
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7FFB419E3CD711EEBE32D031C4F9AE02.roa
File: 7FFB419E3CD711EEBE32D031C4F9AE02.roa (raw, json)
Hash identifier: rwWbA7ATCbPv4rvh0V3mG4hL9osBZbTHMwHOxczHn9Q=
Subject key identifier: 10:46:24:2F:10:FE:88:11:1D:8E:4B:49:CA:BC:85:1D:42:B3:10:E3
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 5E6A
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7FFB419E3CD711EEBE32D031C4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:18:06 +0000
ROA not before: Thu 28 Aug 2025 14:55:16 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 150847
IP address blocks: 103.209.188.0/23 maxlen: 23
2401:520::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24170 (0x5e6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:55:16 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a60c9e-fedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:88:8d:2e:14:94:46:f6:40:0e:be:64:da:ae:
d6:73:5b:59:f8:13:b3:15:cd:b3:74:39:a5:14:f1:
23:11:f8:ec:d4:be:b0:9e:34:97:ce:27:f4:d2:9f:
ee:ba:f1:c9:04:e9:7d:eb:e3:4b:66:03:7b:20:80:
8b:2b:70:b2:85:a6:0b:92:e4:96:5d:e0:c6:29:7a:
ba:90:89:84:58:a2:86:28:92:0c:de:47:b6:e3:43:
9b:e7:de:32:8c:5a:e8:75:ae:52:ff:dd:29:89:f8:
d6:8f:9c:e9:75:05:a9:44:73:4e:03:ab:cb:c9:98:
1b:66:d8:a5:90:a5:06:a1:17:dd:98:75:e1:ce:d3:
d1:d5:5c:94:38:0d:ef:fb:01:76:ac:1f:86:d9:b8:
dd:9b:1a:a7:16:e9:16:5b:4c:16:8d:23:da:bf:86:
66:fc:9f:c2:7c:08:54:99:34:c8:09:51:85:f8:6f:
7b:12:a4:2a:ba:82:2c:0c:21:e1:87:25:4b:3c:7c:
d7:8b:ec:82:5d:ca:22:3a:1d:bb:5c:ea:d3:4d:68:
9e:83:64:c4:32:8e:c3:30:4e:f6:3b:d3:03:6e:79:
fe:8b:1e:77:af:08:33:70:4c:3b:fa:31:7b:96:b6:
ff:de:be:1a:4f:99:d2:61:46:aa:a1:3e:91:65:9f:
11:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:46:24:2F:10:FE:88:11:1D:8E:4B:49:CA:BC:85:1D:42:B3:10:E3
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7FFB419E3CD711EEBE32D031C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.209.188.0/23
IPv6:
2401:520::/48
Signature Algorithm: sha256WithRSAEncryption
1e:50:99:a3:f9:2a:a3:73:ad:1f:84:3c:da:6b:9e:a4:4d:94:
8d:be:7b:3b:b0:1d:66:38:dd:a6:38:a7:89:df:8b:e1:3a:5f:
37:b5:c2:7e:17:67:30:14:39:39:96:f7:12:aa:3a:b4:d2:45:
3e:0e:6d:2c:45:b7:65:d4:f1:96:42:97:01:e6:b0:5e:2f:d3:
cb:f6:b5:ac:71:98:7b:1a:ce:50:28:95:5c:9f:46:2b:d3:68:
6d:48:fd:40:ce:5b:f9:3e:f2:96:fa:5f:f4:b6:d4:f9:3d:78:
89:7b:5a:53:4d:c5:e7:79:fc:08:27:60:6d:31:8c:1f:2b:19:
a8:46:53:2c:11:cc:f4:24:31:7f:53:95:75:25:c6:03:e7:be:
a1:47:7b:b9:ca:12:ce:98:7c:20:ce:81:2a:ed:b7:c5:c3:3b:
96:b8:3d:c8:d3:aa:f6:27:b0:44:cf:75:7e:09:eb:1b:0b:9a:
10:e4:e0:c1:7c:d1:18:31:8c:72:8c:d9:45:67:cf:5f:42:86:
48:38:71:08:00:1d:6f:71:54:ab:a0:98:28:41:2f:9b:b8:ed:
e2:24:2f:46:26:63:2b:af:50:18:a7:f9:aa:49:1a:a3:1b:a5:
1a:18:02:fe:42:45:98:4d:6c:f8:ad:f3:29:28:22:65:44:d1:
d3:50:8c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:46:25 2026 by rpki-client