
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/A923DDA2BE0211F090AD9F13C4F9AE02.roa
File: A923DDA2BE0211F090AD9F13C4F9AE02.roa (raw, json)
Hash identifier: oyYQ6+2tHZaxnwNYENb63S9A5XulHDdWe86HyvVSXS0=
Subject key identifier: 5B:A9:53:AE:95:92:69:63:DF:2E:13:35:54:BC:77:A9:F5:28:64:C0
Certificate issuer: /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Certificate serial: 1719
Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/A923DDA2BE0211F090AD9F13C4F9AE02.roa
Signing time: Thu 12 Mar 2026 17:21:44 +0000
ROA not before: Thu 12 Mar 2026 17:21:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206283
IP address blocks: 103.27.20.0/24 maxlen: 24
175.111.6.0/24 maxlen: 24
2001:fe8:8f00::/40 maxlen: 40
2001:fe8:8f00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl
rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 17:21:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5913 (0x1719)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1185, serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Validity
Not Before: Mar 12 17:21:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69b2f628-dfd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:87:cb:6d:b4:9e:c7:a3:d6:ff:54:58:b1:59:
fb:3d:ed:c6:d7:96:eb:5b:60:04:03:ad:c9:a0:59:
70:ba:12:3d:65:3c:e4:4e:39:38:a2:22:2c:c2:c7:
ca:af:7a:1e:6d:cf:d4:ca:e0:93:6a:60:d0:6d:5c:
de:9f:fb:62:54:fc:02:7f:3c:b7:56:04:e7:a7:b3:
90:eb:ee:6e:d8:81:b6:51:f9:38:38:99:f0:9f:79:
5b:4d:19:4b:ad:91:92:af:88:4e:8e:c1:8a:a9:52:
52:50:48:1e:2a:61:3a:d8:0c:86:e1:54:07:51:63:
ab:cb:8f:4b:9a:a6:5b:e7:3e:3b:06:ea:5b:ea:ce:
1e:7e:d9:5f:e4:e4:d7:5f:1a:43:f8:eb:25:be:71:
95:ce:f3:eb:1a:8e:88:ae:16:05:23:4c:84:36:4f:
e4:3b:89:8e:c8:3b:8b:a8:00:df:ba:cd:86:2e:3e:
5c:ef:fe:37:d7:ef:dd:8d:a3:c4:4a:a4:9e:29:fe:
f6:98:20:9f:85:58:a9:eb:56:46:e2:33:ed:64:6d:
93:7f:65:19:eb:e3:22:9a:71:68:01:12:27:cd:35:
8c:15:dd:ec:cf:f8:41:38:01:f1:93:07:ec:12:86:
98:7c:09:e1:be:51:4b:4b:0a:af:7e:a6:d1:6f:1e:
6a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A9:53:AE:95:92:69:63:DF:2E:13:35:54:BC:77:A9:F5:28:64:C0
X509v3 Authority Key Identifier:
keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/A923DDA2BE0211F090AD9F13C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.27.20.0/24
175.111.6.0/24
IPv6:
2001:fe8:8f00::/40
Signature Algorithm: sha256WithRSAEncryption
6f:46:cc:e2:ca:57:e9:db:c4:2c:39:ab:dd:5e:63:5a:c7:b5:
d2:1a:a0:fc:6b:e4:e3:e3:38:21:ac:a3:7b:59:63:6e:73:d1:
f5:dc:6a:54:d3:97:0a:ed:63:d2:c4:9b:9f:8c:5b:a7:d8:c2:
56:f5:a8:63:74:ee:8f:13:a6:3a:e2:40:fa:04:7a:e6:cf:1e:
42:99:7f:72:2e:d0:ea:ae:5b:20:a3:8a:80:97:84:da:d9:5d:
d5:15:df:e2:ca:3f:87:08:b7:c1:d4:45:b0:ad:03:de:86:36:
c1:be:81:dc:e0:21:1c:d5:09:ff:fe:b3:e6:1a:79:a7:12:31:
f3:03:f3:f0:fe:43:42:ce:e2:d7:b4:a8:85:83:e2:2f:27:fa:
1b:20:98:a6:19:83:ef:ba:37:8d:3f:c1:b8:e3:1c:9b:8e:35:
b3:53:0b:fc:57:8e:76:d1:5b:ac:e0:9c:d0:be:ca:8d:fc:b4:
76:6f:56:11:29:38:00:c8:b1:cc:06:29:cb:af:e4:2e:96:1c:
5a:62:e7:de:38:c7:5a:98:e6:d7:7e:c8:7a:d8:5e:2a:84:3a:
36:dc:a4:5f:ef:de:ce:4d:d6:08:f3:29:f2:48:e0:5b:ee:cf:
91:d1:ad:07:00:c9:09:a6:18:95:d5:e9:53:2e:fc:55:f4:6e:
ae:7b:ba:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 18:15:41 2026 by rpki-client