
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C1C6BCEE96CB11EF8176AD43C4F9AE02.roa
File: C1C6BCEE96CB11EF8176AD43C4F9AE02.roa (raw, json)
Hash identifier: 3WFTLMDco1V6h48ytePHkHYLvyz3j66WaIZPra0+Snk=
Subject key identifier: 7F:0E:22:62:0E:EC:EC:8C:A6:E7:88:7B:38:28:03:D9:97:B6:A6:4A
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6DD5
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C1C6BCEE96CB11EF8176AD43C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:25:09 +0000
ROA not before: Fri 02 Oct 2026 15:25:09 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 135963
IP address blocks: 103.194.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28117 (0x6dd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:25:09 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfccd4-24f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ef:af:da:51:bf:d5:1a:8c:cc:2d:83:bb:95:
ad:d1:ab:a3:b4:f2:1b:d0:e5:c0:9c:df:53:29:63:
f6:da:a4:c6:7c:ba:f8:a2:dd:c1:b6:ea:c2:62:d1:
a6:23:c0:1e:57:e9:13:96:98:11:d8:0c:30:dd:62:
63:7a:7e:dc:d8:52:10:77:85:35:b7:26:41:fc:eb:
47:03:65:d9:0d:d8:48:4e:9b:0b:a4:0d:da:3e:19:
f3:45:d1:62:6d:e0:70:7d:eb:61:c9:7a:e7:a8:d1:
1d:eb:c6:49:e6:54:d8:93:7e:80:83:b9:92:8f:4c:
e3:ed:1e:85:19:7e:3d:2c:8d:b5:33:20:63:f6:37:
58:59:06:af:52:e9:2c:a9:59:ad:ae:52:f3:db:5d:
34:1e:13:9f:a2:79:20:1a:36:a2:75:a9:60:bc:dc:
43:8e:3e:b2:86:80:0b:9e:da:44:06:48:4d:24:0d:
43:0d:6b:55:bc:c6:af:e7:88:ec:97:ff:7c:95:d2:
07:f6:70:85:fd:58:e4:44:a8:42:cc:a0:11:33:47:
dc:1b:e1:87:06:71:87:fd:c4:e3:75:e2:15:50:14:
cb:b7:ec:3a:b2:65:87:98:fa:bc:5d:91:1b:88:9a:
b3:53:4d:c7:43:62:7e:7a:9e:08:fd:17:ea:1e:6a:
96:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0E:22:62:0E:EC:EC:8C:A6:E7:88:7B:38:28:03:D9:97:B6:A6:4A
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C1C6BCEE96CB11EF8176AD43C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.194.188.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:7c:a2:5e:e6:10:bf:0b:09:97:a7:35:eb:69:60:b1:25:f3:
66:09:63:89:cb:2e:7e:d8:02:76:32:a9:4c:4d:3a:d4:b6:90:
37:18:b6:c9:a7:6c:16:e0:b2:e0:e1:6a:26:d4:01:33:90:81:
44:38:a3:cc:fb:74:6c:e6:6d:d5:8f:f1:f2:b4:ae:04:45:c5:
e0:b9:af:29:17:fd:4e:d1:f0:36:19:a2:8c:3c:bf:31:c3:bf:
e0:69:f5:8d:2e:20:9e:69:b2:17:99:0c:33:91:19:b0:cd:50:
c1:4b:3b:cc:c6:d4:6f:e8:de:1b:38:b0:5e:7a:c7:23:45:a6:
a8:bd:c5:be:95:d3:6a:1f:d6:ac:87:9e:de:a2:54:5b:7c:04:
d1:f3:16:a2:dd:59:fb:d9:ce:9b:79:25:b6:d0:84:c6:d9:9e:
17:9f:65:c4:80:f1:47:6e:46:c9:f4:86:a0:f6:39:54:fb:f9:
e7:fd:e1:ee:e8:37:1a:9b:b8:71:05:20:c2:80:da:b5:15:13:
a6:fd:fd:e2:ef:c2:9b:ef:6a:cb:c5:5c:c4:c1:07:37:36:10:
42:b9:83:39:fb:69:0c:db:c1:d3:32:6b:0e:4c:c0:b1:de:23:
b2:c6:e5:a6:10:7e:35:ee:a5:02:36:b5:b1:bd:63:51:35:dc:
3a:a1:36:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:18:59 2026 by rpki-client