
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A7DF537AF98D11EF9F6D6028C4F9AE02.roa
File: A7DF537AF98D11EF9F6D6028C4F9AE02.roa (raw, json)
Hash identifier: PJdv9HUnU3gEbmXVAP8ZNrkfW7ndWNvHAsOjCE771BI=
Subject key identifier: CB:8A:8C:4A:F4:2D:66:A2:17:83:CF:84:1A:04:4D:DB:1C:6D:43:F5
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6E62
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A7DF537AF98D11EF9F6D6028C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:29:39 +0000
ROA not before: Fri 02 Oct 2026 15:29:39 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 150855
IP address blocks: 103.109.186.0/23 maxlen: 24
103.112.210.0/23 maxlen: 24
2401:10e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28258 (0x6e62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:29:39 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcde3-2a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:24:fb:1b:9f:71:be:e3:83:fb:09:54:5f:
ae:41:e8:32:d3:8b:b6:45:00:00:67:b0:49:38:fd:
f6:cf:01:34:51:12:73:7a:08:b5:58:77:1e:13:92:
3c:c8:44:a9:75:fe:ce:e9:89:e6:16:61:78:c6:5b:
30:41:b6:3a:ae:da:5f:bd:6a:e2:be:04:a0:97:ba:
c8:16:3a:f9:36:41:ba:d9:1b:fb:de:e8:93:f3:99:
5e:f9:1d:fd:07:2d:bf:83:4e:5f:33:02:cd:9f:9d:
04:8f:66:5d:0b:81:b2:a2:a9:27:0f:20:1b:5c:10:
fa:f0:1d:bc:62:1c:2f:3a:45:d8:b9:2f:bb:14:6d:
9e:5e:ca:fc:8d:ec:fe:5b:8b:04:87:5f:67:92:4b:
a3:f0:42:35:90:be:5a:68:c3:16:7d:0a:fa:ff:b6:
41:25:90:01:13:8c:61:86:90:7a:36:20:37:a0:90:
e1:eb:43:00:43:47:41:50:93:a9:86:35:fa:34:04:
51:cb:67:fd:37:7f:34:8a:a2:7d:3b:64:00:50:27:
4b:3c:74:9b:5d:43:80:39:42:d9:3d:d7:24:91:bf:
5b:38:24:5d:49:e3:67:63:af:d3:df:f9:a0:9b:1c:
b9:1f:73:10:42:08:a2:2a:bf:b5:9f:63:c2:b6:25:
2a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8A:8C:4A:F4:2D:66:A2:17:83:CF:84:1A:04:4D:DB:1C:6D:43:F5
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A7DF537AF98D11EF9F6D6028C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.109.186.0/23
103.112.210.0/23
IPv6:
2401:10e0::/48
Signature Algorithm: sha256WithRSAEncryption
1a:66:ed:b4:fc:70:4c:31:76:83:d2:41:f4:83:10:f7:db:42:
f3:cb:3b:73:f5:c8:d3:c4:ac:6d:61:55:8e:45:49:6c:cc:52:
33:79:24:b2:dc:b1:4c:65:25:22:c0:91:57:82:98:0b:1b:99:
fe:04:55:f1:ea:ad:32:d8:1e:b0:4b:ba:99:c6:88:82:ca:32:
78:35:9a:c8:e7:fa:eb:59:59:30:ad:2b:2b:79:c6:b1:e7:cb:
75:ba:b7:be:d0:54:a9:96:94:1d:98:42:0c:2e:98:41:29:17:
8e:a3:6f:d4:a9:16:21:c6:e3:4e:31:98:c9:a9:ee:02:ce:07:
46:09:5c:90:c3:56:69:53:8d:dc:ba:46:17:f7:90:50:72:60:
3d:00:4e:26:a8:0c:10:90:6c:fd:0e:39:7f:ba:d7:f7:67:82:
5e:4a:fe:bb:85:44:00:8c:e1:ea:06:c2:1e:f6:8d:57:1c:73:
a3:59:00:0a:07:ec:47:68:c5:a2:58:2f:3d:86:df:4f:30:8d:
d1:32:aa:6f:ba:43:36:9f:d2:af:9d:44:2c:e7:3f:92:98:af:
ad:8b:57:05:f2:2d:b7:a6:22:29:b3:b0:3b:2f:83:10:d4:5d:
84:43:b4:e9:a6:1f:1e:51:4d:fe:25:9e:6a:0e:82:63:2a:b7:
55:c1:70:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 10:42:04 2026 by rpki-client