
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/6C18BEE0519811F08E123360C4F9AE02.roa
File: 6C18BEE0519811F08E123360C4F9AE02.roa (raw, json)
Hash identifier: 4L0qNczFCVQsT0d5qT7GZf12BVPc/HfNGs+jHWl9kBU=
Subject key identifier: C4:BD:02:A0:3E:FF:01:4C:56:9F:9F:B6:39:DC:77:3D:0D:6D:64:81
Certificate issuer: /CN=A91BDC68/serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34
Certificate serial: 0102
Authority key identifier: 7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/6C18BEE0519811F08E123360C4F9AE02.roa
Signing time: Sat 03 Oct 2026 07:54:58 +0000
ROA not before: Sat 03 Oct 2026 07:54:58 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 5400
IP address blocks: 203.158.64.0/23 maxlen: 23
203.158.66.0/23 maxlen: 23
203.158.68.0/23 maxlen: 23
203.158.70.0/23 maxlen: 23
203.158.72.0/23 maxlen: 23
203.158.74.0/23 maxlen: 23
203.158.76.0/23 maxlen: 23
203.158.78.0/23 maxlen: 23
203.158.80.0/23 maxlen: 23
203.158.82.0/23 maxlen: 23
203.158.84.0/23 maxlen: 23
203.158.86.0/23 maxlen: 23
203.158.88.0/24 maxlen: 24
203.158.89.0/24 maxlen: 24
203.158.90.0/23 maxlen: 23
203.158.92.0/24 maxlen: 24
203.158.93.0/24 maxlen: 24
203.158.94.0/24 maxlen: 24
203.158.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl
rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 06:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDC68, serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34
Validity
Not Before: Oct 3 07:54:58 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ac0b4d2-3f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bd:9d:f1:80:a2:6c:f1:52:00:a5:22:08:26:
fc:ef:a4:7c:a2:4e:c1:c6:e8:00:23:7e:15:bd:b6:
1d:cc:f5:31:8a:5c:0a:cd:44:3f:ae:b8:dc:82:45:
48:a8:cd:52:02:e7:4a:7c:e0:30:8e:a2:52:7d:77:
b5:b6:ab:2c:1a:e4:fa:87:0b:f1:22:96:00:07:d3:
56:e4:c8:18:6c:4c:83:6f:e6:21:c9:6d:7f:ae:0c:
2a:79:ba:58:75:8e:34:11:82:e4:33:f0:1b:06:18:
93:6c:4f:59:f5:00:0a:34:6c:20:f1:33:99:5d:2f:
0a:bb:1f:5a:bd:8f:71:23:ed:bd:f4:99:0f:4d:ba:
39:81:9d:00:b6:7e:0a:fa:71:00:96:14:7d:be:bf:
46:5a:66:8b:50:07:9e:37:bf:85:dd:41:22:73:86:
c1:27:b2:ee:b9:b6:ae:5b:57:49:46:61:04:6b:15:
0f:fa:6f:fa:b1:8b:6e:8c:d3:82:ee:10:fb:bb:9b:
09:04:c1:0c:14:03:ad:2d:0a:e5:03:95:11:a9:bc:
46:f8:0a:79:23:32:1a:3c:e0:2e:a9:81:0d:12:1e:
8c:be:69:f9:54:59:88:87:24:22:ab:5c:63:58:01:
cd:b7:65:0a:18:7b:c8:a0:95:94:84:80:8c:1f:41:
27:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BD:02:A0:3E:FF:01:4C:56:9F:9F:B6:39:DC:77:3D:0D:6D:64:81
X509v3 Authority Key Identifier:
keyid:7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/6C18BEE0519811F08E123360C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.158.64.0/19
Signature Algorithm: sha256WithRSAEncryption
46:3a:8f:43:1f:d8:a8:8e:5b:5c:54:ac:82:56:ba:3e:b0:96:
22:16:9d:a6:11:bc:c8:2e:a1:56:51:03:f0:8f:4d:e0:65:e2:
4a:41:14:6f:02:17:8d:3b:33:57:4d:5c:e7:e0:6e:0a:2a:90:
4a:f2:74:b0:2c:e8:b1:98:b4:b5:13:5a:0b:3a:64:88:b3:5e:
bf:44:16:f2:f3:8d:d3:c2:63:a7:87:19:d1:90:2b:1d:21:a6:
31:c0:4d:c7:fe:37:fe:77:a8:19:0a:39:5e:1b:a2:47:7f:f7:
25:64:7b:2f:80:52:6a:75:b4:77:07:87:c0:f0:06:ee:f6:0f:
4a:02:dd:10:89:13:27:51:94:20:a2:17:a3:d6:4c:1c:50:0a:
e9:9b:b9:7d:59:98:5a:53:b5:7b:ac:7e:fc:70:43:32:43:43:
ac:ca:c7:50:3b:1b:19:5c:b4:c6:df:a4:51:dd:e7:c1:69:f8:
cd:d7:cc:bd:47:3d:53:63:3f:f2:c9:af:76:81:d4:7b:70:08:
8c:c7:4f:f7:57:f7:31:a6:1a:c1:be:c5:1b:b2:de:99:de:fd:
5f:8d:31:47:a7:9d:71:8d:59:56:7c:3d:8a:c7:0a:12:30:b6:
2f:f2:c3:c9:9b:66:85:fb:94:13:50:75:4f:9a:ce:7a:87:a5:
ed:f6:10:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:01:38 2026 by rpki-client