
$ rpki-client -vvf rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/6E108B3EE2B211E9B2944855C4F9AE02.roa
File: 6E108B3EE2B211E9B2944855C4F9AE02.roa (raw, json)
Hash identifier: xpA+0JEFBlOJ2JfpFMPdJELfAhCGmAco0Hq1jkzTBac=
Subject key identifier: 22:8C:AF:46:51:39:B1:E8:4D:F1:37:BC:E5:4D:77:6F:B9:5D:86:9A
Certificate issuer: /CN=A91909D7/serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C
Certificate serial: 0DBC
Authority key identifier: F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/6E108B3EE2B211E9B2944855C4F9AE02.roa
Signing time: Sat 18 Apr 2026 18:22:15 +0000
ROA not before: Sat 18 Apr 2026 18:22:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135416
IP address blocks: 103.218.164.0/24 maxlen: 24
2402:bc40::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl
rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 18:22:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3516 (0xdbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91909D7, serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C
Validity
Not Before: Apr 18 18:22:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69e3cbd7-92d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:28:5c:54:8f:11:d6:41:b9:57:4a:d6:8d:c3:
05:3a:d3:3a:8f:f3:b1:aa:d2:3c:1e:bc:8d:1c:2d:
06:52:3b:75:0b:f4:c1:8a:57:27:fb:07:ca:3e:07:
81:df:bf:a3:fa:3c:8d:5b:4f:6b:70:cc:98:d7:7f:
e7:08:4a:97:d8:61:c0:6c:33:49:db:f0:e6:9e:8a:
e5:b6:fd:e2:15:7a:a6:37:07:a8:bb:d4:10:5d:c5:
f5:d7:22:5e:e7:43:8b:3e:11:cb:00:d4:67:e0:74:
3e:21:08:d1:a1:38:61:ce:fb:bc:aa:29:d7:cf:dc:
86:de:2b:e6:74:7a:ae:43:c7:a5:05:9e:d3:a9:a1:
d8:08:0c:a1:06:a2:20:96:cc:b7:35:68:4e:c6:b7:
df:88:15:03:5e:80:fb:da:ac:d4:30:36:44:df:8f:
53:40:30:f9:35:6c:7a:dd:97:7a:18:6b:7a:96:9e:
4b:c9:d8:84:f2:58:e0:d3:6e:63:87:54:be:69:33:
7a:de:7e:bb:e3:79:8d:30:78:69:43:b4:9f:60:05:
9a:b7:a0:cf:33:e6:b5:f7:21:df:c4:52:a1:69:63:
3e:ea:e9:d9:f6:9c:05:11:d1:e5:c9:63:77:2b:1f:
9c:14:8e:5f:fd:b0:27:34:22:dd:49:21:5a:fc:66:
b8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8C:AF:46:51:39:B1:E8:4D:F1:37:BC:E5:4D:77:6F:B9:5D:86:9A
X509v3 Authority Key Identifier:
keyid:F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/6E108B3EE2B211E9B2944855C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.218.164.0/24
IPv6:
2402:bc40::/32
Signature Algorithm: sha256WithRSAEncryption
0d:ab:0b:d3:80:e8:86:e4:87:9b:50:41:87:f2:87:ac:f5:47:
12:94:12:c0:e1:47:3f:dd:22:20:4f:00:db:0a:6f:f2:15:63:
74:d7:14:9b:2d:b1:90:5f:fb:87:e0:b6:0d:7c:45:30:6a:ed:
12:67:52:00:7b:5b:8c:50:92:a0:b9:42:28:49:0b:c0:07:5c:
49:0f:26:e3:a3:4e:15:c1:b3:73:06:74:55:2b:8d:a9:77:55:
3f:85:d9:2b:28:a9:f1:9a:97:f0:05:52:e9:c9:ae:28:6b:4f:
64:1e:f9:96:d4:37:50:3a:f0:19:1b:ee:28:f2:76:36:08:ec:
91:52:9b:b8:c2:bf:07:2b:b1:88:bc:10:50:fe:da:80:15:22:
e9:ec:3b:fb:65:12:01:03:96:44:da:6a:d5:8b:38:9b:de:e2:
3c:f7:2b:aa:13:0f:48:9e:fe:27:0f:ea:23:97:48:75:d0:29:
5c:f6:30:1e:e9:5c:04:e7:65:a6:54:cc:01:1f:09:23:e9:3b:
45:34:d2:d2:41:02:e9:e6:4b:25:9f:5c:e3:28:b8:5b:e6:fc:
39:04:c1:82:57:eb:d8:66:c2:b6:4d:94:26:75:19:cf:ae:eb:
6c:27:25:df:d4:60:0c:7f:b1:8a:54:ce:6f:17:7f:38:ea:4d:
fb:0a:09:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:39:49 2026 by rpki-client