
$ rpki-client -vvf rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/A56F3A8A718811EEADDA430AC4F9AE02.roa
File: A56F3A8A718811EEADDA430AC4F9AE02.roa (raw, json)
Hash identifier: L4AZBH5lKNpdo+3dcVKjGvlldW+516nYY3afGRte0nU=
Subject key identifier: DD:A6:BC:F7:0F:2D:5D:07:41:A6:DF:4E:97:73:C9:87:62:60:9F:8F
Certificate issuer: /CN=A91810E3/serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F
Certificate serial: 01CA
Authority key identifier: 9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/A56F3A8A718811EEADDA430AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:04:00 +0000
ROA not before: Fri 05 Dec 2025 02:11:46 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 151978
IP address blocks: 103.67.70.0/23 maxlen: 24
2001:df3:dc0::/48 maxlen: 56
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl
rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:04:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458 (0x1ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91810E3, serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F
Validity
Not Before: Dec 5 02:11:46 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a43940-6629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:70:11:19:88:ed:9f:0c:3e:82:06:61:4b:07:
de:46:fe:4a:5f:04:cb:a0:dc:c5:e7:ea:39:1a:93:
6d:66:a9:fe:64:32:11:3a:3a:0d:94:03:58:87:c3:
de:bb:b1:86:82:ac:85:b0:f2:99:45:e3:10:a0:08:
25:64:38:96:27:6e:5b:5a:48:b3:0a:e0:d2:ba:16:
60:ed:74:7e:32:08:f6:56:80:28:d5:55:a0:83:ea:
e9:04:70:c7:7e:1e:1b:21:15:39:4a:d4:30:5e:d1:
68:06:df:c1:b5:b0:de:a5:20:31:7d:4c:ee:33:3d:
3b:6a:3b:53:08:45:ab:a8:46:27:81:5d:b8:0f:73:
46:16:2b:1b:52:1c:be:3e:fe:6d:66:c2:af:15:22:
9b:71:c2:1a:1c:09:4f:7e:1f:e5:16:d7:37:e4:76:
38:85:1e:52:87:52:cf:fe:d9:d7:7f:6e:73:9b:15:
fb:cc:20:5c:25:73:ef:74:8c:3e:fa:dd:e3:58:c5:
fe:8f:ad:56:68:76:cf:33:13:d0:09:86:5b:d8:31:
f4:49:ca:c1:d4:aa:b3:d5:cc:cf:9f:c1:70:3a:d3:
f9:bb:cc:35:f5:62:01:e3:a2:84:07:05:08:1d:b8:
c3:a1:24:45:b4:1e:7c:f0:a1:6a:4b:15:7a:2c:f6:
6e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A6:BC:F7:0F:2D:5D:07:41:A6:DF:4E:97:73:C9:87:62:60:9F:8F
X509v3 Authority Key Identifier:
keyid:9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/A56F3A8A718811EEADDA430AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.67.70.0/23
IPv6:
2001:df3:dc0::/48
Signature Algorithm: sha256WithRSAEncryption
3b:65:7d:cd:36:e9:a4:a7:f4:ce:9e:04:5a:8a:cf:95:48:a4:
37:67:df:de:eb:77:a5:ce:c9:aa:18:b4:2d:a3:4d:94:2a:f6:
65:13:c6:a1:7d:59:3e:9c:3c:fd:a0:ee:70:4c:5f:01:f5:74:
12:5b:93:fe:a9:51:65:2f:aa:f1:5c:5a:85:bd:41:bc:ff:37:
a6:a9:8b:48:08:68:21:62:ab:1a:23:f7:46:f2:93:dd:68:a0:
52:e8:6f:f1:af:b9:3e:b3:b6:81:11:d0:01:ad:bd:4d:81:a3:
a2:bb:87:7a:f7:c5:f2:05:01:24:aa:32:52:be:b8:cb:d0:33:
2f:15:ce:97:fb:7f:26:b4:2d:aa:b0:50:88:7d:4a:52:d4:0d:
43:0b:d6:97:16:d5:c5:06:23:b2:9d:33:8f:8a:bc:3d:cb:7c:
e5:32:80:c4:c3:c3:2a:38:6a:6b:86:ea:07:c4:89:f5:2e:2c:
69:50:78:89:c0:d5:2b:84:68:62:ca:aa:31:94:e0:45:42:6e:
40:ce:09:61:ea:d2:0c:49:5f:ae:e0:0a:67:30:8d:88:0b:e7:
a4:dd:5c:a4:8d:a7:4d:d1:1f:4d:6e:2a:15:d5:a7:73:fc:85:
de:67:9a:7c:66:ed:0d:17:70:fc:08:39:ef:fb:dd:68:26:bd:
a5:78:94:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:26:32 2026 by rpki-client