
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/64C95268F11011EB8E63FC73C4F9AE02.roa
File: 64C95268F11011EB8E63FC73C4F9AE02.roa (raw, json)
Hash identifier: qGwJ6Qf54inrL6PotiRZQTC39tF8iCFj5/mzniA3VeQ=
Subject key identifier: D9:67:69:43:0A:47:D8:A2:A8:E5:2F:04:5F:16:58:02:90:79:26:E9
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 5E24
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/64C95268F11011EB8E63FC73C4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:16:57 +0000
ROA not before: Thu 28 Aug 2025 14:54:14 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 140811
IP address blocks: 103.169.146.0/24 maxlen: 24
103.169.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24100 (0x5e24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:54:14 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a60c59-f6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:38:14:c0:0c:24:c9:86:e9:d1:bd:c3:be:6d:
df:4e:7b:62:28:0f:29:cd:23:05:e3:80:56:3e:5b:
05:7a:0d:ab:d9:8b:72:75:88:a3:e4:16:0a:66:82:
90:ca:41:da:2d:0a:82:f3:35:b0:27:e6:38:cf:1d:
be:7f:65:01:c7:f3:07:ab:4f:4d:88:11:fa:f0:11:
c7:52:32:dd:6b:cd:41:6c:72:1b:a0:91:d1:2c:89:
5b:28:ac:7a:00:6a:ec:1f:bd:8a:57:30:e6:38:41:
f8:8e:3b:c8:64:a7:5c:92:f0:a9:71:e1:b6:df:8f:
a0:07:bd:4a:f7:cf:f6:55:69:c6:1e:db:cc:66:18:
dd:1e:0a:78:b5:95:9d:1a:41:9c:36:69:34:2b:29:
54:74:8f:1b:44:23:c7:b3:4e:7a:58:a5:94:f3:e6:
aa:ad:98:8f:68:4b:55:29:ec:5f:45:cd:50:67:20:
0f:2b:04:18:ad:db:65:38:68:98:06:c9:f4:09:1f:
92:93:be:49:28:f3:f7:49:18:54:78:b7:98:19:55:
bf:be:88:bb:34:e9:aa:34:7c:c0:94:fd:56:3a:5e:
81:ca:08:e0:65:b8:ba:56:69:c0:23:e9:d1:51:64:
86:8f:1d:8c:aa:e0:ae:2e:03:91:d0:33:7f:b5:ca:
71:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:67:69:43:0A:47:D8:A2:A8:E5:2F:04:5F:16:58:02:90:79:26:E9
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/64C95268F11011EB8E63FC73C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.169.146.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:11:6e:4c:8b:29:f7:34:8f:63:3f:0a:bf:70:b6:d2:7c:1d:
a5:aa:cc:bf:b5:2a:63:58:a5:fb:65:b8:28:51:5e:20:3f:fc:
35:9f:53:73:b3:99:cf:fe:08:c2:00:00:24:12:d4:46:37:d3:
69:2a:35:d6:ad:68:72:2b:48:10:f4:d3:39:3e:bd:18:59:7d:
01:b5:15:05:75:0c:24:16:1d:2d:a9:13:c9:68:7e:c8:6f:fd:
2c:b4:5b:3c:02:52:84:a5:53:93:c2:1b:c1:42:f0:df:b1:1a:
ca:4d:f3:3b:79:2e:b3:17:98:28:7e:e6:62:2f:b2:aa:1d:44:
62:39:54:cf:e3:04:0f:e5:7f:f6:d1:d3:4c:67:cd:06:00:b1:
58:86:ad:ab:b4:c7:10:59:85:79:ba:dc:b8:7a:9b:e2:db:4f:
64:14:0b:6a:55:0b:37:68:a2:ff:17:cd:df:b0:fe:f3:67:a8:
31:46:1e:5a:82:54:ad:ee:e9:9f:3a:f6:f7:27:9e:ba:cb:f6:
b4:7c:c4:57:27:d5:6c:c5:7e:4f:9f:68:4b:92:69:9e:b7:cc:
b9:04:f5:80:45:92:50:68:15:90:72:34:d5:a3:41:e3:9d:51:
dc:cd:9c:ff:e4:d7:e1:93:81:bd:55:c3:41:f4:05:8b:7a:68:
0c:c6:bd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:43:47 2026 by rpki-client