
$ rpki-client -vvf rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/B65A4FACE18C11ECB1697F55C4F9AE02.roa
File: B65A4FACE18C11ECB1697F55C4F9AE02.roa (raw, json)
Hash identifier: 7SjiEMKEii5J7AK6KpNBCAsdIWuvfwniTFwyHMu1gHw=
Subject key identifier: 2D:A5:55:3F:9A:87:0C:E2:A5:56:81:43:6E:31:EA:EC:96:57:16:47
Certificate issuer: /CN=A91580A1/serialNumber=437FF34EE7BC7050C9C84886AA94CE8CF50C24F9
Certificate serial: 08BF
Authority key identifier: 43:7F:F3:4E:E7:BC:70:50:C9:C8:48:86:AA:94:CE:8C:F5:0C:24:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q3_zTue8cFDJyEiGqpTOjPUMJPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/B65A4FACE18C11ECB1697F55C4F9AE02.roa
Signing time: Thu 16 Apr 2026 19:27:21 +0000
ROA not before: Thu 16 Apr 2026 19:27:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138912
IP address blocks: 103.137.6.0/24 maxlen: 24
103.137.7.0/24 maxlen: 24
2001:df0:19c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.crl
rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q3_zTue8cFDJyEiGqpTOjPUMJPk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 18:46:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2239 (0x8bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91580A1, serialNumber=437FF34EE7BC7050C9C84886AA94CE8CF50C24F9
Validity
Not Before: Apr 16 19:27:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69e13819-ad02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:30:b5:76:6c:ed:c3:3d:af:7b:4d:1a:68:ec:
28:e8:62:54:6b:01:84:01:14:7e:a7:45:16:b2:19:
7e:82:a0:e3:15:cd:99:5b:b5:4e:a8:09:c7:c1:19:
97:22:b7:92:94:f7:29:28:53:3f:bd:ee:91:20:7f:
36:1e:f7:8e:7f:eb:61:df:5e:cd:47:11:16:69:f5:
ce:27:32:02:5b:dc:3e:7e:1e:49:94:bf:50:6e:99:
5f:ab:d6:47:08:b1:d9:69:9f:46:bd:c5:30:8c:b9:
37:a4:1a:b9:a6:10:b1:70:6e:f1:cc:59:bf:6c:1d:
60:2b:dc:49:e6:db:b4:ec:b0:ce:9a:c7:82:cc:5e:
bd:80:d0:e2:5a:38:4c:3d:17:02:81:21:47:88:6c:
ac:8f:22:72:7b:b2:94:29:08:5d:4c:f2:de:45:10:
72:15:49:a4:b5:ae:f2:72:8d:5e:3f:2d:97:dc:43:
31:60:21:09:72:27:af:77:ce:eb:31:60:b9:12:1c:
a7:8f:83:cc:41:77:02:37:95:38:c2:07:8e:fd:1c:
23:50:dc:7f:5d:6b:09:f8:5c:53:79:0e:b2:1b:6a:
56:bc:99:2f:71:81:79:04:f8:7a:6e:20:8d:c7:32:
52:69:a0:a5:be:c8:41:9c:d9:57:96:09:c5:6f:93:
cd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A5:55:3F:9A:87:0C:E2:A5:56:81:43:6E:31:EA:EC:96:57:16:47
X509v3 Authority Key Identifier:
keyid:43:7F:F3:4E:E7:BC:70:50:C9:C8:48:86:AA:94:CE:8C:F5:0C:24:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q3_zTue8cFDJyEiGqpTOjPUMJPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/B65A4FACE18C11ECB1697F55C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.137.6.0/23
IPv6:
2001:df0:19c0::/48
Signature Algorithm: sha256WithRSAEncryption
39:33:95:63:e8:e1:89:75:c9:b0:43:6d:ed:ce:1e:2d:f1:17:
1f:37:9e:b2:95:16:d5:c9:0a:cb:8c:28:98:b3:40:9b:78:59:
ec:7e:ed:2b:a3:27:e1:4f:71:32:94:b5:76:70:50:40:b7:ca:
68:60:42:94:3c:4d:b7:9f:99:f7:43:67:69:d2:b8:22:ba:7d:
9d:09:8f:92:f0:23:37:70:97:90:cb:b0:1c:66:5c:a4:13:4c:
b9:78:e3:b9:1c:3a:43:dc:e3:08:d1:59:7f:b8:9f:27:8b:d5:
3a:57:f8:7c:8b:38:76:78:e7:4b:2a:81:26:da:db:b6:65:62:
04:57:40:88:be:cd:c7:0f:26:6d:be:fe:3d:cf:59:31:08:da:
41:38:3d:c8:2c:eb:34:34:4b:b9:f6:26:5c:48:2a:bc:4f:7d:
65:bd:a9:b2:2a:e2:62:44:83:78:56:54:33:70:97:37:5e:66:
50:ff:24:b3:77:39:4e:83:61:94:37:46:b0:6b:23:a1:75:2c:
08:4c:61:89:48:c6:91:44:4c:09:af:cd:e7:93:8b:d3:4a:34:
de:40:9f:bf:4d:3f:de:7a:64:88:85:fd:94:1b:7a:51:0d:9b:
08:24:f9:95:97:ea:3c:ef:ee:1d:fd:1d:08:fa:85:a2:ec:a3:
5d:47:86:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:42:48 2026 by rpki-client