
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/6897097E6C6311EDBCFA073FC4F9AE02.roa
File: 6897097E6C6311EDBCFA073FC4F9AE02.roa (raw, json)
Hash identifier: VPr6/FdGfv6oDujJfkxaUsLYAPyRqxzzh7zxxXbhpoM=
Subject key identifier: 4E:AD:8C:82:35:3D:61:81:EC:0F:2F:D5:A1:51:D6:E0:F5:41:28:55
Certificate issuer: /CN=A91BA0AE/serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E
Certificate serial: 02C5
Authority key identifier: B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/6897097E6C6311EDBCFA073FC4F9AE02.roa
Signing time: Fri 14 Aug 2026 20:40:17 +0000
ROA not before: Fri 14 Aug 2026 20:40:17 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 140917
IP address blocks: 103.153.110.0/23 maxlen: 23
103.153.110.0/24 maxlen: 24
103.153.111.0/24 maxlen: 24
2001:df4:4180::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl
rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 20:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 709 (0x2c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA0AE, serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E
Validity
Not Before: Aug 14 20:40:17 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a7f7d31-31ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c5:92:28:5d:68:71:5f:f2:fb:a5:30:f8:1a:
23:16:60:8f:48:a6:78:a2:de:12:4b:1d:fd:7c:62:
6e:66:6f:ff:fd:98:29:02:50:be:c1:52:b1:0b:36:
93:ae:23:60:7f:e4:e3:3b:81:77:e9:37:e0:c0:7f:
c1:dd:ba:2c:2e:76:29:f4:29:55:81:e9:8c:d2:90:
ea:1b:71:10:af:86:c9:4d:7e:41:89:77:a5:b4:ea:
d4:2c:b6:c6:0b:71:a9:d6:0b:be:07:94:c1:f0:3c:
ce:9f:ec:53:29:35:10:72:39:2f:5c:71:e5:bc:6f:
70:09:b8:fc:2b:6f:02:fe:84:e1:50:7c:c3:cf:5e:
e1:33:9a:de:16:b2:81:94:d5:84:fe:49:c8:64:b2:
59:9d:df:a7:4a:2d:52:c2:a6:3e:d8:77:1b:a0:8d:
94:fc:fc:81:37:88:87:c7:a2:74:a3:ef:8c:69:a4:
fe:76:04:18:f3:24:4f:39:4e:35:9e:33:fb:37:5d:
24:a0:25:30:e1:7e:00:33:34:63:c4:8a:e4:95:55:
3e:d9:a8:c0:d6:81:21:e1:db:fb:67:4f:d4:c2:9d:
f0:24:29:c8:cd:2f:e6:ce:48:ad:6f:76:2e:21:62:
50:55:a8:ed:bd:fb:79:85:bd:29:40:6b:54:c6:19:
c4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AD:8C:82:35:3D:61:81:EC:0F:2F:D5:A1:51:D6:E0:F5:41:28:55
X509v3 Authority Key Identifier:
keyid:B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/6897097E6C6311EDBCFA073FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.153.110.0/23
IPv6:
2001:df4:4180::/48
Signature Algorithm: sha256WithRSAEncryption
83:40:dd:e5:6c:92:03:8b:b2:d0:23:bd:42:51:91:ee:2c:89:
e4:78:75:cc:2d:01:09:12:d6:66:ee:92:7c:66:c5:99:51:1e:
bc:33:ca:c9:33:24:25:4c:8f:9e:73:3c:f9:e4:75:fa:3d:91:
eb:49:ce:77:0a:e4:01:78:ca:61:15:37:a5:90:07:bd:ba:0a:
28:4c:dd:13:2e:27:90:b7:c7:6e:e8:ca:2e:67:d3:9b:4e:9c:
7d:13:b1:46:d6:59:29:c0:d3:4e:d3:d5:8d:35:78:f4:27:7b:
61:ff:77:57:40:0b:40:23:0c:73:f0:1f:7d:d4:18:b7:6c:65:
ee:76:ba:e6:75:79:4c:27:37:41:ce:6c:79:27:26:d9:9c:6a:
0b:8e:ee:6b:56:64:39:92:95:f5:7f:71:61:fc:f9:fa:f1:bd:
74:46:76:3e:0d:c7:4b:40:40:24:6d:2f:a3:02:1e:b4:f5:e1:
6a:eb:7e:77:a9:80:80:1b:88:da:fa:a1:bf:f4:1b:d8:8a:b4:
93:59:9d:c3:80:a3:11:e3:28:20:f8:bd:78:76:ad:6f:af:34:
a5:39:2a:3d:16:bc:75:d9:c5:da:01:6a:f4:7a:3c:78:0e:2b:
ff:6c:58:41:9a:21:87:0e:4b:a6:89:08:0a:5c:26:fc:00:f9:
19:16:05:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:15:30 2026 by rpki-client