
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/691023063A8311E99AF5572DC4F9AE02.roa
File: 691023063A8311E99AF5572DC4F9AE02.roa (raw, json)
Hash identifier: 2eE+CDRlSHY5Ior8e4vYqF46aXCqPlrmKLCnk7wj7fQ=
Subject key identifier: 90:28:29:C6:DC:A1:D3:B7:0C:8D:A5:06:58:64:B6:FB:5C:47:4E:75
Certificate issuer: /CN=A91A210A/serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF
Certificate serial: 10E6
Authority key identifier: C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/691023063A8311E99AF5572DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:19:19 +0000
ROA not before: Fri 02 May 2025 17:56:50 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 137577
IP address blocks: 103.114.8.0/24 maxlen: 24
2001:df4:e700::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl
rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4326 (0x10e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A210A, serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF
Validity
Not Before: May 2 17:56:50 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a40496-a2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:97:69:a6:62:35:2a:21:e4:91:52:6e:ab:50:
47:4f:ce:81:d9:c3:ec:a4:1f:17:7c:9f:ed:8d:a9:
89:4a:05:64:32:13:71:57:52:9c:ca:0a:07:84:99:
63:b6:85:a5:9b:57:36:b6:0e:52:bc:51:93:0f:73:
67:9c:63:d6:c0:dd:39:a2:5d:7c:df:6d:0d:c7:53:
f4:7c:8a:76:d2:0b:48:b6:13:c2:9f:11:53:34:da:
e0:2e:07:02:49:0f:7f:bd:64:1a:91:65:ec:16:6d:
e2:f9:7e:5f:01:f8:ec:40:0a:67:e9:ff:36:d8:01:
bb:19:cb:20:6a:f9:9d:ce:fc:3f:8c:8c:f0:12:de:
ee:78:22:f7:dd:58:f7:02:d9:b0:4e:1d:b3:fb:78:
58:3d:0f:3e:0f:44:3a:6b:a7:c6:e8:59:21:13:5f:
04:95:ab:2d:07:79:55:30:48:fc:b7:b4:0b:f3:3e:
47:12:17:aa:10:16:34:9e:9c:aa:35:6e:28:48:8e:
e9:62:41:ec:c7:5e:b4:c9:61:18:fd:ea:72:22:cc:
08:b2:1a:1f:8b:fd:54:ce:8c:d0:45:80:0e:e6:e8:
fa:01:e2:74:aa:e0:1b:d9:a4:a8:b7:12:09:2c:93:
d7:52:49:d5:75:58:97:f4:d9:10:75:e6:1a:60:bc:
93:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:28:29:C6:DC:A1:D3:B7:0C:8D:A5:06:58:64:B6:FB:5C:47:4E:75
X509v3 Authority Key Identifier:
keyid:C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/691023063A8311E99AF5572DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.114.8.0/24
IPv6:
2001:df4:e700::/48
Signature Algorithm: sha256WithRSAEncryption
47:8c:59:a9:d4:5b:78:64:14:d2:64:d7:55:c6:00:78:fa:7d:
c0:a5:b1:db:4f:8c:3e:cc:88:5d:2b:43:0e:26:1f:2d:10:9c:
03:66:b4:d4:27:54:9d:26:7b:95:b0:8a:37:b9:b8:d7:ba:82:
01:15:7b:7c:d1:a2:49:d5:c1:84:1a:81:22:fa:21:d1:c3:33:
7e:4d:45:6d:3b:2f:81:a5:19:83:82:81:26:29:a9:91:c1:a8:
c9:e6:2c:6f:93:d3:98:c7:1b:c3:63:e6:d6:d5:b6:fd:82:7d:
47:d8:fe:a1:09:64:ff:72:d9:60:aa:a9:62:3d:78:e3:fb:3b:
a5:3e:6f:34:01:54:50:51:22:f3:0c:75:d8:3b:02:08:7b:47:
40:0d:82:1f:48:e5:c7:e1:7c:84:f0:5b:02:24:ff:ec:be:63:
b0:20:a1:48:f8:65:f4:f0:bd:d9:dc:10:d7:b7:fd:aa:ee:35:
cc:ba:61:ef:9a:0f:81:06:a4:35:9f:9d:9e:8e:70:b9:8b:08:
78:0f:80:9a:f0:a2:48:84:2a:04:58:96:69:0b:fe:b9:0b:14:
88:86:a9:8c:00:9c:00:b2:92:83:55:6c:46:a9:88:66:3f:ef:
f3:05:f6:84:3c:1f:ef:84:45:07:34:af:bb:b8:e2:04:5f:0a:
4a:e2:77:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:52:40 2026 by rpki-client