
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/B67BE8ECC13C11EE80101E73C4F9AE02.roa
File: B67BE8ECC13C11EE80101E73C4F9AE02.roa (raw, json)
Hash identifier: D1vhl2U+GTs7S58NrDOZYoFTVHvoZzXZcGup4JZ+gcc=
Subject key identifier: E6:3C:C3:12:E9:3A:E9:22:77:68:4F:89:9D:78:FD:C9:28:43:9B:71
Certificate issuer: /CN=A91AFF15/serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260
Certificate serial: 0A51
Authority key identifier: 59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/B67BE8ECC13C11EE80101E73C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:39:57 +0000
ROA not before: Sat 04 Oct 2025 20:20:09 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 141342
IP address blocks: 103.72.0.0/24 maxlen: 24
103.72.1.0/24 maxlen: 24
103.72.2.0/24 maxlen: 24
103.72.3.0/24 maxlen: 24
103.194.92.0/24 maxlen: 24
103.194.93.0/24 maxlen: 24
103.194.94.0/24 maxlen: 24
103.194.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl
rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:32:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2641 (0xa51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFF15, serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260
Validity
Not Before: Oct 4 20:20:09 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a45dcd-d4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:59:a8:c6:9d:db:3b:78:fc:1b:d1:14:02:71:
8e:65:9c:a9:ba:45:7f:20:a2:d2:fe:90:4a:2e:57:
08:2a:68:04:2f:46:20:99:c7:86:e6:b4:a6:f8:5d:
7b:ea:09:32:69:e4:f2:20:b5:e3:17:4c:c9:65:c9:
6c:aa:cf:5b:63:1e:10:11:91:45:a9:e2:08:b5:f8:
f6:31:88:d7:d7:d8:d7:7e:25:a5:0e:46:4d:21:09:
78:00:2e:80:61:b4:5a:92:d4:27:2e:55:46:10:e6:
97:d0:83:9a:e5:6e:c4:e0:e2:ec:51:76:e4:4c:6a:
46:f4:ca:d4:a7:ef:d6:fe:73:0a:2d:8e:95:7e:37:
f3:c4:b0:82:d0:70:cc:1d:e5:24:f0:69:67:45:a3:
8a:1e:ef:32:d4:37:cb:c7:aa:86:6f:b1:92:8b:1e:
5f:17:15:1e:26:12:68:32:2c:44:c0:12:fd:f5:28:
8f:82:dd:c1:85:5b:18:c8:f3:3b:39:3e:a1:42:80:
e5:ea:99:41:58:ce:bc:2d:1e:b3:37:61:01:e9:71:
a7:0a:bf:34:46:23:5d:f2:84:13:d8:5e:31:56:f8:
94:28:db:32:77:a8:40:a2:da:23:60:19:7b:56:32:
23:34:70:f0:fc:8e:f4:f3:3d:fb:dc:5f:9f:df:e2:
68:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3C:C3:12:E9:3A:E9:22:77:68:4F:89:9D:78:FD:C9:28:43:9B:71
X509v3 Authority Key Identifier:
keyid:59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/B67BE8ECC13C11EE80101E73C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.72.0.0/22
103.194.92.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:3a:82:4a:d4:05:59:e2:64:60:6d:ee:bb:a3:a2:19:93:0d:
3a:87:f3:d4:5b:ac:b8:3b:24:c7:29:a7:91:7b:f1:c5:45:85:
fc:3a:b9:35:05:14:0b:57:41:99:bb:8d:32:6e:11:68:95:62:
7a:32:09:54:9c:f5:f2:7e:91:af:cb:82:ba:74:8d:66:0f:fe:
30:59:03:44:45:d2:6d:dc:6a:8a:47:e6:98:f8:cc:53:b8:c0:
64:1e:ce:6c:3b:4d:e3:ff:5a:c9:35:07:5c:71:e0:13:f8:01:
07:b1:70:a2:4e:07:86:bd:c1:d1:90:ee:9f:21:8b:98:a0:3b:
2c:de:19:53:68:18:92:79:fa:cf:1b:54:c3:1d:bd:e9:ad:0a:
fd:55:df:54:22:de:fc:18:12:1b:4f:d5:8c:b0:b7:5d:7f:dc:
3f:9b:4a:0f:b2:77:de:d4:88:9d:e2:24:dc:51:61:92:68:81:
30:81:6c:b5:2b:0a:b7:32:28:62:40:76:ba:f3:4b:05:62:95:
fc:e7:64:92:a0:83:1e:4a:bd:cf:c4:8b:90:4a:4c:68:5f:90:
20:dd:28:6d:2f:c9:70:81:8d:57:38:81:a6:ab:98:f9:30:01:
e6:ee:48:40:76:6a:55:57:50:8d:04:2f:2d:be:9b:8e:62:5c:
0c:54:a8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:17:54 2026 by rpki-client