
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/1EF560BEEA6911EF9AE7CD14C4F9AE02.roa
File: 1EF560BEEA6911EF9AE7CD14C4F9AE02.roa (raw, json)
Hash identifier: 6kXvmubjU59GdZovImwiI9BDjdhHWVMROOJRvzgfQV4=
Subject key identifier: 8F:E6:A8:8C:F1:FD:EB:50:1F:51:AE:6D:6E:DF:B8:71:76:D8:F5:5E
Certificate issuer: /CN=A91A7978/serialNumber=500C60A7F69C04BE84FCF3C65723C07970E5A128
Certificate serial: CA
Authority key identifier: 50:0C:60:A7:F6:9C:04:BE:84:FC:F3:C6:57:23:C0:79:70:E5:A1:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/1EF560BEEA6911EF9AE7CD14C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:58:43 +0000
ROA not before: Tue 11 Mar 2025 07:25:01 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 134829
IP address blocks: 103.135.104.0/24 maxlen: 24
103.135.105.0/24 maxlen: 24
2404:7b40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.crl
rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202 (0xca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7978, serialNumber=500C60A7F69C04BE84FCF3C65723C07970E5A128
Validity
Not Before: Mar 11 07:25:01 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3e3a3-cd46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:6b:8d:04:91:a7:f9:98:6b:52:4d:86:10:
d6:83:6b:73:1a:03:ab:ee:bd:af:1d:2f:42:1b:5c:
b8:64:b8:fe:5d:77:00:5a:ea:41:41:33:60:7d:8a:
d1:24:80:ae:5c:05:02:87:fe:50:c2:0e:cf:de:3a:
48:b1:71:d6:85:f0:b7:6a:71:78:6e:69:6a:c0:ad:
92:be:17:b5:fd:5e:9d:fa:e6:45:3a:9d:b0:83:70:
8a:ea:13:e2:ce:cd:ce:38:0a:c7:19:d3:c4:0e:3f:
71:db:52:42:9b:2b:2f:04:9b:3a:5a:8b:ec:e3:39:
ce:de:ac:61:ab:5e:a0:61:be:ed:a9:29:b4:dc:cd:
ea:fb:bc:e5:c6:cc:e7:69:0b:bc:ae:fd:eb:33:5d:
e3:e9:75:24:a8:9d:50:b8:e2:e3:1f:92:fe:f2:b7:
e7:b0:22:9b:64:7c:af:0d:df:36:a3:07:c8:df:7a:
6b:68:ce:a3:49:cc:59:c4:4e:52:8a:83:97:df:a6:
e6:37:b9:e5:de:da:24:05:1f:1e:09:7c:73:4d:f3:
c4:9f:8d:8b:cb:07:c9:88:05:8e:a9:6d:9e:27:04:
6c:cd:a2:5d:28:aa:15:f9:ce:89:23:43:2b:21:80:
1f:73:0a:44:0b:59:cc:d5:51:19:e2:4a:47:59:29:
ec:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E6:A8:8C:F1:FD:EB:50:1F:51:AE:6D:6E:DF:B8:71:76:D8:F5:5E
X509v3 Authority Key Identifier:
keyid:50:0C:60:A7:F6:9C:04:BE:84:FC:F3:C6:57:23:C0:79:70:E5:A1:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/1EF560BEEA6911EF9AE7CD14C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.135.104.0/23
IPv6:
2404:7b40::/32
Signature Algorithm: sha256WithRSAEncryption
9e:d4:44:35:49:14:f9:29:5f:6b:af:67:08:ec:ce:56:28:1e:
76:91:bc:82:ed:cf:b3:3c:da:cc:70:27:2e:78:44:d8:2a:f3:
97:b5:e3:98:25:70:53:16:27:bf:9d:be:31:9c:2c:a1:dc:aa:
22:10:f2:03:b5:69:2d:75:f8:46:c4:d5:8b:b6:42:b2:94:5f:
1c:7d:9c:41:49:82:14:69:b2:53:05:28:7c:c8:f5:b9:e8:77:
d4:97:3b:f0:b3:74:f7:6d:43:19:af:6d:55:11:b3:3b:8c:0e:
dc:25:13:0e:10:63:c6:5e:3d:3b:99:99:e5:8a:d8:60:9e:12:
ba:9e:62:53:d3:ea:74:e8:de:51:95:8a:28:30:43:bb:fb:a5:
31:b0:19:3b:1b:18:d8:cc:16:19:af:d3:d3:92:0e:9f:ce:c4:
3d:62:16:3e:ac:c1:41:3d:7d:a5:91:15:31:d7:9c:0c:bf:af:
05:90:92:d0:4e:43:ad:fe:4b:40:fa:51:da:28:c9:bd:90:58:
9a:bd:52:f3:2d:0e:56:1e:5e:dc:95:6a:dc:61:5f:86:b4:00:
cf:ac:b5:71:6c:32:ef:de:40:92:b7:3f:20:e6:be:37:15:15:
5d:20:2e:47:41:4c:64:fc:e6:d9:71:7c:4d:90:df:18:65:e3:
74:e8:84:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:39 2026 by rpki-client