
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/AAF361C0D18B11EF810E8B66C4F9AE02.roa
File: AAF361C0D18B11EF810E8B66C4F9AE02.roa (raw, json)
Hash identifier: p7P2A7jSsNB3VPnyfQ7N/c66d6K3p3AzM6sgD1LCs58=
Subject key identifier: BB:C2:01:BD:AB:3B:22:B3:6C:3C:51:40:E4:98:CE:B4:7D:98:FF:C3
Certificate issuer: /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Certificate serial: 02E7
Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/AAF361C0D18B11EF810E8B66C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:31:28 +0000
ROA not before: Tue 03 Feb 2026 01:21:21 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 206888
IP address blocks: 103.205.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 18 Mar 2026 00:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 743 (0x2e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE7DF, serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Validity
Not Before: Feb 3 01:21:21 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a477f0-30c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4a:3d:e6:e2:42:eb:90:e9:ea:8c:d0:69:95:
c4:16:19:a0:a6:a1:f8:bc:12:d3:df:cb:75:61:89:
af:fe:39:32:b5:0a:54:23:13:da:3b:af:50:95:38:
0a:47:b9:8e:a6:71:aa:b5:82:e2:ea:21:f0:0f:c9:
7b:7a:06:37:5b:32:ee:1e:3f:f5:23:a3:d5:90:a8:
d8:79:7a:96:6e:db:40:b9:ba:24:44:b7:0e:66:91:
76:39:b1:07:de:11:d0:a4:65:0f:0a:ee:94:30:d6:
3d:3f:2f:ab:14:1a:4d:f0:81:a2:06:a6:d2:cd:72:
69:87:79:53:b5:db:5c:c3:21:97:28:7f:0d:11:c7:
c8:14:15:6a:b7:29:e5:c5:49:92:dc:e7:00:ce:a1:
37:9a:3f:1a:08:d5:2f:2a:29:5b:87:86:37:bd:e2:
82:5d:d5:01:cf:3b:38:2a:82:b2:c5:08:e5:ec:e4:
bd:8d:79:1b:cd:9c:a6:c8:9d:de:0c:03:92:39:67:
c7:1c:ac:e6:24:ea:02:96:44:e9:7e:d1:90:d6:35:
75:c6:71:4c:77:f5:4e:88:9c:b6:f1:09:90:a8:33:
7f:7d:93:33:7b:ac:cf:35:4c:eb:5f:ca:da:4f:a6:
49:60:9e:a4:25:8f:13:2b:48:c7:8d:46:ab:bb:c7:
1d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C2:01:BD:AB:3B:22:B3:6C:3C:51:40:E4:98:CE:B4:7D:98:FF:C3
X509v3 Authority Key Identifier:
keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/AAF361C0D18B11EF810E8B66C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.205.240.0/22
Signature Algorithm: sha256WithRSAEncryption
58:25:73:8a:5c:38:f1:a3:c1:44:fa:b1:70:87:81:f1:0b:89:
8f:79:73:cc:7e:82:da:ab:db:ec:bd:aa:d3:ae:39:78:ec:8e:
0c:23:41:c8:41:b7:71:48:1f:d0:a2:fc:d6:44:42:83:45:2e:
71:84:6d:d4:7a:0e:d8:e6:69:f0:1e:a6:c2:8a:bd:85:58:e6:
06:ec:69:8b:ad:9d:d8:f7:93:d2:c5:12:b7:46:9a:84:c5:f0:
5e:46:38:5f:7d:5f:5d:f6:1c:ae:b0:9b:ed:98:74:68:c6:c9:
1d:34:5e:df:61:a0:a8:0b:71:66:6d:92:38:31:ed:20:b0:ba:
a5:bd:ef:d5:63:45:c5:aa:07:41:6e:37:a1:2f:e4:9c:b8:22:
c1:c6:e9:60:b3:40:88:7e:85:67:3d:02:7c:6c:74:fb:5c:4b:
7d:9c:ba:19:e5:1b:ac:f2:5c:a0:1b:78:f7:63:49:80:0b:d9:
1e:78:0c:2a:96:ac:c8:da:ad:64:30:f3:d1:3d:af:a1:7e:cf:
a9:a6:49:7d:1b:d7:fd:9c:54:20:65:ac:ac:70:52:d8:1c:f9:
89:6a:54:99:9f:27:00:84:1f:23:cc:d5:9a:d3:c0:3f:57:32:
12:c7:df:6b:7e:c3:4b:ad:e6:8f:4b:9f:a3:8b:76:af:09:e1:
fe:65:a0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 15:11:20 2026 by rpki-client