
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DEEB59BA815411EFA1425F1FC4F9AE02.roa
File: DEEB59BA815411EFA1425F1FC4F9AE02.roa (raw, json)
Hash identifier: 1m3el1Qb/V8rqv+XOhRkumaY5ZzkhkoTrm6ZQcwFk98=
Subject key identifier: AB:2B:E1:8D:22:59:6F:32:EE:B8:0E:A9:46:B8:51:2B:1D:90:2F:38
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6E07
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DEEB59BA815411EFA1425F1FC4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:26:40 +0000
ROA not before: Fri 02 Oct 2026 15:26:40 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 140814
IP address blocks: 103.168.58.0/23 maxlen: 24
2407:a4c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28167 (0x6e07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:26:40 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcd30-9a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:70:d1:29:f1:bb:63:b1:7a:3e:0f:c2:04:96:
5f:45:9f:ba:ef:0c:2d:88:69:be:05:76:68:42:42:
71:ef:cb:8c:43:91:85:9e:ed:d2:72:74:4d:76:ac:
7b:69:11:05:c4:4b:8f:31:2b:29:40:42:38:aa:8c:
ca:4b:9a:d6:1f:3a:9c:cd:81:7f:f3:b7:22:7a:69:
1e:07:ee:6a:bc:39:4c:b6:9e:d5:39:f8:60:65:44:
74:41:88:1e:88:06:18:16:c4:76:c7:db:15:d5:af:
d7:32:90:68:d4:8e:6f:3f:93:e3:6b:a5:1b:16:9d:
59:07:a5:ed:86:ba:fc:bc:5a:f3:c8:cd:e0:1a:2e:
f5:bc:b2:39:18:36:33:24:22:ab:45:a1:ac:70:69:
d6:a4:d7:f9:09:5c:70:3c:70:e0:97:d7:a7:4a:19:
1d:ed:3b:da:56:2e:2a:98:f3:d5:e5:4b:c9:d9:f1:
4a:5e:5b:04:c0:87:32:9b:65:45:f3:ab:dc:02:af:
d6:1f:d9:6f:f4:3c:56:45:49:12:76:a8:fa:65:50:
be:79:09:75:ed:b5:eb:94:b4:c4:2e:9c:92:fb:70:
d9:34:75:58:85:96:ab:ad:43:e9:b1:58:89:ee:d0:
c6:e3:ab:a6:6a:3e:ac:c9:f2:4f:4f:27:86:03:37:
7b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2B:E1:8D:22:59:6F:32:EE:B8:0E:A9:46:B8:51:2B:1D:90:2F:38
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DEEB59BA815411EFA1425F1FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.168.58.0/23
IPv6:
2407:a4c0::/48
Signature Algorithm: sha256WithRSAEncryption
a3:04:2e:51:fc:b4:a6:f3:81:27:02:ec:bb:fc:12:28:81:c9:
5a:5f:8d:85:57:c5:ab:dc:82:80:01:cc:88:4d:b0:e9:24:f7:
02:83:bd:03:d5:e5:e0:85:fe:69:57:80:b2:83:0b:f4:82:33:
82:6a:ac:19:f5:41:9d:25:b4:de:2b:fe:d6:9f:fb:01:96:e9:
82:01:f4:a8:41:fd:cb:9f:ed:79:b6:5a:fb:73:77:3d:cf:e6:
94:34:00:82:9b:ba:af:68:c7:3c:db:cd:dd:23:2e:e0:4f:ac:
59:dc:55:a9:23:df:dd:08:10:15:e4:a5:a4:2f:87:c3:57:6a:
0d:6f:7e:89:ae:37:f1:ae:89:18:15:ee:dd:26:88:8e:33:e0:
33:17:c9:e1:f0:55:a1:a5:47:60:e3:51:de:de:2e:e7:d3:11:
71:60:c5:8e:98:02:92:19:67:a0:f7:31:90:4e:64:56:3e:c8:
d3:0a:64:de:ea:fb:6c:a1:9d:39:29:dd:8c:f2:bd:32:ce:f4:
a4:99:23:66:71:cc:7d:2c:90:d3:c8:c7:b9:75:d8:af:ce:8f:
69:6d:a4:36:d0:c6:08:9d:d5:9b:e8:72:1e:ab:c9:6a:e7:58:
36:6a:00:19:cd:4c:4b:27:cb:ec:a7:e7:b2:cb:8b:a1:26:6f:
65:a8:c6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:49:45 2026 by rpki-client