
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/E206DC460DEA11F0A924CF5CC4F9AE02.roa
File: E206DC460DEA11F0A924CF5CC4F9AE02.roa (raw, json)
Hash identifier: zlrAgbF9PZCaOlylJDdA6t0BFDUpb6RyPswUdUZ16EU=
Subject key identifier: A2:F9:51:23:C7:D4:35:9A:65:28:91:85:6C:E2:58:7B:07:D6:31:52
Certificate issuer: /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Certificate serial: 09EA
Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/E206DC460DEA11F0A924CF5CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:51:02 +0000
ROA not before: Mon 31 Mar 2025 04:51:23 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 140951
IP address blocks: 45.248.200.0/22 maxlen: 24
103.23.168.0/24 maxlen: 24
103.23.169.0/24 maxlen: 24
103.23.170.0/24 maxlen: 24
103.23.171.0/24 maxlen: 24
103.217.160.0/24 maxlen: 24
103.217.161.0/24 maxlen: 24
103.217.162.0/23 maxlen: 23
103.217.162.0/24 maxlen: 24
103.217.163.0/24 maxlen: 24
103.242.73.0/24 maxlen: 24
103.242.74.0/24 maxlen: 24
103.242.75.0/24 maxlen: 24
220.158.132.0/23 maxlen: 23
220.158.132.0/24 maxlen: 24
220.158.133.0/24 maxlen: 24
2401:47c0:1e00::/40 maxlen: 40
2401:47c0:1f00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl
rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Mar 2026 19:42:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2538 (0x9ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5486, serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Validity
Not Before: Mar 31 04:51:23 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a42826-0f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:8a:e1:12:5e:3c:6f:30:bc:1b:4a:bc:c0:
67:05:d0:03:14:da:d1:a1:00:a4:b9:aa:62:e7:91:
ec:23:24:d9:4b:d5:cc:27:46:e5:61:92:75:d1:2c:
ee:26:b5:65:45:c4:7e:ed:32:33:1c:20:48:bd:b7:
97:12:f2:15:c6:9b:14:49:b2:be:b5:72:03:b3:32:
52:50:ba:a8:15:ef:54:bf:d5:03:04:d9:03:10:3c:
d1:4e:61:db:63:16:3e:b7:0b:4e:d1:14:5e:a4:0f:
18:e9:22:52:9d:f3:2f:2b:c1:d7:2b:cb:94:43:0b:
d3:44:f9:38:64:cd:40:4f:c1:a3:a2:eb:9d:03:19:
ed:73:b9:6a:35:d9:3c:fd:cf:41:91:cf:9d:df:9f:
60:08:3a:97:aa:6d:e5:6d:b4:99:6e:da:18:60:a5:
40:b5:b7:ca:5e:44:d1:92:f2:e9:ae:a7:86:75:55:
a0:53:1b:49:23:28:a3:d7:10:42:75:b7:37:12:57:
ca:d8:88:e4:a4:14:2c:4f:cf:9e:47:12:7b:3a:c6:
2c:13:b7:2c:cc:f4:6b:52:96:ba:ae:68:f8:25:22:
11:dc:94:f5:7b:98:99:16:53:b5:a7:39:e7:80:9a:
a5:a5:5f:5e:17:44:a9:c8:38:e2:bb:4a:dd:8d:d4:
c6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F9:51:23:C7:D4:35:9A:65:28:91:85:6C:E2:58:7B:07:D6:31:52
X509v3 Authority Key Identifier:
keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/E206DC460DEA11F0A924CF5CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.248.200.0/22
103.23.168.0/22
103.217.160.0/22
103.242.73.0-103.242.75.255
220.158.132.0/23
IPv6:
2401:47c0:1e00::/39
Signature Algorithm: sha256WithRSAEncryption
24:96:4e:88:d4:91:9b:81:00:c2:b8:1d:cf:6b:53:7a:b8:25:
76:03:4d:95:87:d4:81:93:41:d7:23:30:b3:df:22:2b:be:42:
83:b5:c5:cd:9b:90:f0:11:f4:f3:c5:48:fd:ab:fe:06:05:b1:
dc:1a:20:ef:07:ce:b9:0c:4e:5b:bf:28:16:3f:7b:55:1e:57:
e0:12:c3:ef:50:43:17:50:92:4a:8d:be:7b:cc:e9:48:8c:ad:
07:be:1b:b7:1f:38:3e:ba:bd:11:3a:fa:28:87:cf:82:63:1f:
68:6d:68:e4:cb:e8:d9:96:01:22:6c:76:76:d0:4f:19:a6:c4:
8b:4b:9c:0b:2e:2d:38:6c:d3:4b:a6:23:43:66:1f:45:21:d8:
dd:5c:5c:a0:36:26:d1:fa:3c:cd:00:c1:29:78:63:09:d6:cd:
48:3b:07:91:45:15:53:18:63:26:d3:76:1c:13:60:27:d5:94:
9c:86:34:ab:01:b7:27:59:4c:79:89:0e:68:42:29:3a:76:62:
3b:5f:e1:67:56:32:b1:20:e2:27:46:10:0c:ec:a5:53:5d:33:
d0:e5:9a:9b:8d:ce:c2:41:0c:10:93:54:3f:a1:b0:2b:c6:52:
ae:50:bc:3e:07:f8:6c:dd:c7:c6:76:ec:83:5f:72:87:b8:dc:
21:b0:c0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 00:00:04 2026 by rpki-client