
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F7422058327711EDA26C6B10C4F9AE02.roa
File: F7422058327711EDA26C6B10C4F9AE02.roa (raw, json)
Hash identifier: vD81NPMBTV0FAw2lyt3xkWK+gzxPXyso7OYQqxe8RhA=
Subject key identifier: B8:05:C4:41:D6:00:A5:B2:AD:C4:F2:45:2E:F1:61:9A:49:AB:B6:CE
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6C9A
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F7422058327711EDA26C6B10C4F9AE02.roa
Signing time: Wed 03 Jun 2026 09:38:15 +0000
ROA not before: Wed 03 Jun 2026 09:38:15 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 63760
IP address blocks: 45.252.248.0/22 maxlen: 24
103.110.84.0/22 maxlen: 22
103.221.220.0/22 maxlen: 22
116.118.48.0/22 maxlen: 24
116.118.84.0/22 maxlen: 24
2401:75e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 06:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27802 (0x6c9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Jun 3 09:38:15 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a1ff607-5c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d0:06:f9:d1:76:7f:71:26:48:8f:d1:fb:e6:
0c:23:95:cc:9b:8f:64:0d:3c:b1:4d:2e:90:5a:32:
db:c7:2a:3d:60:be:a8:90:da:80:86:ca:9d:c6:7d:
a0:8c:de:50:9f:a7:18:4a:3e:d1:a0:ac:57:57:a5:
9b:c6:6b:06:05:2b:cb:37:38:9c:3c:6d:af:22:cf:
ce:d1:e7:6c:bc:62:f2:5b:48:90:4e:8c:88:e0:2a:
29:49:e6:b3:48:1f:96:23:72:47:c6:02:55:42:da:
07:65:98:09:62:79:80:7c:86:c2:6f:34:a9:0f:40:
c0:da:9f:dd:13:70:ef:5c:d2:97:0c:7f:1f:72:c6:
1a:ab:a5:2d:d0:6c:74:74:d0:bb:5a:21:9b:1b:b7:
48:4d:f0:03:42:c5:0b:1b:59:1d:c5:5c:61:69:35:
8d:05:46:e5:6a:ff:9b:e8:7f:40:7f:cb:e4:12:07:
b9:1c:f7:74:99:96:f4:39:0a:10:0b:db:cc:4a:14:
50:c8:1d:fc:ea:7a:33:e9:ef:36:9e:cd:b3:95:22:
0d:ea:df:5f:37:d6:25:b7:ba:8b:f0:91:35:3c:a6:
e0:47:c5:fb:d7:d4:12:74:6f:7e:5e:a3:b8:1d:c3:
36:6d:2a:40:57:26:be:54:34:b9:96:06:1d:8e:73:
f1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:05:C4:41:D6:00:A5:B2:AD:C4:F2:45:2E:F1:61:9A:49:AB:B6:CE
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F7422058327711EDA26C6B10C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.252.248.0/22
103.110.84.0/22
103.221.220.0/22
116.118.48.0/22
116.118.84.0/22
IPv6:
2401:75e0::/48
Signature Algorithm: sha256WithRSAEncryption
be:e8:ac:f6:e3:bd:d5:22:8a:0a:fd:0a:71:cb:d6:61:07:46:
4a:bf:78:06:d1:c5:0c:cb:76:ae:2c:88:6d:78:be:23:9e:a2:
bf:c6:c7:30:82:2e:ef:c8:31:b4:09:43:c3:40:8f:b4:60:01:
e3:a3:99:3a:44:e8:72:c3:cf:ac:8f:c2:aa:d6:e7:2c:61:c8:
b0:d9:59:40:fd:13:90:9e:27:e4:cf:0a:a6:84:34:97:f2:a9:
59:03:2e:eb:9e:95:c4:6a:57:aa:35:56:32:bd:5e:41:82:12:
ee:ad:af:31:fc:7d:f8:3f:83:84:c3:2e:f9:77:39:c5:60:e0:
16:6a:4b:61:fd:d0:9f:e3:20:5e:1d:99:02:99:1b:13:36:67:
7d:74:00:a1:ae:65:b5:38:25:da:49:e3:e2:d2:80:4f:50:51:
09:80:ee:89:c8:f1:28:2a:ef:c7:de:c1:f0:ac:be:fd:10:ca:
29:14:bd:8c:ab:fa:0f:4f:09:24:15:ed:c8:68:2f:00:15:be:
c6:70:7d:fe:ba:1b:0c:1e:7f:c4:4e:4e:c8:21:2f:d9:87:3a:
a0:57:9c:d1:5b:84:95:e4:b3:3b:13:75:02:92:32:5c:e9:9d:
9b:1e:33:ea:af:16:43:49:9b:a8:a5:b9:d8:6f:17:66:57:96:
d8:1c:e4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:23:33 2026 by rpki-client