
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E0E80D22EECC11EFB9CDAD3FC4F9AE02.roa
File: E0E80D22EECC11EFB9CDAD3FC4F9AE02.roa (raw, json)
Hash identifier: a+LHtmZzPtLDmQxnCo+hHemLMbDdS06WfXuQB9xFWFQ=
Subject key identifier: 1A:C6:A5:03:EB:34:B1:85:4E:BD:82:7E:75:D2:0A:CE:35:20:A3:AE
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6E4D
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E0E80D22EECC11EFB9CDAD3FC4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:28:54 +0000
ROA not before: Fri 02 Oct 2026 15:28:54 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 150698
IP address blocks: 36.50.236.0/23 maxlen: 23
103.90.228.0/22 maxlen: 22
103.164.36.0/23 maxlen: 23
103.169.172.0/23 maxlen: 23
103.236.174.0/23 maxlen: 24
2001:df6:fc80::/48 maxlen: 48
2401:1620::/48 maxlen: 48
2401:5ea0::/48 maxlen: 48
2401:71e0::/48 maxlen: 48
2401:7520::/48 maxlen: 48
2407:34c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28237 (0x6e4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:28:54 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcdb6-de70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:62:e0:15:07:5c:c2:8b:67:3b:39:0c:3e:78:
70:d8:aa:dc:b0:32:cf:3b:7b:71:5c:10:06:86:6c:
df:af:c9:38:9e:b8:b3:8e:3c:4d:b9:db:ac:c5:61:
1e:55:19:7d:00:fe:c8:c1:a0:9d:2b:5a:de:03:b2:
bf:c2:2c:5b:7b:78:6f:b1:cf:d6:c2:0b:2d:d3:07:
35:cf:c4:08:88:ad:4d:62:53:c7:f6:30:a2:b4:c2:
f9:7b:f2:34:ae:12:6e:0d:82:fe:f4:d0:8f:a0:7a:
85:a8:19:46:13:fc:bf:ad:36:6f:8a:e7:79:bb:af:
11:b9:45:6a:29:53:3f:7d:ec:1a:f4:ee:a0:72:0f:
f4:f6:55:c4:83:c3:cd:53:03:75:18:10:69:50:3f:
2c:97:32:0f:0c:02:db:ed:3a:75:8c:9c:9d:b1:e9:
09:bd:2f:f4:68:d5:e3:c5:ae:67:28:f8:86:f5:81:
72:5f:f6:f5:bc:a5:ce:0d:4a:a0:c3:cc:5c:d7:6d:
f7:53:51:59:db:78:ba:78:51:7b:23:bd:55:bd:1d:
9f:e9:96:15:01:4d:76:2a:a1:17:16:92:1e:62:a5:
de:16:41:75:a9:4f:87:fc:d7:b8:99:67:17:82:80:
3b:8c:40:f3:85:9f:5a:0c:bf:97:56:ad:39:3b:5b:
26:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C6:A5:03:EB:34:B1:85:4E:BD:82:7E:75:D2:0A:CE:35:20:A3:AE
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E0E80D22EECC11EFB9CDAD3FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
36.50.236.0/23
103.90.228.0/22
103.164.36.0/23
103.169.172.0/23
103.236.174.0/23
IPv6:
2001:df6:fc80::/48
2401:1620::/48
2401:5ea0::/48
2401:71e0::/48
2401:7520::/48
2407:34c0::/48
Signature Algorithm: sha256WithRSAEncryption
b3:96:87:6e:81:2f:42:00:a1:78:ca:15:1f:de:4f:ae:4d:75:
8f:34:9f:c5:74:bd:f6:ef:da:c2:5b:9d:0b:f8:99:87:41:aa:
09:bb:a1:47:3e:8a:08:ac:bb:35:9d:e0:10:41:ba:ef:bc:45:
00:a7:d4:4c:52:d3:dc:ae:5c:a0:81:eb:78:f9:25:0e:20:19:
31:e6:f0:d9:8a:d0:69:bd:e1:8f:54:2b:34:ac:6e:bd:9e:fc:
25:92:58:02:9d:78:39:fb:1a:b4:19:a4:b9:72:41:53:51:e3:
7f:2a:64:3d:a0:c1:ba:1c:81:d5:9a:60:d6:43:72:45:8e:4e:
f3:0d:ed:93:e8:97:64:70:e3:01:3a:5d:fd:d5:c0:80:15:06:
d6:93:89:a6:7c:2f:41:76:39:bc:5a:ca:dc:c7:e2:27:95:31:
fa:af:40:0f:5f:f2:b6:35:6c:d4:65:3e:79:c3:89:2c:b7:df:
a9:e5:49:12:3b:d7:cd:1d:78:7d:15:2f:60:b8:47:13:41:09:
87:37:be:d1:e2:04:9a:55:53:ee:24:31:b7:f0:76:bb:9d:97:
06:e9:90:b9:fc:14:15:43:38:c9:62:de:a2:cd:fc:3a:5a:a4:
03:f9:b1:2a:c6:1a:78:07:bd:d6:25:a9:30:46:72:19:28:73:
ec:be:5c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:08:20 2026 by rpki-client