa (raw, json)
Hash identifier: eQlUI/4aYKT3H2zEnXlm2vbZ+Gb0nfhayOUpvFkdErE=
Subject key identifier: F7:80:98:9D:E6:87:D6:7C:45:FF:DB:FA:56:82:95:79:30:43:65:51
Certificate issuer: /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Certificate serial: 02CE
Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/AAF361C0D18B11EF810E8B66C4F9AE02.roa
Signing time: Tue 03 Feb 2026 01:21:21 +0000
ROA not before: Tue 03 Feb 2026 01:21:21 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 206888
IP address blocks: 103.205.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 718 (0x2ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE7DF, serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Validity
Not Before: Feb 3 01:21:21 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69814d91-f447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:64:a9:bf:7c:10:d8:b5:01:78:d0:e9:c0:53:
1d:24:2b:14:2d:7c:04:85:98:dd:01:78:de:35:f8:
5a:2b:ed:85:a1:ec:08:8b:fb:6e:fd:85:a7:b2:b5:
58:39:f8:f8:d8:cf:a7:dd:a4:e0:19:07:5e:8b:c0:
b4:d7:c1:8c:ed:fa:40:fc:51:e3:79:1d:04:cf:7e:
18:47:3b:ba:35:9d:b7:a9:1a:06:42:52:58:8a:13:
d4:fb:53:e2:ef:14:29:cb:45:3b:c6:2e:21:cc:04:
c1:43:8a:d0:8d:59:32:ca:f2:8e:c7:a8:2b:81:f5:
d4:f0:c6:22:ec:45:a3:8b:b4:7f:a2:d9:43:bb:c1:
06:4b:f0:43:7e:32:25:5d:9c:b9:6f:1f:54:0a:a1:
21:c1:c8:5e:a1:6a:23:1b:fe:be:7b:be:89:e1:4d:
4f:1c:de:23:21:72:14:db:e5:a4:56:6a:67:2e:73:
02:e6:f3:95:eb:98:7c:ed:79:d4:f0:36:82:30:93:
6e:ff:7a:1b:bf:ad:94:53:97:c9:5d:15:6a:ef:3a:
85:dd:43:7a:f7:6b:8f:62:e3:07:46:94:44:f1:c8:
d4:f4:aa:1c:fd:15:4f:d4:e1:fa:3a:b5:6d:f1:03:
62:81:d9:ec:2f:4b:78:af:3f:c6:9f:44:a4:51:8f:
77:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:80:98:9D:E6:87:D6:7C:45:FF:DB:FA:56:82:95:79:30:43:65:51
X509v3 Authority Key Identifier:
keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/AAF361C0D18B11EF810E8B66C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.205.240.0/22
Signature Algorithm: sha256WithRSAEncryption
24:d1:f6:b5:63:76:f9:8a:fa:bc:57:d2:1f:06:a6:16:f8:ad:
51:5f:81:c7:f4:96:09:97:2b:e3:8a:06:c8:ef:ff:12:1a:9f:
d7:65:30:f3:65:e6:a4:c0:71:43:72:ac:9a:e2:de:8f:ee:f2:
6b:08:42:f9:7f:ff:c4:05:5d:e1:bd:49:97:11:35:cc:0c:a4:
1b:41:5b:42:f1:96:bf:bb:5b:32:d8:07:73:fd:af:0f:2c:66:
e1:7c:20:3a:db:60:39:ff:db:96:19:c1:f8:08:ce:a7:00:ff:
f6:d1:2d:ab:b9:b7:36:61:51:a5:5d:ff:a8:a2:5d:26:93:3b:
27:f2:e9:5c:eb:83:85:9c:d7:fe:a5:d6:3c:d6:1c:c5:df:ce:
9f:72:78:cb:86:35:3a:36:97:6f:f7:4d:6a:ac:2e:c1:df:75:
18:52:53:65:f1:ef:07:f4:f2:b9:f5:44:96:62:03:01:f3:a6:
35:f7:00:23:5f:4b:46:36:3d:4b:68:97:3b:5d:aa:8a:74:b8:
db:66:07:cc:a0:c6:f0:c1:ed:63:79:8d:6a:50:d4:e7:1d:2f:
98:34:f6:50:04:0e:fb:f8:93:36:59:6b:ab:ba:48:3b:b9:a1:
30:ed:97:50:26:3d:8d:82:c9:de:f0:a5:09:ac:db:ed:fc:93:
31:93:e2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:38 2026 by rpki-client