
$ rpki-client -vvf rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/E51ECC8610E711EBAD066E1DC4F9AE02.roa
File: E51ECC8610E711EBAD066E1DC4F9AE02.roa (raw, json)
Hash identifier: FlKi2ZxHz6D5064I2oVQSbDeOoF5annLB1jMFwj5Qkk=
Subject key identifier: F3:72:08:F0:4C:04:28:A7:6C:2E:E0:8C:B9:98:FA:2E:B6:26:B3:C1
Certificate issuer: /CN=A91897BB/serialNumber=B49E8EE81703A4A0BACCA82437802FB5C30B6568
Certificate serial: 081B
Authority key identifier: B4:9E:8E:E8:17:03:A4:A0:BA:CC:A8:24:37:80:2F:B5:C3:0B:65:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/E51ECC8610E711EBAD066E1DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:39:03 +0000
ROA not before: Tue 18 Mar 2025 21:42:07 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 55720
IP address blocks: 103.106.248.0/24 maxlen: 24
103.106.249.0/24 maxlen: 24
103.106.250.0/24 maxlen: 24
103.106.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl
rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:39:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2075 (0x81b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91897BB, serialNumber=B49E8EE81703A4A0BACCA82437802FB5C30B6568
Validity
Not Before: Mar 18 21:42:07 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a40937-db63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c2:d4:13:aa:3f:d6:b2:c3:e0:1b:61:fd:6c:
c9:bc:dd:19:b4:c2:18:38:30:d7:3e:fb:0b:26:b8:
59:45:56:40:66:ed:f6:b6:bd:98:a8:64:fc:4a:df:
d2:4f:66:67:b1:1b:21:16:e5:46:d5:90:25:69:32:
b1:ca:a3:9c:8f:9b:0d:fa:3f:f4:a8:70:a6:bd:43:
c2:82:ad:37:42:b4:f9:08:18:54:c6:65:d3:9b:bd:
b0:35:b9:a8:d1:9e:50:b7:1c:ce:95:53:08:51:df:
78:dc:1d:29:e2:ec:f5:33:05:fb:d4:70:5f:1c:2a:
b0:e4:6e:45:e8:80:c8:33:f9:04:9a:63:99:c4:53:
f6:e8:9a:ea:86:63:18:12:74:f5:fc:20:d2:f7:bc:
b4:eb:0c:7d:43:c5:28:02:75:21:c5:fa:42:1d:c5:
76:3d:c5:60:d3:ce:29:c5:af:3f:41:34:c2:2e:f2:
21:51:61:6a:77:d3:5a:8d:d0:d8:e2:26:21:dc:66:
fb:d9:5d:ba:a9:d0:b8:7e:8e:1f:79:08:8a:ed:10:
8f:b9:ba:f5:af:30:03:c8:6a:07:4e:20:00:6f:02:
67:e3:f0:75:fa:d1:c7:f1:d5:08:be:9e:40:5d:bc:
9e:32:cb:49:15:76:96:bb:a9:56:9c:27:31:75:b4:
0f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:72:08:F0:4C:04:28:A7:6C:2E:E0:8C:B9:98:FA:2E:B6:26:B3:C1
X509v3 Authority Key Identifier:
keyid:B4:9E:8E:E8:17:03:A4:A0:BA:CC:A8:24:37:80:2F:B5:C3:0B:65:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/E51ECC8610E711EBAD066E1DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.106.248.0/22
Signature Algorithm: sha256WithRSAEncryption
40:e6:08:39:3f:af:23:25:eb:ec:e7:d3:78:72:68:7f:94:a4:
87:ee:ff:6f:10:64:c6:bf:a9:75:37:98:3d:bc:1e:18:73:7e:
ef:c4:d7:85:80:55:9d:c0:dc:55:a9:a6:18:a6:3c:f7:f3:a2:
8d:ca:1a:e3:f2:8e:54:98:7d:d4:63:90:80:bb:5a:fd:5a:43:
a0:cb:6b:14:9a:d5:80:ea:b3:f0:56:13:97:ec:5e:c4:64:c2:
ac:e7:7c:99:7a:e0:a9:e9:1c:5c:51:0a:68:b1:67:ab:2d:92:
e7:4f:68:82:5f:d3:63:b9:de:7a:bb:f3:62:30:cb:6b:0d:25:
34:d6:a3:b6:a5:e7:37:9c:ea:a8:d3:e3:2c:7b:6a:57:b4:8e:
0c:4a:5a:d3:cd:1a:dc:f9:5f:5b:4b:3c:ad:99:c4:05:a6:5f:
4f:25:3a:01:85:e7:f3:b3:34:24:33:33:ca:b5:17:e4:03:2d:
f1:c5:50:a1:54:73:f7:83:88:1c:51:b6:31:91:c7:2c:3b:db:
25:5e:be:b0:50:bf:d5:23:2a:7d:3e:35:f0:55:83:ce:01:76:
30:ad:61:8b:32:17:27:dc:da:5f:e9:ff:be:9a:9d:f0:6b:ee:
bc:8e:05:5f:1c:1b:f0:44:b6:58:7f:c5:34:37:64:24:0b:48:
9e:c7:8a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:35 2026 by rpki-client