
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/6E6FEF28DC1311F0BA8FDA195F6F56BC.roa
File: 6E6FEF28DC1311F0BA8FDA195F6F56BC.roa (raw, json)
Hash identifier: RClecKG5kjOxOe4lhvUyvu90mrTmfQN5JEcW/BBLi2s=
Subject key identifier: 98:9E:36:5D:8D:45:C9:86:95:EA:12:03:23:82:C3:32:26:C9:C8:23
Certificate issuer: /CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED
Certificate serial: 0600
Authority key identifier: 49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/6E6FEF28DC1311F0BA8FDA195F6F56BC.roa
Signing time: Thu 22 Oct 2026 23:43:26 +0000
ROA not before: Thu 22 Oct 2026 23:43:26 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 7361
IP address blocks: 103.120.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl
rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 23:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1536 (0x600)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0C9B, serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED
Validity
Not Before: Oct 22 23:43:26 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ada9f9d-3495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:95:6b:ec:c7:18:aa:fa:9a:4f:f9:86:ca:96:
51:13:ea:92:81:3c:99:92:31:50:44:3a:90:39:f7:
3e:59:4f:e9:df:e7:b1:93:bf:fa:8e:17:12:b3:c9:
9d:98:7e:39:6d:d2:e2:43:50:b6:19:8a:be:12:36:
87:70:81:5b:61:0e:87:c7:ab:7b:2d:74:ed:71:62:
75:1a:43:cb:51:92:24:01:39:a0:bd:67:a5:0c:51:
78:b7:6e:f8:21:dd:84:d9:c4:c7:33:6f:ec:f2:a7:
63:ff:16:97:8f:a1:4a:3d:0b:be:a7:47:0b:51:f4:
b1:76:17:3b:8a:81:ca:58:43:12:8f:72:a7:33:7a:
07:f5:aa:f9:fe:56:63:72:04:66:61:ae:33:90:f5:
c5:a6:aa:3a:e6:41:2e:c4:06:d2:50:61:2e:2a:84:
cb:53:4c:5a:b0:84:bb:d2:e1:31:b5:75:32:12:84:
e2:30:6e:60:da:bc:65:56:8b:db:73:72:4d:b0:d8:
ed:02:72:45:b0:05:cd:7a:f9:c3:2c:76:65:18:0e:
f6:c0:fb:1d:c8:2f:d5:4c:6b:86:03:0f:eb:21:26:
64:28:48:6b:50:46:bd:36:c5:49:47:57:f0:57:05:
8e:e3:cc:04:a9:84:a7:4e:1e:aa:8f:89:79:92:3c:
40:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9E:36:5D:8D:45:C9:86:95:EA:12:03:23:82:C3:32:26:C9:C8:23
X509v3 Authority Key Identifier:
keyid:49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/6E6FEF28DC1311F0BA8FDA195F6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.120.129.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:8a:74:43:35:b9:3b:8a:19:f6:f6:7b:51:55:40:f5:17:dc:
1b:cb:29:67:39:fe:f5:3b:2e:72:dc:8c:7e:dc:78:a4:ad:c2:
14:db:d7:ad:0b:a9:91:f1:78:0d:50:f3:a6:a8:25:1b:3f:e2:
dc:8c:8e:4c:7a:67:fb:fd:63:43:33:92:28:1f:9a:0a:06:a4:
89:5b:14:60:0c:c7:21:25:2b:60:e1:e4:41:38:14:39:4e:0a:
8f:f0:b6:1a:e6:c2:70:a3:53:12:48:40:cb:2d:fc:fb:a0:c0:
a9:a1:0b:8d:c5:d3:c9:8a:6d:cd:c5:42:c6:0a:b9:e8:e6:61:
ad:8d:48:9f:4a:8e:82:77:31:93:9c:d2:49:7d:ce:10:9f:4d:
77:86:8c:9f:36:17:9b:60:18:d7:7f:c2:9a:2e:3c:b1:7c:a5:
17:d3:b5:74:30:82:94:dc:db:2e:07:d9:e9:46:32:95:82:ec:
9f:4f:bb:9f:ec:d4:ea:5e:41:03:f1:96:ef:70:a8:3c:29:a7:
56:83:9e:2b:6e:78:49:94:9d:b6:1c:30:9d:63:a8:1a:87:49:
d0:24:77:ee:cb:26:8d:36:9c:18:ed:e3:25:78:7c:17:58:61:
37:53:27:73:0e:65:fe:f9:33:89:df:09:1c:32:a4:51:4a:d3:
05:f9:03:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:12:44 2026 by rpki-client