
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/004C70608FEC11EC818F190FC4F9AE02.roa
File: 004C70608FEC11EC818F190FC4F9AE02.roa (raw, json)
Hash identifier: 6hMMmKjxs3M8T6jaNlQBwSAJVMQeWdpj4yLQxNkgI98=
Subject key identifier: 2C:57:B9:71:9D:74:F9:C6:D1:41:29:A7:04:EB:DE:57:54:2D:78:E4
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6F2E
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/004C70608FEC11EC818F190FC4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:36:59 +0000
ROA not before: Fri 02 Oct 2026 15:36:59 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 56149
IP address blocks: 45.121.160.0/22 maxlen: 24
103.3.252.0/22 maxlen: 24
2001:df5:8a00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28462 (0x6f2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:36:59 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcf9b-d595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3a:1c:0e:d9:9e:b5:a8:39:d9:d4:1b:8b:8e:
14:08:3a:b9:02:5f:07:23:df:72:9d:c4:01:74:be:
69:dd:28:36:4a:6c:16:ce:b7:18:49:a1:29:fc:67:
38:c2:58:a9:d0:5b:4a:da:7e:4e:3e:1f:71:38:8c:
18:d0:f6:5d:84:3b:ff:9a:d9:a5:15:e5:82:9d:bc:
41:71:0a:bf:c7:ba:09:1c:a6:34:f0:4d:9e:d4:86:
0b:61:ea:4f:01:49:1c:2d:ae:03:e4:c8:39:8e:cd:
f7:6b:11:c5:fc:17:8a:7c:5d:32:b5:07:9d:72:02:
8b:c8:04:e3:26:e6:f6:22:d4:b5:73:99:05:8b:13:
b7:22:74:8b:e4:57:ed:24:4e:03:3e:bf:8b:fd:0f:
db:23:f4:e2:45:57:00:e9:a8:6b:1a:5f:08:83:61:
a3:5b:61:61:9d:9e:4a:99:53:cf:6f:e7:60:f6:98:
a6:0a:7e:0c:80:dd:13:ae:c6:15:54:35:99:40:25:
09:02:15:4d:08:4e:1f:58:e9:91:ec:02:00:cf:e6:
c5:7f:76:9a:b9:34:fe:a9:23:e8:59:5c:21:c2:b0:
2e:7e:71:9a:bd:96:6b:ff:e5:48:80:8d:83:ba:d3:
cd:3e:b5:08:e5:57:00:bc:15:32:ed:f1:27:0c:f3:
c3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:57:B9:71:9D:74:F9:C6:D1:41:29:A7:04:EB:DE:57:54:2D:78:E4
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/004C70608FEC11EC818F190FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.121.160.0/22
103.3.252.0/22
IPv6:
2001:df5:8a00::/48
Signature Algorithm: sha256WithRSAEncryption
42:80:c9:f6:e0:ce:55:15:30:3f:67:5b:34:81:23:ef:6c:74:
28:b4:86:6e:dc:97:e1:5b:78:5f:8a:56:3a:e0:da:6e:0f:f3:
7a:33:61:0a:0d:be:12:e4:7a:2f:a9:89:6b:7c:b0:3c:4c:0d:
82:86:30:1e:5d:e8:29:8c:67:89:0b:34:56:49:ad:9c:42:27:
d8:2d:0e:0f:a5:c6:c1:c9:71:f1:77:80:bb:37:e0:bd:8f:9b:
f4:81:94:d7:d2:2d:e1:b5:a7:97:6d:7a:1b:07:cc:46:4c:4e:
93:57:33:13:7f:ca:3d:dd:b5:f4:e9:f2:a8:e8:54:33:26:e6:
a7:8a:c8:21:46:33:4b:f8:c5:72:40:59:15:7c:17:04:89:24:
a7:b9:b0:10:58:13:96:93:03:76:b6:61:03:a8:6e:3f:50:65:
5e:19:c4:b3:7b:4b:8f:13:7d:5b:5b:d4:bb:5a:9a:bb:6e:a8:
f8:a0:7f:74:9f:e8:b7:5e:2c:86:3b:1d:20:e9:43:0b:65:e5:
92:56:25:d9:87:80:2a:cb:6a:50:ae:b0:d2:ab:32:ed:ee:be:
ef:43:a0:b9:4d:16:91:f0:4d:9d:ea:d6:96:61:09:68:a7:75:
74:1b:ea:83:f0:db:5c:96:e3:63:17:e5:4a:53:4a:1d:bb:7e:
7d:9c:25:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:29:46 2026 by rpki-client