
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/108CCEAE7F6A11F0A3280286C4F9AE02.roa
File: 108CCEAE7F6A11F0A3280286C4F9AE02.roa (raw, json)
Hash identifier: 2w8CyJK2RMFVQ0NRynyxjniXTwdK3vE9o2T4q5MUXHo=
Subject key identifier: 4D:2C:25:E3:EA:E5:46:C9:94:DF:FB:6F:09:46:C8:19:38:D4:4F:3F
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6BFD
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/108CCEAE7F6A11F0A3280286C4F9AE02.roa
Signing time: Mon 02 Mar 2026 23:31:46 +0000
ROA not before: Thu 28 Aug 2025 14:52:52 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 131418
IP address blocks: 103.239.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27645 (0x6bfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:52:52 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a61de2-2ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ba:95:c7:73:d0:56:ec:50:6b:cf:99:82:49:
ef:4e:f2:29:48:39:7f:3b:94:af:a5:a4:7c:da:db:
d7:41:38:f8:2d:0b:07:a3:2e:c7:57:59:3f:75:1a:
85:bc:c1:46:d4:25:71:f0:5c:40:53:7c:30:f6:bc:
44:3d:e0:9a:db:cb:d1:4a:e6:5a:9d:5d:f2:83:5c:
c7:af:93:9e:3a:01:43:1e:14:03:b3:0b:40:52:47:
33:70:b4:32:66:7b:91:05:86:bd:21:4a:1d:78:3c:
59:cc:d0:4d:77:9f:e0:89:6e:8d:4c:b0:23:fc:64:
27:f5:7e:70:52:fc:ed:73:93:72:99:89:73:0b:c5:
b4:60:e3:2f:23:59:3a:27:9f:52:5f:41:26:90:26:
24:62:44:2f:e1:27:26:6d:de:60:17:88:65:db:df:
bb:bc:d5:d6:e0:57:81:e0:9a:33:32:d6:ab:cc:ae:
a2:61:0e:92:6a:d5:0f:49:9a:fd:cb:9a:54:14:b4:
a9:bc:cb:28:49:f8:c1:3c:a5:90:72:62:ce:a5:ee:
e6:1b:79:8b:8e:7e:c4:37:b1:69:c2:8f:7b:4f:86:
fa:d5:8f:4b:f9:ef:a8:31:d3:18:f3:05:78:7d:7a:
c9:7f:2a:f6:a8:42:69:06:e1:4e:55:15:58:6a:32:
dd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2C:25:E3:EA:E5:46:C9:94:DF:FB:6F:09:46:C8:19:38:D4:4F:3F
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/108CCEAE7F6A11F0A3280286C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.239.120.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:32:de:2a:c4:83:a6:99:03:7b:c8:aa:32:b6:bd:9f:32:b7:
ec:e0:f6:f6:83:0d:62:b1:10:ad:31:89:ee:aa:94:15:43:78:
b4:64:42:ac:35:a1:e2:0f:f7:26:b2:75:33:af:13:61:18:b1:
f5:88:32:04:e0:06:0a:04:36:a3:c2:e3:fe:78:1e:02:a0:de:
be:27:71:b7:23:15:ee:8e:46:b4:d9:61:71:f1:43:f2:86:b3:
8b:48:78:dd:2d:a8:54:3d:b8:54:12:13:1e:da:d7:c6:18:85:
48:79:d7:4e:1d:2f:73:4d:12:6a:f6:5b:06:e5:2e:6a:5c:60:
0b:d8:3e:59:bc:6c:2e:05:fa:13:68:80:29:72:c2:f4:6a:65:
57:9f:89:98:4d:e0:3b:f7:8a:38:41:18:7a:20:43:97:ef:6c:
66:77:5f:cc:58:78:bd:f7:ac:a8:c2:11:82:17:8b:24:6b:64:
66:ac:7c:a1:53:32:bf:b2:18:cd:2d:33:f5:29:34:fd:58:92:
0b:20:a7:af:3e:f3:d2:b6:a9:a3:47:c4:f2:e9:0b:26:8f:bf:
94:14:c3:cf:44:7b:29:20:19:a1:bf:2c:cd:92:78:20:8b:3a:
6f:c1:1f:86:16:8e:01:31:43:5a:df:8a:b5:71:87:22:53:a0:
7b:0a:d5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:45:27 2026 by rpki-client