
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4FC8108A295B11EF8A0CF149C4F9AE02.roa
File: 4FC8108A295B11EF8A0CF149C4F9AE02.roa (raw, json)
Hash identifier: 1Pwt5Op8YT6KAkQ0B85NdjGmFYBRSVmb6aPrIwdb+vs=
Subject key identifier: 62:16:8A:AB:8E:43:76:6F:68:73:B6:96:E3:DB:78:CA:EE:59:87:9C
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6DD2
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4FC8108A295B11EF8A0CF149C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:25:03 +0000
ROA not before: Fri 02 Oct 2026 15:25:03 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 135956
IP address blocks: 103.124.60.0/22 maxlen: 24
2001:df7:1700::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28114 (0x6dd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:25:03 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcccf-896d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:42:10:7c:cb:b2:c4:5a:a4:62:4d:9d:b9:41:
5a:80:b3:4c:53:5a:eb:96:b3:1a:89:c4:e6:4f:c5:
ec:8c:b5:d6:44:cc:38:9b:2c:a4:04:07:f8:95:e8:
ac:46:4a:a0:7c:01:a4:86:4a:5a:80:75:56:63:03:
6f:77:4a:02:6a:12:2e:3f:4f:03:4c:23:04:79:7f:
28:b5:0b:91:45:c5:e2:06:bc:b5:16:56:3b:b9:ea:
ed:2e:84:bd:3f:ec:1f:47:5f:04:8a:87:ca:20:94:
92:fa:86:f5:02:1d:13:dd:a3:f2:20:f8:d1:f2:71:
07:cf:d3:be:00:6a:c7:06:b9:2d:51:bb:21:69:18:
50:89:40:b6:ef:bc:53:b6:c0:5a:b7:6c:d3:5a:92:
bc:dc:95:b3:63:43:b5:36:3c:64:f3:89:51:d4:63:
41:32:cd:f8:83:86:67:19:a4:9b:22:69:4f:19:70:
aa:82:d8:f5:c1:14:b0:a6:70:84:19:5e:70:e2:45:
09:89:6f:6b:79:2b:25:e0:d0:b4:89:d9:d2:21:15:
be:8b:5b:c7:b6:23:59:98:80:15:ba:8b:b3:d9:b3:
53:c6:7f:31:01:6f:cf:b2:a2:03:6d:96:65:2e:04:
77:ad:d7:d4:83:69:01:e6:69:b6:1a:1b:6d:93:ec:
0e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:16:8A:AB:8E:43:76:6F:68:73:B6:96:E3:DB:78:CA:EE:59:87:9C
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4FC8108A295B11EF8A0CF149C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.124.60.0/22
IPv6:
2001:df7:1700::/48
Signature Algorithm: sha256WithRSAEncryption
89:a8:d1:ed:37:c6:b1:16:68:72:bb:bd:b7:f9:aa:02:5c:8b:
44:4d:cc:ff:f5:0a:65:50:dc:c1:2d:e0:2b:b9:4f:20:d4:d2:
3e:8a:8b:45:8e:86:db:69:ec:a1:fd:01:b0:b1:b2:86:28:f9:
16:20:29:74:ba:7a:0c:97:d8:c3:5b:5e:03:2d:70:ca:62:09:
d5:36:3a:6e:70:bd:98:75:99:f2:2e:9c:20:f2:a4:b5:22:92:
ce:f5:41:eb:4d:f8:de:fb:78:85:1f:a5:cf:c0:04:48:60:bd:
d7:cb:89:47:69:a7:74:90:03:70:d9:fd:72:26:a4:b4:11:ba:
b3:51:38:c0:b2:8b:9a:cd:87:bd:f9:24:c2:a0:81:93:2a:fd:
f7:42:00:a8:ac:80:bd:9e:4a:7c:f2:ee:a7:f4:8e:4a:2d:05:
22:f7:54:63:08:72:0d:ad:84:d3:dd:a0:7d:a7:24:1f:98:de:
34:83:8e:63:11:80:b5:8f:6a:af:6c:37:40:46:aa:d3:70:36:
e6:ea:71:68:5f:46:79:a3:ae:39:62:9b:c8:af:c8:ee:bc:31:
db:48:ef:f0:ae:37:62:aa:7d:93:99:7a:7c:0a:b9:63:b4:fc:
94:6b:d3:60:b6:60:3e:30:4f:ea:1a:15:53:b4:6b:8f:44:21:
b5:96:75:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:05:45 2026 by rpki-client