
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/B2D0D768766011F08F4AF05AC4F9AE02.roa
File: B2D0D768766011F08F4AF05AC4F9AE02.roa (raw, json)
Hash identifier: Zd6EOJOQWrL4SQgD9iMqOoFa/KkFBauJTV2e7xJlSJA=
Subject key identifier: C3:C4:C4:F4:3F:D9:55:27:2A:AA:52:F8:D4:91:C2:84:2D:06:69:8A
Certificate issuer: /CN=A91AADAF/serialNumber=68C2B588D1685A58742D8A2E188865DB31103CF7
Certificate serial: 0185
Authority key identifier: 68:C2:B5:88:D1:68:5A:58:74:2D:8A:2E:18:88:65:DB:31:10:3C:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/B2D0D768766011F08F4AF05AC4F9AE02.roa
Signing time: Tue 29 Sep 2026 05:55:52 +0000
ROA not before: Tue 29 Sep 2026 05:55:52 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 153952
IP address blocks: 103.75.236.0/24 maxlen: 24
2001:df1:c80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.crl
rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 05:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AADAF, serialNumber=68C2B588D1685A58742D8A2E188865DB31103CF7
Validity
Not Before: Sep 29 05:55:52 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6abb52e8-72eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3a:64:b3:df:5e:20:2b:a9:96:3f:f7:32:43:
96:5e:29:2e:e3:53:b7:ec:24:c6:ef:b3:52:01:be:
1c:a9:51:28:74:79:b1:ca:00:71:7a:45:da:46:f7:
d4:b4:8b:9d:a9:0d:9f:b1:5b:b1:47:60:05:b4:58:
cd:a0:96:a5:00:cc:a2:a9:2b:b8:1a:30:fa:e2:c9:
fb:9a:eb:8a:dd:8c:e8:50:7a:80:cd:b5:40:18:d5:
a9:61:45:78:9c:a7:e2:12:0f:83:0a:0d:b8:87:b5:
02:35:3b:a4:7a:d9:23:b4:a2:ca:a5:24:50:9b:a3:
26:7c:3c:ec:27:b2:f6:b8:84:fc:8f:ff:5d:2a:82:
06:62:3f:64:d4:ff:b4:f2:a9:0c:19:34:91:3a:98:
ea:b2:d3:26:60:a0:98:92:c9:10:59:a5:ae:7d:c0:
a8:34:bb:92:9f:d5:9f:90:6a:5f:a0:2b:07:8e:b8:
4f:2c:d3:e2:17:61:67:b3:1a:89:8a:0b:86:a4:07:
b0:8b:b5:81:8d:b0:dd:19:92:44:37:7f:f8:26:cf:
f9:18:67:74:67:55:c3:62:ac:03:86:0d:ea:73:00:
f4:90:af:99:cd:9f:a7:8b:61:c8:97:e1:af:b8:6b:
fc:d1:5e:f7:da:49:00:e0:fa:f4:07:e6:f3:cb:69:
cd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C4:C4:F4:3F:D9:55:27:2A:AA:52:F8:D4:91:C2:84:2D:06:69:8A
X509v3 Authority Key Identifier:
keyid:68:C2:B5:88:D1:68:5A:58:74:2D:8A:2E:18:88:65:DB:31:10:3C:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/B2D0D768766011F08F4AF05AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.75.236.0/24
IPv6:
2001:df1:c80::/48
Signature Algorithm: sha256WithRSAEncryption
af:6a:f1:ce:d2:92:20:81:f5:10:72:5f:2f:a4:8b:87:14:57:
78:69:7a:4c:de:88:43:ea:1d:d6:a2:b0:97:5c:8b:c6:5a:ac:
40:3e:ec:b2:09:fa:93:40:15:1d:1d:50:f9:15:23:d8:c4:80:
36:fd:f7:f6:54:53:9a:89:57:21:0b:53:63:75:29:73:27:c9:
34:30:4d:7d:d8:06:f0:c5:2a:dd:53:87:cc:e6:bb:86:90:6c:
56:a4:da:b8:1e:69:ab:56:a0:1c:26:78:c4:c9:6b:4a:cc:2a:
e2:35:01:48:6f:f5:e4:f8:5f:ef:f9:dd:63:21:30:fc:43:18:
09:6e:38:56:9d:2d:d9:22:cd:de:2d:a5:bc:fc:4b:f1:48:7a:
e6:f0:d7:44:34:19:22:c8:f7:62:38:0a:4b:1d:59:0a:05:a6:
d4:aa:29:a2:f3:1b:94:5f:ae:c9:16:40:33:2c:63:2f:3d:6b:
5a:f0:7a:c0:72:0b:27:5f:3e:b8:21:88:4f:83:5a:1e:a8:ab:
94:d8:b9:32:7a:c3:4b:cc:cb:b3:02:e4:a6:2b:ed:49:bf:d8:
ac:63:5b:78:60:77:27:9d:a4:4c:dd:2f:a0:76:38:6d:04:9b:
0b:50:49:e7:06:0a:94:8e:29:32:f9:c6:79:74:6a:7e:27:5f:
bf:4d:82:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:06:12 2026 by rpki-client