
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/725132DE609611F1B8BC3DA77347A888.roa
File: 725132DE609611F1B8BC3DA77347A888.roa (raw, json)
Hash identifier: g9T7mI2FiochD6u/C3wAQnL3Ac99kr1iU8sDBlAb9Rs=
Subject key identifier: DF:27:8B:95:86:D0:D5:63:FC:23:8D:74:96:04:3A:E7:3B:77:5A:9C
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6C9E
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/725132DE609611F1B8BC3DA77347A888.roa
Signing time: Fri 05 Jun 2026 04:24:30 +0000
ROA not before: Fri 05 Jun 2026 04:24:30 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 140817
IP address blocks: 103.20.102.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 06:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27806 (0x6c9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Jun 5 04:24:30 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a224f7e-d56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7a:75:18:a0:df:00:54:3c:42:ae:83:c9:f2:
8e:2d:3e:37:a0:73:2c:c8:12:9a:cf:84:b1:07:5d:
a4:e0:5f:ed:b3:b1:06:f1:07:4d:b4:e3:a0:ff:53:
62:b7:ba:66:f4:89:e2:83:02:dc:c2:5e:e2:28:6b:
23:0c:53:59:e9:b2:82:a7:a2:5e:86:cb:73:a5:8c:
1c:2f:8a:3e:cf:b9:ca:ad:c4:d4:f7:3e:03:a7:d8:
bd:fe:52:94:57:bf:64:28:6e:65:f1:db:0a:a9:02:
7d:c4:82:42:08:9b:18:0a:17:3b:fc:20:ac:5a:40:
95:77:21:b4:f7:1f:29:f2:be:e6:cb:ff:7f:48:2a:
d1:fc:62:e5:ac:f7:58:3a:2d:be:18:19:b8:51:09:
b4:fe:90:44:ed:62:b6:9a:7a:44:1f:ef:7d:69:53:
ea:8e:c9:79:f1:da:64:98:9e:ac:f0:eb:65:61:e4:
e2:96:c3:dc:af:36:24:5f:60:0c:c7:90:f8:23:99:
cd:93:82:5e:f1:43:10:5f:c1:9f:59:ff:e1:15:3b:
62:47:7f:8d:b8:b6:9d:9a:7c:a4:4d:37:97:dc:31:
17:a3:23:e7:8e:e7:31:50:1b:47:17:aa:66:49:51:
d5:9f:af:da:f8:34:f4:36:a6:f9:3f:26:47:69:44:
32:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:27:8B:95:86:D0:D5:63:FC:23:8D:74:96:04:3A:E7:3B:77:5A:9C
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/725132DE609611F1B8BC3DA77347A888.roa
sbgp-ipAddrBlock: critical
IPv4:
103.20.102.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:a0:e4:f1:62:6b:a1:5c:2c:39:c8:dd:e8:f4:f9:71:f3:57:
e7:05:db:e8:37:f5:1a:93:0d:52:b3:e4:fe:c3:bb:70:d3:b6:
7e:fb:fd:6b:fc:7a:0c:1d:4c:a1:c2:95:ea:ab:08:16:cb:58:
97:2e:a3:58:83:e9:39:31:bb:5c:9e:b9:6f:41:f6:87:92:98:
b2:d1:26:2c:42:f0:b2:dd:07:a5:2d:f2:1e:46:eb:a7:67:fb:
24:de:a7:15:e4:d9:f8:ad:d8:a1:14:35:7c:c7:7d:4b:aa:79:
46:cf:06:91:2b:c0:d4:e5:85:90:fe:f2:b1:d2:09:aa:27:5b:
87:e7:0c:08:0f:f2:2c:d2:75:c1:80:16:17:77:76:95:93:8e:
43:4c:bd:13:79:ed:7c:93:f1:c3:4e:2d:d2:c2:87:b0:0b:1c:
93:4e:e0:5c:e1:a9:69:6f:fb:36:ba:ce:55:b3:70:5f:4f:b6:
68:f2:55:0c:63:77:50:37:f2:f4:a3:71:c1:c8:30:09:f5:79:
8a:43:01:6b:13:7c:d3:2e:be:47:8e:cb:d7:50:7f:96:88:db:
5c:06:d9:24:90:b1:29:48:b3:fd:ca:50:99:a9:35:08:08:1f:
e7:73:9a:b4:71:22:1e:a1:c7:e3:63:8f:ef:a5:fb:95:06:f6:
29:06:db:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:16:57 2026 by rpki-client