
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D2EC9F1685DF11F1B95C681C8EEE528E.roa
File: D2EC9F1685DF11F1B95C681C8EEE528E.roa (raw, json)
Hash identifier: g2JScrOG26WLXKmyWLe4+4eoj4KFs9VQa1tjvsN51RU=
Subject key identifier: D0:86:E8:2C:B5:D4:95:16:6A:18:BC:1F:E4:66:76:35:7A:5E:37:04
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6DDE
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D2EC9F1685DF11F1B95C681C8EEE528E.roa
Signing time: Fri 02 Oct 2026 15:25:25 +0000
ROA not before: Fri 02 Oct 2026 15:25:25 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 135981
IP address blocks: 103.141.142.0/23 maxlen: 23
103.168.52.0/24 maxlen: 24
2405:1a40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 10:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28126 (0x6dde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:25:25 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcce5-64f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4d:27:80:f4:ce:c6:f6:2c:30:4d:4f:dd:cc:
de:90:45:51:99:cc:5d:ea:ca:86:5d:d6:8e:29:45:
62:4b:19:b0:42:9b:93:43:32:11:ca:72:f0:ac:9d:
d5:f1:08:c9:4f:e0:8a:b5:af:f9:81:32:ed:01:c7:
73:7c:b6:b0:e6:eb:11:54:02:f3:3f:85:21:d4:da:
cc:12:11:e4:5b:35:f2:39:e8:2c:c7:bb:57:4b:06:
7a:83:78:26:69:2a:92:ad:7b:e3:6f:ca:13:90:b5:
14:71:05:3c:2a:88:62:1d:a6:d7:2c:22:ac:b9:17:
b1:dd:35:b0:af:0a:a0:4d:17:2a:58:8e:f6:9a:69:
d4:a0:25:b5:10:a3:50:ba:30:76:71:1e:12:82:c2:
e7:1e:72:cd:3c:e5:6f:28:b7:c5:a3:82:76:ee:0b:
0f:75:74:89:5b:e1:61:2c:32:d9:af:57:9c:65:9b:
2d:32:4b:69:07:7e:72:cd:d8:ce:8f:be:19:29:ee:
96:96:22:1c:b7:6c:38:13:be:ef:bf:31:c6:12:98:
85:c7:ff:a3:eb:8f:48:5d:b4:de:8d:e3:75:f0:ad:
63:dd:b9:9d:69:84:7b:03:2d:ed:14:95:39:8f:fe:
6e:e8:20:68:0d:60:e0:79:23:a4:0a:cf:1a:ca:5c:
e6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:86:E8:2C:B5:D4:95:16:6A:18:BC:1F:E4:66:76:35:7A:5E:37:04
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D2EC9F1685DF11F1B95C681C8EEE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
103.141.142.0/23
103.168.52.0/24
IPv6:
2405:1a40::/48
Signature Algorithm: sha256WithRSAEncryption
50:0e:98:57:89:69:3d:f6:96:4e:cb:31:39:85:db:53:1f:97:
ae:71:78:ae:e2:aa:67:a9:01:80:22:5d:6f:39:fc:3a:c2:06:
eb:0b:1f:72:2c:e5:83:38:02:28:e3:88:3c:ae:a2:1e:1f:45:
f7:fb:61:ce:7d:b4:7e:04:b6:c8:4e:c9:3c:d9:2f:31:f5:31:
36:d4:80:55:25:fc:f1:6b:f6:89:da:7f:99:78:f3:c4:8c:9e:
6a:2e:c1:c6:60:59:d2:7c:33:ae:5b:00:7f:2f:c1:bf:c0:64:
bb:e6:ea:c3:30:62:63:4d:15:fa:21:be:b9:b6:2d:f1:a1:dc:
90:1d:58:64:61:18:09:3b:77:ee:b9:93:13:ad:89:c3:0b:f3:
f8:a6:77:f2:f5:f7:7a:3b:15:ac:7c:32:37:8b:cd:cd:c5:04:
d5:f8:7f:d6:bd:b1:64:ff:c6:31:db:30:77:bb:ce:12:64:8e:
45:37:ff:a4:6a:58:6d:6d:47:66:ef:82:aa:3b:4b:a7:cb:95:
ad:53:87:e2:5c:f7:31:36:96:53:16:18:c9:4f:2b:91:b3:c3:
05:c8:52:e6:bf:9d:57:94:00:26:df:2c:05:91:60:94:56:0e:
f2:01:fe:0c:76:e9:a8:c1:dc:b8:a9:ae:bf:95:ac:67:5f:67:
53:de:3b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:19:50 2026 by rpki-client