
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C554FDECA0FD11EC924D4461C4F9AE02.roa
File: C554FDECA0FD11EC924D4461C4F9AE02.roa (raw, json)
Hash identifier: Ytfazm0IOEIV4e+hseHG3zkePfJ9fwTZroy3vDvE7rE=
Subject key identifier: E3:46:8C:FA:C8:42:28:88:1B:1C:62:B6:24:18:C7:8C:1B:46:2C:BF
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6F47
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C554FDECA0FD11EC924D4461C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:37:54 +0000
ROA not before: Fri 02 Oct 2026 15:37:54 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 63755
IP address blocks: 103.68.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 10:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28487 (0x6f47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:37:54 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcfd2-175a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:05:34:09:f7:69:b2:8d:b5:a0:06:81:28:1e:
d6:64:02:ce:cc:af:b9:6a:c5:99:76:3a:0a:2a:61:
42:f4:76:ff:3c:df:73:29:3f:a8:32:76:d5:82:b4:
be:2e:83:33:b7:89:e9:57:e1:fc:a9:03:55:1f:dd:
e4:c2:9c:43:ab:37:dc:51:d8:bc:84:fc:84:46:b0:
c7:03:4c:e1:b9:2b:e3:bd:9f:62:7e:85:22:fb:33:
be:64:ca:8e:9f:e7:18:71:6f:7d:09:ac:c5:c5:b5:
1b:eb:f1:45:8b:d7:51:ab:f6:81:ee:aa:40:99:b6:
d9:cd:fd:2e:d7:7d:35:b0:1d:af:9e:a2:2e:25:09:
c1:56:48:ed:c8:d1:a5:1a:0e:81:4f:a4:3f:a0:4b:
a3:3e:bb:45:2f:ef:af:da:b1:8b:78:7b:b9:09:d6:
1f:c3:52:10:c0:64:5b:18:53:35:b3:1f:5a:c3:8c:
b2:20:eb:d6:0a:12:5f:22:11:d0:bd:b2:e3:01:aa:
18:82:6c:de:72:b3:97:6a:31:23:bd:e3:15:1c:f6:
76:f6:4f:37:ba:6b:dc:2a:58:a0:16:21:e3:6e:98:
ec:cc:bd:fd:4f:9d:73:c8:6e:c9:b6:e4:64:dc:66:
03:e8:28:4f:11:bd:ab:0a:56:ee:30:47:6b:eb:22:
fa:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:46:8C:FA:C8:42:28:88:1B:1C:62:B6:24:18:C7:8C:1B:46:2C:BF
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C554FDECA0FD11EC924D4461C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.68.244.0/22
Signature Algorithm: sha256WithRSAEncryption
91:05:c3:2b:52:26:08:93:03:15:df:32:ae:39:20:4f:e6:3e:
81:78:6f:c3:13:e1:f6:71:0a:78:d4:e3:c0:b2:88:e7:89:89:
99:42:0a:f3:17:c8:f1:3e:2f:ab:e7:e6:82:b6:94:da:9c:c5:
fd:f0:ba:b4:7f:ec:ff:dc:4f:d5:6d:1e:43:32:9b:5c:09:c9:
f1:b3:0a:7c:71:0f:5f:d3:8c:46:b4:9f:98:bf:bc:7d:bc:e0:
bd:5f:26:1b:04:08:20:73:1a:3e:ba:52:c3:f6:dd:f4:13:1c:
28:98:28:bd:a0:33:20:75:09:68:e9:78:bb:0f:31:d8:11:2d:
9f:9b:e0:bf:22:2c:97:19:c7:e1:9f:b2:8a:0b:6e:21:3f:8a:
a2:a7:24:58:9d:ef:2d:b7:39:89:2c:d7:5c:d4:06:24:98:1d:
5a:dd:fb:aa:8d:37:3b:ff:a6:3b:8e:a1:58:ca:6b:3b:c9:3f:
9e:fb:ff:d5:4d:24:90:9f:80:28:6c:d8:e2:df:ff:2a:7b:a2:
d8:2f:0f:a9:bb:34:7f:53:0f:cd:8d:a3:fe:a7:7f:5e:aa:ca:
7b:b0:a7:2e:1b:33:68:93:f7:09:63:29:3e:4c:cd:22:0d:a6:
8e:05:ec:27:c2:ed:ba:f7:f1:f1:0c:75:fb:6e:58:db:1c:db:
d7:53:01:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:19:54 2026 by rpki-client