
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/6B7C33C8F6C811ECBDF7DD40C4F9AE02.roa
File: 6B7C33C8F6C811ECBDF7DD40C4F9AE02.roa (raw, json)
Hash identifier: 9JY6uhEn8EF+36wJRXg1147V4xC6zP83VrmQeBhwfUg=
Subject key identifier: 76:69:33:14:F7:E5:99:AD:1B:DA:5F:00:34:84:94:30:77:45:CE:9B
Certificate issuer: /CN=A91E3BF2/serialNumber=C471A56EE94F05B437C09EEE0F44203FA4592736
Certificate serial: 0391
Authority key identifier: C4:71:A5:6E:E9:4F:05:B4:37:C0:9E:EE:0F:44:20:3F:A4:59:27:36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/6B7C33C8F6C811ECBDF7DD40C4F9AE02.roa
Signing time: Sat 25 Jul 2026 01:50:25 +0000
ROA not before: Sat 25 Jul 2026 01:50:25 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 133368
IP address blocks: 103.189.176.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.crl
rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 913 (0x391)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3BF2, serialNumber=C471A56EE94F05B437C09EEE0F44203FA4592736
Validity
Not Before: Jul 25 01:50:25 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a641661-e830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f8:40:4b:26:2c:03:52:d1:fc:34:d5:ce:d2:
46:ac:9b:5e:b5:ef:ff:cd:5d:9d:b7:46:0d:66:0f:
ed:e7:9f:75:43:e2:a9:4d:85:28:39:a3:5c:bf:7c:
c6:03:9b:ee:67:c7:a4:7a:c5:f5:f8:bf:ee:6d:9f:
f5:e9:fa:80:43:60:3b:40:6e:93:71:65:81:6c:c2:
ce:cb:8b:61:fc:b2:39:85:00:c1:b7:2b:cb:6b:b7:
a0:db:9a:20:e0:ee:f6:ec:62:32:11:2b:30:1b:25:
cf:f0:e4:e4:bc:76:b0:e5:bb:29:33:a7:a3:fc:fb:
e0:42:7e:ff:b9:5e:9a:5f:92:6b:89:7b:9e:c0:9d:
e8:7b:27:f6:2c:61:e7:ed:ef:d9:b4:fd:7c:19:7d:
e8:c4:a4:e6:8f:75:91:07:89:23:9f:d9:4f:0c:ef:
76:17:d2:18:a8:6d:f2:52:e8:8b:c5:f2:c8:53:73:
7f:66:67:32:23:8e:22:59:a4:0d:e5:e7:f6:99:67:
12:48:a3:1d:5d:75:06:be:68:d4:12:df:d2:16:97:
77:69:f6:85:74:eb:91:3e:4f:65:27:97:20:13:e0:
02:3d:1f:a7:43:6c:a3:27:05:9c:12:11:b8:2e:08:
01:49:54:fd:07:5c:4e:43:54:d7:61:9b:4d:36:1e:
f7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:69:33:14:F7:E5:99:AD:1B:DA:5F:00:34:84:94:30:77:45:CE:9B
X509v3 Authority Key Identifier:
keyid:C4:71:A5:6E:E9:4F:05:B4:37:C0:9E:EE:0F:44:20:3F:A4:59:27:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/6B7C33C8F6C811ECBDF7DD40C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.189.176.0/23
Signature Algorithm: sha256WithRSAEncryption
87:d9:3d:88:ea:f2:2c:e2:8a:e0:e3:0e:e2:dc:45:6c:43:f7:
00:09:5f:ff:a4:3a:e5:13:b6:2c:84:99:5d:c2:75:83:ce:9a:
10:35:17:40:9f:81:8c:3e:57:bc:4b:bd:66:7f:96:e3:b0:f1:
aa:e7:b1:43:be:60:8e:45:7e:94:32:e3:c1:28:3d:dc:3e:b3:
cb:40:62:e3:0d:f9:fd:62:60:24:13:53:af:50:10:0c:a0:1a:
50:40:3e:2a:ea:cd:e2:6d:e0:76:e7:6e:12:64:00:4a:a6:07:
54:54:95:8a:26:ef:98:7b:0c:c7:d1:5c:24:96:74:9a:3a:e7:
25:97:2b:73:e0:ca:8f:65:4c:ae:bc:70:6c:0b:7f:cd:33:0c:
94:6e:9b:8b:d6:60:db:76:e0:b3:4f:49:dc:2a:d6:fd:d5:ad:
78:96:22:f8:e5:0f:94:64:0b:62:54:b4:b0:19:8f:c9:e8:b1:
44:be:81:24:14:af:ba:9d:c2:3b:15:76:20:19:40:21:ec:bf:
08:53:c2:b3:a1:a6:03:bc:89:56:ea:3e:36:91:95:14:3d:5b:
52:5a:6a:66:9d:4a:f9:2a:aa:9f:47:d1:31:73:ae:12:4a:9b:
ea:6a:ad:2d:10:54:7b:c1:8f:59:e0:bf:e8:23:a1:f7:71:7f:
84:ce:bc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:06 2026 by rpki-client