
$ rpki-client -vvf rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/6E108B3EE2B211E9B2944855C4F9AE02.roa
File: 6E108B3EE2B211E9B2944855C4F9AE02.roa (raw, json)
Hash identifier: l2mydQuOVLMIeiJESXRJpx5wncrhcHvLmXdDnK7v4j8=
Subject key identifier: 49:02:CC:1E:FF:FA:55:EE:63:09:D3:EE:7A:66:C0:A3:4D:48:E1:2F
Certificate issuer: /CN=A91909D7/serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C
Certificate serial: 0D9D
Authority key identifier: F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/6E108B3EE2B211E9B2944855C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:18:01 +0000
ROA not before: Thu 10 Apr 2025 18:27:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135416
IP address blocks: 103.218.164.0/24 maxlen: 24
2402:bc40::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl
rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3485 (0xd9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91909D7, serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C
Validity
Not Before: Apr 10 18:27:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a42e79-68c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e6:df:29:45:b8:76:4d:19:e2:61:85:8c:97:
76:81:57:57:2d:38:9b:a7:26:7d:31:d9:3b:77:37:
30:71:76:67:4b:cb:30:8a:12:2e:dc:37:e7:20:ac:
13:cd:a7:27:cb:bd:82:c3:a3:b2:36:ae:89:23:8c:
2a:16:10:8c:38:c5:a5:a9:30:52:ff:46:c1:e5:98:
87:c1:89:da:50:b3:bf:57:ca:53:b2:e2:0c:45:12:
01:0d:15:01:9b:f2:6e:d5:f1:97:8d:81:a5:eb:ed:
30:4e:49:4c:c0:9d:50:31:c3:55:0b:58:af:1f:bd:
4f:2a:3c:3c:8c:c8:b3:4d:71:b9:88:17:12:d6:fa:
60:b5:ae:87:c2:7a:46:f6:6f:f5:94:0a:d8:03:19:
dc:44:01:20:4a:5a:a0:32:80:9c:44:d3:b7:80:ca:
bf:c9:1d:11:16:c3:61:3d:61:54:ff:57:52:11:f2:
7e:7d:dc:d0:5d:ba:18:30:7b:90:94:53:9e:13:2e:
38:51:df:82:66:5f:75:f8:eb:bd:f3:b3:6b:d7:ea:
47:33:7f:19:70:1a:68:a8:eb:68:b2:5e:0f:51:a1:
7e:db:12:fc:4f:fd:fa:30:f9:4b:a5:20:cc:f5:b5:
aa:da:3a:c3:87:19:f8:85:00:82:fc:96:96:b8:05:
f4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:02:CC:1E:FF:FA:55:EE:63:09:D3:EE:7A:66:C0:A3:4D:48:E1:2F
X509v3 Authority Key Identifier:
keyid:F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/6E108B3EE2B211E9B2944855C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.218.164.0/24
IPv6:
2402:bc40::/32
Signature Algorithm: sha256WithRSAEncryption
19:19:67:15:c8:bf:79:1a:45:cd:ec:a7:bb:6a:be:4b:43:e4:
6c:08:b6:ab:40:5d:68:c6:ab:74:90:c3:b5:e8:64:e9:de:8e:
23:39:04:af:4e:ef:33:38:64:5c:21:5f:87:70:1c:59:ec:58:
ed:46:df:bb:47:76:60:f5:48:84:2f:07:5d:fa:34:97:61:ff:
28:3c:26:ab:0e:d8:75:22:d1:df:ba:59:ae:47:f0:66:13:ab:
56:2a:cd:23:05:c4:88:13:03:f1:b2:29:75:10:6b:4e:b1:7f:
1c:cc:59:3c:70:62:22:67:5f:dd:52:c9:d8:c6:b9:a8:bd:90:
92:71:6a:5a:3c:2c:81:3d:27:f3:91:9a:70:6d:2b:7e:30:9d:
98:12:bc:99:33:3f:5e:59:9f:fc:16:32:b2:14:a6:8f:53:77:
1c:cf:55:7c:ca:02:c7:72:45:ac:52:17:01:ee:ce:75:e7:a2:
3a:86:a9:68:07:99:2d:d0:4d:15:b4:83:db:a2:fb:a5:62:5c:
dc:cd:98:dd:e2:7b:76:c5:4c:01:9f:03:0f:f9:2f:00:0d:05:
c9:94:b9:38:4e:9f:dc:35:77:a4:59:3c:32:7b:e0:56:ce:1c:
a1:f7:04:e7:e5:81:54:7a:68:47:dc:fc:a5:e4:33:9b:d2:84:
da:ba:ad:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:19:21 2026 by rpki-client