
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6019FE0A351F11F0A19A4165C4F9AE02.roa
File: 6019FE0A351F11F0A19A4165C4F9AE02.roa (raw, json)
Hash identifier: I1aDrt2i4386vR1Re0MveOfRAMS4OEWHtDsOjq66YOA=
Subject key identifier: 31:74:36:BC:CB:98:D5:EF:1B:85:4D:49:2C:93:BE:17:78:A9:83:57
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6C33
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6019FE0A351F11F0A19A4165C4F9AE02.roa
Signing time: Thu 02 Apr 2026 08:55:44 +0000
ROA not before: Thu 02 Apr 2026 08:55:44 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 150860
IP address blocks: 103.237.86.0/23 maxlen: 23
2401:1760::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:33:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27699 (0x6c33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Apr 2 08:55:44 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69ce2f10-ce30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d1:bb:b2:5d:4d:a9:9f:27:4e:f0:a1:aa:41:
6d:f1:9a:84:94:0d:ea:4f:3f:35:b7:66:e8:e4:92:
d3:26:b9:8e:fb:7c:dd:e7:62:05:1f:b8:22:97:5a:
c2:b7:fa:e0:d8:54:2c:fb:d5:bd:e0:86:d8:b4:fd:
88:9e:ad:60:fc:5e:d1:c6:59:77:d5:49:47:a5:77:
a6:80:16:71:4b:7d:87:6d:24:f8:d5:47:92:c5:63:
bd:91:82:0f:c2:1f:4c:8b:82:ae:00:ce:7f:f6:34:
12:b2:8c:50:1b:4f:e0:4d:d7:ba:67:bd:bf:2b:52:
57:2a:ea:64:81:64:b9:34:e0:47:71:ff:bb:ba:ae:
8c:a9:4a:cc:82:0b:76:a2:81:f7:90:dd:62:0b:4e:
9c:95:61:bc:cb:63:3a:19:5d:ec:1a:f0:87:04:b8:
ee:d5:cd:2d:b1:ea:c7:bd:94:d6:9e:70:55:b5:14:
75:66:36:ef:0a:42:bf:09:85:fe:83:67:5c:a2:35:
94:58:9c:95:ae:28:26:e8:17:e2:2e:59:f2:30:e7:
36:f0:1e:b3:52:cd:c6:dc:d0:aa:1d:56:c2:f5:1f:
68:ae:57:f7:88:db:c1:7d:a8:ec:19:7b:82:70:ff:
77:13:f4:2c:cc:c3:bc:2d:a9:a3:0e:a8:07:a2:87:
d2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:74:36:BC:CB:98:D5:EF:1B:85:4D:49:2C:93:BE:17:78:A9:83:57
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6019FE0A351F11F0A19A4165C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.237.86.0/23
IPv6:
2401:1760::/48
Signature Algorithm: sha256WithRSAEncryption
66:3d:ed:87:dc:0e:d0:74:e6:d5:2f:74:f8:f2:56:de:f3:de:
9a:6e:16:d7:ad:f1:d9:f1:8f:d4:56:9e:21:a1:56:2f:dc:1e:
34:7b:eb:be:e4:05:f9:a8:d8:c5:e8:41:70:76:58:0a:67:a4:
2d:63:74:3c:e3:23:61:29:4f:97:3c:8b:17:29:b3:1a:de:9f:
df:e4:8a:ba:84:32:8c:8d:30:15:5c:21:c9:17:cf:6d:7b:2e:
21:2c:3f:fc:ad:90:fc:e9:aa:16:f7:d0:54:79:fa:b3:62:10:
c7:63:71:fd:cd:c7:72:16:64:fb:e6:10:fd:e4:f7:50:c1:22:
17:d1:23:ad:55:a0:38:b6:64:ff:79:2b:75:d7:3e:44:01:d5:
94:db:1a:d3:9e:73:96:ef:6c:98:e6:b7:85:34:51:ef:53:c3:
46:75:bf:ac:45:19:82:8b:7a:60:18:8c:33:7c:b8:20:15:62:
83:02:8c:08:dd:02:77:c2:55:9c:0b:57:e2:d5:fd:bd:db:7f:
03:6f:83:a9:a3:2f:3c:61:52:74:97:42:59:57:a0:7f:58:b1:
4c:df:e7:04:7e:cd:f5:5c:a4:90:b7:97:88:f4:11:dd:16:c5:
42:ff:be:ff:06:44:25:2b:5e:d2:73:bc:81:71:dc:cb:4d:da:
f5:a0:60:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:06:32 2026 by rpki-client