
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/F6C63D7CBBE811F1AA7228996C11F970.roa
File: F6C63D7CBBE811F1AA7228996C11F970.roa (raw, json)
Hash identifier: U88keVoqg2pvqRNX9z1S/qWzCwWDhji4UX7E16NZEs0=
Subject key identifier: FF:EF:9C:49:E6:A7:0A:E7:41:F8:7B:9D:D4:A0:5C:8C:0C:D4:40:35
Certificate issuer: /CN=A91C23FE/serialNumber=E2F0742AD80A9DBB2875184EE0DD5E94DD75784B
Certificate serial: 1CFB
Authority key identifier: E2:F0:74:2A:D8:0A:9D:BB:28:75:18:4E:E0:DD:5E:94:DD:75:78:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/F6C63D7CBBE811F1AA7228996C11F970.roa
Signing time: Thu 22 Oct 2026 16:28:34 +0000
ROA not before: Thu 22 Oct 2026 16:28:34 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 134674
IP address blocks: 45.127.47.0/24 maxlen: 24
58.84.60.0/22 maxlen: 24
103.59.72.0/22 maxlen: 22
103.59.72.0/24 maxlen: 24
103.59.73.0/24 maxlen: 24
103.59.74.0/24 maxlen: 24
103.59.75.0/24 maxlen: 24
103.76.100.0/22 maxlen: 24
103.80.160.0/22 maxlen: 24
103.113.140.0/24 maxlen: 24
103.113.141.0/24 maxlen: 24
103.113.142.0/24 maxlen: 24
103.113.143.0/24 maxlen: 24
103.197.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.crl
rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 16:09:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7419 (0x1cfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C23FE, serialNumber=E2F0742AD80A9DBB2875184EE0DD5E94DD75784B
Validity
Not Before: Oct 22 16:28:34 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ada39b1-d690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:05:ba:b5:ef:40:1d:78:d8:8d:bc:cf:bc:ab:
52:78:f7:42:a8:e8:2d:43:96:6a:31:5d:37:a1:c6:
27:69:d0:bd:79:86:5b:71:5c:d1:2e:b0:2f:af:eb:
c2:97:ea:07:1c:84:e4:79:af:05:d8:2d:7f:e8:26:
e7:9b:95:e2:67:52:e3:e4:3a:53:74:34:a7:a4:54:
34:b0:9a:e8:31:62:eb:cc:7f:e2:fd:1b:e3:09:dc:
f9:d7:75:17:b2:9f:f6:59:0e:4d:8f:06:fa:2d:50:
15:4e:1f:62:a5:7c:ad:0d:ca:43:98:51:c2:60:92:
e0:f3:73:65:22:54:64:df:35:9a:af:db:97:db:7b:
de:27:6e:00:d4:55:82:6f:84:95:ac:41:19:9c:a2:
2a:4c:7e:70:3f:c9:22:a5:e5:b5:c6:df:2b:1c:20:
b7:55:ca:84:d8:e0:ca:b8:cd:e4:dd:23:db:2c:7c:
ff:d6:15:d4:af:13:f0:85:cb:1d:58:71:91:7a:b8:
db:9c:6d:ae:3e:9f:ad:44:d8:ce:a9:41:72:f8:d7:
95:ed:2c:a2:74:b5:2e:07:3b:83:32:fa:6e:57:5f:
48:7e:e9:0f:6c:0e:48:4a:20:7a:7c:ca:7d:a6:7c:
c5:b2:17:dd:9c:31:c3:aa:3b:3d:44:f2:c5:da:df:
ad:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EF:9C:49:E6:A7:0A:E7:41:F8:7B:9D:D4:A0:5C:8C:0C:D4:40:35
X509v3 Authority Key Identifier:
keyid:E2:F0:74:2A:D8:0A:9D:BB:28:75:18:4E:E0:DD:5E:94:DD:75:78:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/F6C63D7CBBE811F1AA7228996C11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
45.127.47.0/24
58.84.60.0/22
103.59.72.0/22
103.76.100.0/22
103.80.160.0/22
103.113.140.0/22
103.197.72.0/22
Signature Algorithm: sha256WithRSAEncryption
db:b8:eb:55:19:c0:f5:45:96:40:25:1f:55:7d:c1:06:38:ea:
d1:6a:80:ac:e1:af:85:d2:f0:8e:1b:66:96:5d:53:a3:46:99:
dc:fd:4b:91:00:00:f6:62:b8:0a:86:15:bd:06:7f:4c:9a:71:
1d:5a:0f:69:b3:6e:6f:99:31:4e:56:81:01:9d:14:5a:d5:e5:
5f:cb:44:5c:f4:a5:6e:3d:9f:05:a3:b7:06:f0:17:40:7a:fc:
b4:07:1f:fc:cd:c9:5d:8b:f9:73:1e:97:d0:6a:e6:d5:18:97:
b1:72:eb:21:98:ff:1a:a7:14:d1:e1:26:c4:16:fe:46:1b:9a:
da:64:78:d1:0c:83:85:3f:83:d3:51:4b:03:ab:a8:e3:7f:64:
94:0d:ba:ed:74:d0:79:e7:d7:ef:78:c2:ab:ad:f1:17:f3:4e:
be:14:25:c1:7e:e0:e1:1a:d0:cb:7e:08:e4:68:e2:3a:3f:fe:
d1:d4:90:ef:3d:60:d9:84:4a:b5:28:62:6e:02:9c:a1:f7:ed:
fe:f5:5e:3d:dd:5d:c6:06:86:65:57:47:be:08:7c:aa:3e:06:
38:48:59:2b:b3:e4:ec:ad:70:bb:52:5a:f4:07:f6:fd:e7:c4:
c9:79:47:5c:77:f8:c5:93:17:c3:8e:5c:78:82:7f:d7:1d:e1:
0a:4d:ff:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:33:55 2026 by rpki-client