
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/2C0E544C6EB511F094E66857C4F9AE02.roa
File: 2C0E544C6EB511F094E66857C4F9AE02.roa (raw, json)
Hash identifier: 5hXzmFr17jMpDBDwfAxIzSXfRZTLmAdnHnJCXCD80mw=
Subject key identifier: 55:99:0A:2B:96:ED:56:C5:FB:01:EA:63:52:BE:13:FE:6D:28:2A:B6
Certificate issuer: /CN=A91E8DF5/serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B
Certificate serial: DC
Authority key identifier: C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/2C0E544C6EB511F094E66857C4F9AE02.roa
Signing time: Mon 02 Mar 2026 15:02:08 +0000
ROA not before: Fri 01 Aug 2025 08:55:45 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 32595
IP address blocks: 103.224.92.0/24 maxlen: 24
2001:df2:45c0::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl
rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 18 Mar 2026 05:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8DF5, serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B
Validity
Not Before: Aug 1 08:55:45 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a5a670-cbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:ec:8f:4f:1f:28:eb:c4:80:bb:b5:13:2b:
bb:f0:b8:6e:ec:d7:d1:fe:6d:1e:51:47:8a:01:0c:
99:7e:ee:27:71:6c:aa:3e:56:1f:8e:64:31:7f:48:
15:9e:88:99:0a:39:42:cc:09:8b:60:8d:02:2b:66:
9f:b6:3c:e8:c4:e7:b4:09:3f:45:d8:ef:d4:52:06:
a5:2f:aa:2f:82:1f:a8:e1:f7:9c:5a:3f:78:e8:12:
7d:26:15:e5:e3:57:9d:c6:ea:f4:77:6b:eb:95:ba:
0d:15:3b:a1:f2:7e:2d:f0:17:7d:cb:9b:6b:6f:b3:
6f:79:57:9d:91:e6:65:b2:7e:ab:a0:46:b1:c7:17:
77:84:f1:40:3a:1e:cd:27:ff:56:b1:a7:24:0f:bd:
75:5d:76:08:e8:e9:be:e2:0c:9d:80:2a:fd:57:d1:
5a:34:27:31:f3:98:e9:90:62:e8:ce:2d:52:40:ff:
c4:20:d6:12:34:ef:93:20:17:d3:4a:40:97:a8:70:
5d:49:9b:41:6a:1d:d7:a5:65:5e:8e:e6:0e:97:0a:
1c:13:b1:a2:55:9c:c5:9d:21:9a:7b:af:65:fa:3c:
63:47:27:46:bd:12:26:76:f1:ef:6e:82:95:62:2b:
54:57:c9:52:e1:21:37:bb:83:58:b4:de:89:f8:94:
31:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:99:0A:2B:96:ED:56:C5:FB:01:EA:63:52:BE:13:FE:6D:28:2A:B6
X509v3 Authority Key Identifier:
keyid:C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/2C0E544C6EB511F094E66857C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.224.92.0/24
IPv6:
2001:df2:45c0::/47
Signature Algorithm: sha256WithRSAEncryption
0d:24:89:fe:4a:af:d2:8d:1d:60:90:89:3a:75:5a:e0:2c:b6:
68:5f:af:0b:b3:09:31:c2:7d:24:65:d6:60:28:68:6d:9a:28:
5a:70:ee:ab:48:b8:60:76:29:fa:5e:3e:2a:29:dc:bc:7b:1b:
04:4a:57:10:52:df:53:8c:b3:31:19:2e:3e:bb:c1:c8:97:45:
af:ea:10:33:0c:5e:de:a3:fc:35:19:ee:5e:72:60:74:67:8b:
5e:b3:ed:d0:b9:fe:9b:8a:05:39:a3:5a:11:ec:9a:fc:12:25:
39:83:82:0c:c3:42:5e:58:fb:a3:fd:00:dd:ca:b6:32:cf:08:
fa:4b:11:08:05:c6:be:f6:a0:96:e2:f8:e4:41:1c:a9:ea:9c:
f1:b5:cd:7d:17:1c:eb:71:23:02:ff:b3:a3:bc:29:4b:e1:3b:
73:e5:2d:60:ca:59:d4:0a:74:9d:2c:e3:59:30:a9:5c:fb:3d:
c6:c0:87:5e:53:51:9d:5a:6f:d3:74:41:1a:0f:31:29:c0:54:
d1:ff:8e:35:e6:d9:48:85:ee:47:4c:99:06:65:50:52:7e:3f:
be:9a:ed:0d:e5:ec:ff:69:12:77:4d:7a:64:17:5f:ad:98:bd:
b6:e1:3d:11:17:c6:22:6f:be:19:de:c7:3c:a6:9f:1a:14:54:
7b:b6:f8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 02:22:27 2026 by rpki-client