
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/2BA212DC306D11EA81D19B38C4F9AE02.roa
File: 2BA212DC306D11EA81D19B38C4F9AE02.roa (raw, json)
Hash identifier: sXLJ43OFaVCL1SbiTyWS+wdz+d0djH0QqeNKRGNj+Sk=
Subject key identifier: B5:77:2C:0D:30:7C:53:CD:5F:81:75:67:7C:3C:41:B1:ED:89:5A:C7
Certificate issuer: /CN=A91EAE25/serialNumber=287BB0CD66FBD7E5B7A88BA66789124C0B04C578
Certificate serial: 0C47
Authority key identifier: 28:7B:B0:CD:66:FB:D7:E5:B7:A8:8B:A6:67:89:12:4C:0B:04:C5:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHuwzWb71-W3qIumZ4kSTAsExXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/2BA212DC306D11EA81D19B38C4F9AE02.roa
Signing time: Sun 14 Jun 2026 19:21:33 +0000
ROA not before: Sun 14 Jun 2026 19:21:33 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 139283
IP address blocks: 103.140.212.0/23 maxlen: 23
103.140.212.0/24 maxlen: 24
103.140.213.0/24 maxlen: 24
2407:f4c0::/32 maxlen: 32
2407:f4c0:10::/48 maxlen: 48
2407:f4c0:11::/48 maxlen: 48
2407:f4c0:12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/KHuwzWb71-W3qIumZ4kSTAsExXg.crl
rsync://rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/KHuwzWb71-W3qIumZ4kSTAsExXg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHuwzWb71-W3qIumZ4kSTAsExXg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 18:45:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3143 (0xc47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE25, serialNumber=287BB0CD66FBD7E5B7A88BA66789124C0B04C578
Validity
Not Before: Jun 14 19:21:33 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a2eff3d-1842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:15:e8:7b:3d:0b:57:1d:69:42:5d:9f:ab:96:
7c:89:c9:32:40:95:61:8c:df:f1:94:34:6b:b2:d3:
74:90:63:83:05:53:f2:7a:bd:a3:67:26:d1:4e:9f:
5b:4c:02:db:3b:69:6f:5e:ce:ab:62:e0:b1:7e:8a:
85:c9:b3:4b:b9:59:8c:56:1c:e1:c1:23:10:1f:5b:
82:fe:e4:5c:d6:7b:73:99:bb:c8:61:25:e2:7c:60:
68:e5:5c:2f:ba:d7:b1:8c:f7:82:ab:bf:ac:49:21:
23:78:68:97:9b:2c:fa:17:df:ee:4d:9a:30:8f:c3:
4d:4c:53:2f:cf:ba:58:8c:e7:34:f4:05:47:4c:af:
3b:bd:81:8d:41:a4:54:ae:df:81:c6:41:fe:ff:83:
84:98:6e:ab:e1:82:6e:d4:4d:0d:ef:b6:92:e8:80:
dc:05:14:1a:03:d5:73:92:43:35:39:3a:ea:d7:87:
53:7d:de:a8:57:17:fb:20:3c:fc:ad:61:7e:e7:5d:
df:89:9e:66:0c:d5:6b:f6:fd:e5:13:a5:27:34:41:
95:b5:7d:b5:b4:4b:ee:fe:97:ea:85:18:e7:65:d7:
c0:65:e9:de:e2:68:ba:9e:4b:36:38:80:16:7e:46:
53:79:60:ec:ac:69:fe:5d:27:96:a5:5b:a3:f0:5e:
1b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:77:2C:0D:30:7C:53:CD:5F:81:75:67:7C:3C:41:B1:ED:89:5A:C7
X509v3 Authority Key Identifier:
keyid:28:7B:B0:CD:66:FB:D7:E5:B7:A8:8B:A6:67:89:12:4C:0B:04:C5:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/KHuwzWb71-W3qIumZ4kSTAsExXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHuwzWb71-W3qIumZ4kSTAsExXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/2BA212DC306D11EA81D19B38C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.140.212.0/23
IPv6:
2407:f4c0::/32
Signature Algorithm: sha256WithRSAEncryption
7a:59:44:71:13:6b:ec:a9:23:1f:93:a8:6f:a7:5a:54:cd:1e:
ca:07:6b:ac:53:d3:d8:5f:66:b0:12:5c:55:28:ad:64:31:e4:
19:62:74:98:d5:d1:e6:b5:c9:2d:9a:31:8f:19:8a:71:9d:fb:
61:5a:1c:df:8a:2f:3f:e0:54:8f:43:c5:32:80:38:da:8a:ad:
44:71:b0:88:45:2d:00:04:e0:75:ff:78:a9:a2:2e:f5:28:85:
7e:57:23:a9:a0:f0:5d:c4:ed:be:71:5a:0a:69:33:1a:ca:83:
59:59:37:14:08:83:1f:45:a8:f0:54:a1:82:f3:06:dc:65:f7:
98:93:57:44:5f:b9:47:f4:88:a4:d2:31:52:e5:95:f9:24:f5:
61:5f:5b:bd:50:d6:5a:70:af:7b:b6:58:69:c3:db:a3:84:72:
38:ce:c8:82:0b:fe:e4:8b:b8:ef:78:a7:4e:2b:55:5a:0d:a6:
84:ef:a7:25:8d:2a:bd:2c:fc:8a:52:62:e0:d2:6c:f1:6b:e6:
20:5c:88:99:c3:4a:1a:32:45:f3:4e:87:3b:70:62:df:4a:5e:
1b:e8:e3:20:3d:06:ac:ce:73:5d:4f:b6:c8:e2:7d:7b:ab:46:
da:42:2e:07:9a:6f:45:dc:cc:3a:1d:b4:ad:e8:fc:a6:f2:e8:
98:45:29:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 12:38:49 2026 by rpki-client