
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/561B6CDA4BFE11ECBFCFD04AC4F9AE02.roa
File: 561B6CDA4BFE11ECBFCFD04AC4F9AE02.roa (raw, json)
Hash identifier: vYCGIfI3gl3ToNqB19FSiaKyhiVJha4ElsD+DPWuIY0=
Subject key identifier: 5B:90:AB:8D:F6:EC:CF:71:A4:A8:16:28:AE:68:50:36:A3:D0:37:2A
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6E0F
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/561B6CDA4BFE11ECBFCFD04AC4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:26:55 +0000
ROA not before: Fri 02 Oct 2026 15:26:55 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 140831
IP address blocks: 103.175.198.0/23 maxlen: 24
2001:df7:fd80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 10:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28175 (0x6e0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:26:55 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcd3f-7874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e4:83:27:67:ba:48:a1:da:2f:46:8e:c5:d9:
93:35:fb:65:5a:6c:8b:05:5a:7d:16:c1:44:59:f6:
a9:ee:fc:a9:ca:00:c7:d1:e6:89:3c:3a:ca:c6:70:
7e:fd:c4:63:d2:e8:73:20:11:4d:80:11:64:14:d7:
8d:ef:05:19:12:c6:50:06:9c:46:ae:f5:ab:bc:27:
2f:ee:b8:16:de:21:8b:98:d0:4c:a8:6e:0f:f6:11:
ab:84:c4:af:a5:58:c4:7b:64:ae:c1:73:1d:89:d4:
64:7c:f3:93:81:98:b9:b4:28:7d:62:31:be:bb:de:
68:27:08:b1:65:f4:bd:82:c3:a3:42:e1:40:08:c6:
8c:ed:a8:95:d1:57:04:d4:26:0d:15:b8:44:3f:e2:
d0:15:59:2e:50:bd:17:2d:c2:e9:c0:37:21:77:79:
00:23:fd:bf:00:9a:31:cd:f3:32:78:38:07:06:6e:
99:67:ec:88:b5:b3:d6:6c:c7:1e:ad:5e:44:f1:72:
d2:59:3a:8f:c4:c1:08:f5:5e:3a:d8:a7:1d:30:56:
e0:32:57:85:08:5c:5f:15:34:a4:70:7f:9a:8c:29:
5c:51:d2:5a:23:3b:72:72:82:21:b1:33:e5:1a:8a:
18:4c:e2:ea:70:ed:1e:93:e0:e6:44:ca:ce:c4:d5:
97:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:90:AB:8D:F6:EC:CF:71:A4:A8:16:28:AE:68:50:36:A3:D0:37:2A
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/561B6CDA4BFE11ECBFCFD04AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.175.198.0/23
IPv6:
2001:df7:fd80::/48
Signature Algorithm: sha256WithRSAEncryption
76:25:5c:c6:3a:c2:11:8d:27:11:6e:ca:eb:5e:e9:69:04:8d:
0c:e4:2b:40:a8:ae:76:4d:d0:5c:3d:c6:49:75:8c:10:82:f8:
fc:7f:89:9b:a0:b9:86:3f:b7:fe:95:ac:32:05:a8:ca:a4:b9:
9b:b5:5d:86:db:2e:53:f3:a6:3e:61:25:90:06:9e:a3:54:d2:
0d:92:97:b7:3f:f1:19:41:b7:b6:13:63:65:18:21:6c:cd:8c:
07:41:80:7e:66:1d:65:5a:5a:1b:be:35:fc:64:35:c6:ac:81:
11:39:1e:91:9b:6d:8b:12:29:24:6b:9b:99:23:88:ef:e7:e5:
55:06:3f:41:3f:99:1b:92:6b:c4:6e:1f:13:cd:2d:be:fc:8b:
a6:d7:90:0c:e8:6a:36:be:f6:02:35:3a:36:84:56:44:13:c6:
c2:48:22:53:e0:7d:d9:e8:b3:0c:63:59:97:5b:35:92:a6:de:
d7:eb:59:99:4c:8f:6e:c9:0f:e3:10:2f:21:6f:d0:84:94:a1:
4d:f7:1c:dc:95:25:08:47:81:93:5e:78:db:a4:0d:b1:d6:7d:
a0:68:18:4e:22:c1:d3:83:4a:96:5e:e6:a8:af:8c:b5:e3:65:
dc:16:bd:0f:47:75:3d:30:0d:34:73:f0:48:16:79:e5:f6:ee:
01:c4:b0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:19:29 2026 by rpki-client