
$ rpki-client -vvf rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/6FFF14F0695E11EFAF2AF785C4F9AE02.roa
File: 6FFF14F0695E11EFAF2AF785C4F9AE02.roa (raw, json)
Hash identifier: g8GNIuMgpliQ182S/DwLgAMf2Tv+xYsQpUqBRCmHHS8=
Subject key identifier: 7F:34:B3:93:13:18:8A:5B:70:0E:DF:3F:1B:3C:C9:D2:F3:F2:E2:0A
Certificate issuer: /CN=A91834AD/serialNumber=4D76F793E2B129F46F8FC90E21F9D0FEAF10D040
Certificate serial: 0CF7
Authority key identifier: 4D:76:F7:93:E2:B1:29:F4:6F:8F:C9:0E:21:F9:D0:FE:AF:10:D0:40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/6FFF14F0695E11EFAF2AF785C4F9AE02.roa
Signing time: Wed 08 Apr 2026 18:23:34 +0000
ROA not before: Wed 08 Apr 2026 18:23:34 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 136425
IP address blocks: 103.87.137.0/24 maxlen: 24
103.87.138.0/24 maxlen: 24
103.87.139.0/24 maxlen: 24
2400:d4c0::/32 maxlen: 32
2400:d4c0::/48 maxlen: 48
2400:d4c0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl
rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:15:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3319 (0xcf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91834AD, serialNumber=4D76F793E2B129F46F8FC90E21F9D0FEAF10D040
Validity
Not Before: Apr 8 18:23:34 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69d69d26-4088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:09:f3:b7:70:2a:ea:75:f9:f4:88:93:44:14:
b2:8d:dc:e5:f4:bd:06:0f:33:43:36:f0:65:ce:6f:
48:64:58:c4:1f:3b:b5:cb:97:56:8b:2d:7e:49:a3:
eb:23:db:08:00:cc:64:e9:97:28:a0:8a:28:b9:c6:
76:b8:7a:84:79:58:c7:83:d9:31:d6:71:b2:98:0d:
87:c4:35:34:e7:0c:71:0e:34:1b:37:dd:84:a3:5a:
7c:4f:7a:64:ea:aa:40:3d:67:ec:34:ff:6d:e5:d0:
38:39:64:4f:c8:59:b8:88:1c:cd:b0:fd:db:25:b8:
e9:46:0b:6c:ff:fd:e0:77:7f:2e:98:72:58:bb:8f:
e3:93:dd:e9:c0:2e:b1:7e:8a:0a:ca:20:ad:8d:71:
f1:42:95:d7:4f:ee:4e:5a:75:2a:91:45:cc:53:44:
f0:76:b7:33:a9:82:56:6a:42:a6:73:3e:58:0b:b9:
ae:51:58:27:b9:17:0d:4e:75:55:a7:2b:48:1b:2f:
f5:dd:91:30:6f:26:ff:ce:be:ee:7f:41:e9:ce:9a:
5f:7e:67:04:87:49:8e:11:5b:74:8c:e9:16:6b:08:
11:d3:80:93:ba:b1:c0:b1:45:8f:93:d5:e8:20:60:
95:6d:55:95:27:f9:3a:27:98:26:c6:6d:03:92:bd:
be:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:34:B3:93:13:18:8A:5B:70:0E:DF:3F:1B:3C:C9:D2:F3:F2:E2:0A
X509v3 Authority Key Identifier:
keyid:4D:76:F7:93:E2:B1:29:F4:6F:8F:C9:0E:21:F9:D0:FE:AF:10:D0:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/6FFF14F0695E11EFAF2AF785C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.87.137.0-103.87.139.255
IPv6:
2400:d4c0::/32
Signature Algorithm: sha256WithRSAEncryption
86:e6:43:2a:4b:e4:f4:06:3c:52:28:d5:17:04:a5:d6:8e:ef:
60:d3:d3:16:f8:a2:cd:38:81:0d:4e:25:16:8c:77:cf:6c:e6:
c9:19:d4:e0:dd:ac:3e:c0:9b:85:18:da:4b:b0:f7:c4:b5:31:
1f:ce:7f:d0:6a:ad:0e:09:95:2d:d5:ef:3a:cf:ca:88:e1:92:
4f:5c:da:f7:41:68:12:a4:20:0b:f8:b8:9f:d6:35:f0:25:bd:
6f:6f:e8:36:f0:38:a4:10:c8:bb:d8:ed:af:5b:d9:22:1c:33:
8b:03:fc:90:de:9e:46:a0:75:ae:83:1f:30:07:4a:7f:43:ac:
8b:d6:7b:f4:86:16:a3:c7:3e:58:56:63:56:9e:83:d7:b9:b7:
72:cc:2f:f7:b9:d7:4c:ac:2d:59:ab:23:cd:83:ad:0c:fa:ac:
95:23:6d:b7:fe:b4:0e:fe:6c:d2:86:6c:d0:34:f3:23:fd:ca:
e4:64:09:ff:20:60:4c:40:87:6b:56:e5:4c:48:0e:00:db:eb:
3b:f1:7e:6c:e2:16:c7:7e:84:27:7e:93:83:ac:d9:b5:cb:dc:
9a:2c:f6:db:12:3d:7f:97:ae:c9:13:61:94:89:4b:23:23:b6:
80:e6:2e:7b:90:28:c8:0e:b0:3e:29:3f:75:6e:37:2c:f5:44:
83:27:7b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:47:28 2026 by rpki-client