
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/2F05099CEC5611F094F5171C4A6F56BC.roa
File: 2F05099CEC5611F094F5171C4A6F56BC.roa (raw, json)
Hash identifier: l85O/s7ZtbxPlNiSUjDR70E+7B5UP7FdsX9CLjUMuOc=
Subject key identifier: 67:28:3C:F7:36:96:3E:9F:46:8E:24:16:72:C3:A1:23:F4:35:38:0B
Certificate issuer: /CN=A91FD292/serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53
Certificate serial: 0A99
Authority key identifier: F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/2F05099CEC5611F094F5171C4A6F56BC.roa
Signing time: Thu 08 Jan 2026 05:52:15 +0000
ROA not before: Thu 08 Jan 2026 05:52:15 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 140325
IP address blocks: 103.149.206.0/24 maxlen: 24
103.149.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl
rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2713 (0xa99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD292, serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53
Validity
Not Before: Jan 8 05:52:15 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=695f460f-5ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:84:0b:b2:cd:4b:71:02:96:0e:da:c8:ae:26:
57:ea:9d:07:b7:01:d2:85:14:27:9e:71:d7:02:18:
4c:8d:84:e5:0a:9b:b5:de:2d:43:24:b5:83:26:79:
65:a1:26:f5:e3:ca:79:30:a5:09:5c:f5:da:67:25:
27:a2:b2:2f:e7:9e:8a:d3:2a:ca:20:9f:ff:57:3f:
24:e3:19:ec:fa:d2:dd:32:26:23:45:87:27:33:d8:
c3:7c:96:78:42:ed:0c:44:b2:74:14:ab:52:ae:1b:
95:37:a4:ac:a0:e6:48:e7:37:2b:3e:f8:08:d9:16:
52:a8:10:bd:d6:6b:00:8f:1f:92:69:66:93:c5:db:
fe:79:b0:3e:b7:97:eb:5b:6d:94:17:14:17:68:5a:
9f:90:da:2f:ef:92:56:03:51:15:d3:03:3e:fc:24:
09:a2:b0:6b:3f:55:f1:2e:9c:f7:30:92:b4:db:47:
f0:74:79:17:38:ac:77:c7:2d:15:90:de:96:58:c9:
b7:c8:05:c1:ca:bf:be:33:18:5f:47:21:74:05:35:
df:a0:e7:63:9f:f9:80:77:63:65:2a:74:b7:3b:35:
b8:20:d6:34:6b:49:3a:ef:aa:de:53:cb:75:bd:51:
13:c3:96:ee:83:39:71:d9:40:74:50:d5:c7:85:1f:
9c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:28:3C:F7:36:96:3E:9F:46:8E:24:16:72:C3:A1:23:F4:35:38:0B
X509v3 Authority Key Identifier:
keyid:F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/2F05099CEC5611F094F5171C4A6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.149.206.0/23
Signature Algorithm: sha256WithRSAEncryption
55:c0:1d:e8:76:df:96:3b:6c:dd:3e:66:b9:e2:4a:eb:72:05:
fd:8c:1d:12:ee:41:37:00:c9:16:37:93:e2:f4:7d:83:0b:a3:
0c:6b:e3:ae:8e:d9:65:1f:7e:87:22:e6:22:8f:cb:47:b6:a1:
9e:85:7c:7a:22:79:b0:0a:3a:a9:20:c0:12:c7:f4:46:20:f6:
0d:e9:be:62:1f:98:26:51:35:24:41:d2:20:e4:ac:b7:a8:6e:
af:4a:55:50:8f:b3:f8:af:c3:32:7d:46:02:eb:56:6a:a3:7a:
06:9d:41:c7:1f:9c:61:72:4c:c0:49:e3:3b:d4:11:43:b5:41:
31:bf:ba:69:d8:2d:53:bb:93:03:1e:00:2f:05:4c:c1:dc:62:
8a:2e:80:c4:53:75:e5:a9:99:21:23:43:33:e9:d8:39:87:01:
7e:73:8f:97:5c:62:aa:26:9b:12:8d:44:cf:39:c4:e0:30:49:
56:0f:8b:0b:5d:e5:4f:7b:97:be:8c:b9:b6:01:29:61:f5:22:
dc:54:68:fb:58:57:8e:ae:ac:3b:fb:b0:46:5e:a2:99:a0:23:
6e:48:b4:87:7b:40:72:d5:6b:c5:8b:9d:75:f9:b9:1d:c2:25:
3e:cc:5b:5b:b8:50:1c:74:04:5d:73:e8:12:6a:9b:f8:f1:20:
a8:4a:e9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:26:11 2026 by rpki-client