
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BBF3D93E2B1B11F09C47FE63C4F9AE02.roa
File: BBF3D93E2B1B11F09C47FE63C4F9AE02.roa (raw, json)
Hash identifier: bVF6IjTRe2/JT/m2JfljHr0eYzNrRKVW4G37qsjUaew=
Subject key identifier: CC:97:6F:30:48:00:0E:D4:32:F1:60:BC:93:FE:52:95:77:40:70:19
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 5DD0
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BBF3D93E2B1B11F09C47FE63C4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:15:32 +0000
ROA not before: Thu 28 Aug 2025 14:52:57 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 131430
IP address blocks: 103.56.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24016 (0x5dd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:52:57 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a60c04-eebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8d:3c:82:ea:3c:9b:8d:33:f0:c5:2a:fb:6c:
21:c3:0f:8e:08:50:3f:76:78:af:66:5c:24:3b:33:
72:8c:ca:9c:da:72:1c:61:63:00:0b:5a:22:b2:ff:
1b:fd:a4:9b:74:c1:5f:2d:e4:23:63:f0:cd:8f:9a:
83:30:6a:5d:23:4d:18:66:ea:10:f4:cf:4d:4a:ec:
8f:13:a1:b0:44:13:98:0d:e6:9c:90:ec:ed:99:f1:
e2:e6:0f:9f:31:27:69:df:e0:81:d2:c1:31:85:82:
c3:d4:4c:56:96:45:aa:3b:3c:82:db:16:af:c7:d0:
fe:0e:8e:a8:e3:ce:97:3a:9b:23:3f:48:8f:f9:0e:
69:9f:f5:1c:05:b2:a1:e5:6a:56:5a:6a:d8:36:f9:
60:f1:c6:e5:c9:a9:5f:82:ba:25:6c:f1:1a:32:48:
a8:83:14:f5:b0:d1:23:0c:8c:af:a0:17:8d:8c:e0:
c7:06:9d:28:23:5f:aa:b9:77:92:ee:ee:81:97:2f:
67:11:da:9f:fa:1b:c6:86:87:aa:6e:0f:bc:73:d2:
be:f0:68:d7:11:5d:14:88:8d:51:76:7c:f4:af:53:
1f:87:d2:b3:8e:d5:e9:73:e0:b3:bf:68:f5:e2:9b:
48:c5:06:51:96:c8:59:f5:a7:bf:f0:68:08:e5:11:
f6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:97:6F:30:48:00:0E:D4:32:F1:60:BC:93:FE:52:95:77:40:70:19
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BBF3D93E2B1B11F09C47FE63C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.56.168.0/22
Signature Algorithm: sha256WithRSAEncryption
30:fc:80:4d:02:f9:44:53:4e:54:92:7b:34:8a:29:8a:06:13:
17:d3:a5:81:d3:10:e8:c4:c9:ed:40:60:7c:e4:d3:80:8f:50:
ad:88:8a:e6:b5:6e:96:d7:f8:4f:81:da:c5:85:18:f9:0c:3a:
55:7a:6c:08:27:1e:dc:8f:cd:50:c1:98:5f:32:fe:ea:16:63:
1f:5c:fc:53:f2:07:36:4e:f1:a4:cc:b5:53:49:a6:7b:78:4a:
49:51:8f:c4:cb:7f:fd:fa:8b:f6:ea:08:9f:25:fd:9e:02:4c:
d9:80:fc:68:03:57:9e:80:28:91:c9:d4:68:ec:68:cd:0c:73:
36:78:6a:08:96:2e:8b:b4:86:0d:11:71:14:9a:cb:51:a1:31:
3e:42:48:c2:ce:7c:c9:6b:f5:2e:52:58:78:9c:7e:81:18:ff:
7e:6d:6e:79:81:1a:05:18:48:5f:ab:c6:1e:82:f0:80:38:70:
ae:de:ae:8b:fe:0d:d5:f9:f1:55:1f:a2:65:b4:40:a6:cd:29:
b2:f4:b0:ee:65:7c:1c:e7:ff:ef:52:5f:17:20:29:32:72:f4:
82:ab:1f:a4:24:14:3b:61:0a:25:da:ed:98:65:68:de:ab:69:
ec:02:d3:a9:0a:33:2d:3e:82:83:0f:bc:d0:1b:ad:10:e6:cc:
81:4c:b1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:45:00 2026 by rpki-client