
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/6A9F1EFECC1211EEAA175022C4F9AE02.roa
File: 6A9F1EFECC1211EEAA175022C4F9AE02.roa (raw, json)
Hash identifier: FaE6XXkxjwj2xUfh7JuSDMTkitv7rRXPaw2a3g64mao=
Subject key identifier: 60:2C:CA:EA:62:D8:F6:48:30:FE:7F:78:B3:3C:C6:0A:EC:7A:32:13
Certificate issuer: /CN=A91A27AB/serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
Certificate serial: 01BF
Authority key identifier: 59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/6A9F1EFECC1211EEAA175022C4F9AE02.roa
Signing time: Wed 03 Sep 2025 04:22:27 +0000
ROA not before: Wed 03 Sep 2025 04:22:27 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 58061
IP address blocks: 103.99.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl
rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Oct 2025 04:56:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447 (0x1bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A27AB, serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
Validity
Not Before: Sep 3 04:22:27 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68b7c283-e264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b7:55:be:f8:12:42:4c:99:52:ac:24:80:77:
c4:34:21:e6:98:b4:63:5c:f9:3e:c8:98:10:db:95:
81:2e:38:24:67:c4:99:98:53:21:5c:e7:c0:5a:be:
79:27:c3:79:cd:6a:e3:ad:ee:b0:8f:70:5c:5b:1e:
54:a7:79:4f:39:30:aa:31:6b:20:7d:d9:79:fb:40:
cc:d9:33:8e:a1:ca:53:89:57:65:d5:51:ba:d0:32:
f8:d6:6c:74:c2:0f:3a:12:91:21:c7:1a:90:48:90:
c9:08:0e:c4:f9:9f:d6:86:f4:c9:7a:a9:c2:ba:f7:
6a:49:87:d9:42:db:67:f5:38:87:a2:39:ea:68:2e:
93:e1:bb:bf:71:11:45:e8:96:9c:cf:35:1e:6f:d8:
f2:55:d2:2c:93:20:19:73:48:e3:fb:70:9e:c6:6a:
27:aa:4a:c5:46:b8:65:fa:81:9d:25:8a:f1:b2:fd:
b2:c2:4d:62:f2:d2:49:05:8a:61:b6:f6:5b:7e:6a:
9d:4e:f3:b5:03:c5:5f:d3:48:67:c7:fd:d8:e5:b3:
80:21:8f:d3:5e:75:da:4d:fc:1e:fe:74:f1:82:1a:
9a:9a:be:a6:c2:89:31:d0:81:67:2e:c7:56:09:2d:
bc:94:91:2d:17:2d:ba:61:d4:b7:9f:24:99:54:df:
32:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2C:CA:EA:62:D8:F6:48:30:FE:7F:78:B3:3C:C6:0A:EC:7A:32:13
X509v3 Authority Key Identifier:
keyid:59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/6A9F1EFECC1211EEAA175022C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.54.0/24
Signature Algorithm: sha256WithRSAEncryption
65:da:58:a7:37:f2:cf:2b:a8:d8:05:29:70:a2:c4:8a:17:cc:
d1:a7:27:c6:52:c1:db:aa:fc:9d:42:cb:6f:3d:90:d4:98:3f:
8a:79:32:da:a0:42:de:38:b2:87:e4:3a:dc:01:60:be:61:5f:
8e:56:d3:62:90:3c:b6:d7:a7:8a:eb:52:b8:93:dc:ae:b8:9a:
84:a0:b1:37:b1:90:d1:db:85:6c:ac:e8:5b:73:f9:fe:d1:5c:
16:2f:f5:58:f7:99:43:9c:00:ce:69:f3:43:a8:a7:f4:98:e0:
43:a5:c8:b0:08:37:b3:87:d1:ef:60:60:fa:27:ab:aa:cf:bd:
f4:14:66:9b:93:0d:ce:34:fb:0f:e1:a5:3e:62:0e:a1:69:38:
92:65:cb:b4:eb:bb:b1:30:a4:28:48:96:a0:06:2e:f2:28:96:
c1:88:70:5d:8b:1b:35:88:e4:32:ae:c2:51:6d:48:72:8c:e9:
bc:4f:3b:9d:6f:61:fb:f6:2f:b0:3a:3b:7c:c3:70:8c:0a:1e:
65:76:38:99:e8:6e:c1:3a:6e:3c:92:61:61:35:83:ce:88:d9:
55:6e:1f:b1:ff:0c:52:52:5d:ac:ec:97:ea:f5:c3:45:cd:ee:
9e:81:3f:58:8f:12:02:af:d3:8e:9f:64:2b:e9:53:ce:e6:63:
40:38:44:6d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTI3QUIxMTAvBgNVBAUTKDU5RDU4ODEyNUE3MTY2OTg3MzhEMUQxRTlFNkQ4QTY4
RDc0MDlCMjcwHhcNMjUwOTAzMDQyMjI3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGI3YzI4My1lMjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnbdVvvgSQkyZUqwkgHfENCHmmLRjXPk+yJgQ25WBLjgkZ8SZmFMhXOfAWr55
J8N5zWrjre6wj3BcWx5Up3lPOTCqMWsgfdl5+0DM2TOOocpTiVdl1VG60DL41mx0
wg86EpEhxxqQSJDJCA7E+Z/WhvTJeqnCuvdqSYfZQttn9TiHojnqaC6T4bu/cRFF
6JaczzUeb9jyVdIskyAZc0jj+3CexmonqkrFRrhl+oGdJYrxsv2ywk1i8tJJBYph
tvZbfmqdTvO1A8Vf00hnx/3Y5bOAIY/TXnXaTfwe/nTxghqamr6mwokx0IFnLsdW
CS28lJEtFy26YdS3nySZVN8yDQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGAsyupi
2PZIMP5/eLM8xgrsejITMB8GA1UdIwQYMBaAFFnViBJacWaYc40dHp5timjXQJsn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjdBQi82RjZFOTgyODMx
MEUxMUVFODg5RkYwM0ZDNEY5QUUwMi9XZFdJRWxweFpwaHpqUjBlbm0yS2FOZEFt
eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dkV0lFbHB4WnBoempSMGVubTJLYU5kQW15Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTI3QUIvNkY2RTk4MjgzMTBFMTFFRTg4OUZGMDNGQzRGOUFFMDIvNkE5RjFFRkVD
QzEyMTFFRUFBMTc1MDIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnYzYwDQYJKoZIhvcNAQELBQADggEBAGXaWKc38s8rqNgF
KXCixIoXzNGnJ8ZSwduq/J1Cy289kNSYP4p5MtqgQt44sofkOtwBYL5hX45W02KQ
PLbXp4rrUriT3K64moSgsTexkNHbhWys6Ftz+f7RXBYv9Vj3mUOcAM5p80Oop/SY
4EOlyLAIN7OH0e9gYPonq6rPvfQUZpuTDc40+w/hpT5iDqFpOJJly7Tru7EwpChI
lqAGLvIolsGIcF2LGzWI5DKuwlFtSHKM6bxPO51vYfv2L7A6O3zDcIwKHmV2OJno
bsE6bjySYWE1g86I2VVuH7H/DFJSXazsl+r1w0XN7p6BP1iPEgKv046fZCvpU87m
Y0A4RG0=
-----END CERTIFICATE-----
Generated at Sat Oct 25 00:22:55 2025 by rpki-client