
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/425BF5FE7A4711EBAD125258C4F9AE02.roa
File: 425BF5FE7A4711EBAD125258C4F9AE02.roa (raw, json)
Hash identifier: 8feuwyIbHncVjc3N1BWNIRSwrUMtJmU1uYxy48QmnWY=
Subject key identifier: F5:9D:BD:34:B9:D5:5A:E7:51:60:E7:1A:A2:DE:17:B9:3D:52:A9:B8
Certificate issuer: /CN=A91BC6B4/serialNumber=6CA6B2AC1DD17B014DB6C767279D08C66E4EFC05
Certificate serial: 10B0
Authority key identifier: 6C:A6:B2:AC:1D:D1:7B:01:4D:B6:C7:67:27:9D:08:C6:6E:4E:FC:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/425BF5FE7A4711EBAD125258C4F9AE02.roa
Signing time: Fri 02 Oct 2026 17:35:51 +0000
ROA not before: Fri 02 Oct 2026 17:35:51 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 132825
IP address blocks: 103.99.40.0/23 maxlen: 24
103.132.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.crl
rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4272 (0x10b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC6B4, serialNumber=6CA6B2AC1DD17B014DB6C767279D08C66E4EFC05
Validity
Not Before: Oct 2 17:35:51 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abfeb77-7be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:70:08:59:4a:c2:be:ba:fc:b2:b6:2a:e6:
4e:57:13:7d:19:92:c5:c6:36:8f:13:dc:4d:25:cf:
f0:da:29:d7:27:1b:6b:10:c3:ca:66:57:e4:c1:6e:
e8:92:5f:17:ca:1a:a9:71:ce:0e:b1:1e:32:ea:c8:
37:07:cb:09:39:1e:bf:f2:30:9b:4c:64:fb:75:9a:
6a:19:92:26:82:c4:d2:7b:7f:e5:4c:87:8d:07:59:
43:3a:2b:9a:c4:fa:6a:1e:6b:28:3e:8f:81:5b:dc:
f5:0b:06:55:b6:79:5e:9d:c9:f4:56:3d:31:99:ff:
a0:07:b9:4a:fd:70:8f:82:28:2b:e7:b8:98:08:75:
4d:7f:00:f6:76:d4:60:a8:1c:1a:ac:5b:08:13:07:
f1:b4:78:1a:98:af:4f:ed:2d:9e:9e:aa:3f:91:41:
66:e4:e1:f0:f0:96:fb:24:47:8a:70:1a:11:af:ab:
e4:ab:fc:30:a1:db:e2:26:e1:68:19:90:92:4b:6b:
6b:1c:c9:b0:7a:86:91:00:00:59:70:d3:6e:2e:c7:
a4:f9:25:ec:ee:53:5e:44:5b:10:8f:17:ff:f9:9d:
38:7c:83:7e:06:cb:dd:f4:87:4b:d4:c1:04:ac:0f:
59:6b:ef:5e:a7:bd:47:1a:54:6b:8c:e6:27:aa:fd:
e1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9D:BD:34:B9:D5:5A:E7:51:60:E7:1A:A2:DE:17:B9:3D:52:A9:B8
X509v3 Authority Key Identifier:
keyid:6C:A6:B2:AC:1D:D1:7B:01:4D:B6:C7:67:27:9D:08:C6:6E:4E:FC:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/425BF5FE7A4711EBAD125258C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.99.40.0/23
103.132.234.0/23
Signature Algorithm: sha256WithRSAEncryption
d9:e6:bb:5c:53:8e:fd:31:39:02:09:f6:8f:16:60:a5:74:ee:
f3:c4:e6:b3:69:2c:35:a5:8e:26:1a:3c:10:8f:a6:ae:d1:66:
c1:77:7f:80:db:4f:b0:1f:b4:ac:6d:7b:e7:de:3f:74:b6:7d:
64:b9:eb:11:48:13:aa:67:8e:64:2d:53:1d:e1:1e:4d:69:1a:
28:03:d3:64:8a:f0:8a:1b:8e:00:1d:56:ed:ae:60:c2:3e:ca:
d7:d8:55:b8:51:fc:e1:e9:a0:6e:80:ee:40:62:8d:b7:0a:6a:
03:d5:5d:dc:fa:81:6d:99:bd:27:49:c1:07:ce:86:9b:47:40:
72:81:21:97:3d:d4:3f:5a:f3:03:9e:a8:69:b8:fc:5f:30:53:
50:24:51:2d:72:c6:9a:18:2c:d3:d7:9c:d1:dc:ec:66:9f:d6:
e3:0a:8c:54:e8:16:dc:f8:b0:2e:a0:7f:14:2e:50:a9:be:b7:
52:d7:5e:27:ad:7f:7c:d5:50:5a:c1:88:39:65:84:d6:48:52:
dd:de:07:0d:42:19:ee:01:71:95:84:b7:de:e4:2c:f2:45:f8:
44:77:04:c6:5f:66:ab:50:85:8f:64:44:ca:22:45:d8:e0:c4:
6c:9b:2f:9f:7f:13:30:a3:d2:b1:e2:d5:de:4b:f5:9c:6b:62:
f5:ed:ad:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 02:34:44 2026 by rpki-client