
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/C6591C620DFD11EBAD63A21CC4F9AE02.roa
File: C6591C620DFD11EBAD63A21CC4F9AE02.roa (raw, json)
Hash identifier: pDMgUgYjUiG2SoDfLwnr0PNx89pEiUUtvGRDwPeIdng=
Subject key identifier: 64:18:D7:22:31:DF:A1:DB:BF:C5:CF:F4:D8:7A:FB:94:47:B7:2C:2C
Certificate issuer: /CN=A91B0049/serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8
Certificate serial: 081E
Authority key identifier: 17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/C6591C620DFD11EBAD63A21CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:38:39 +0000
ROA not before: Fri 30 May 2025 21:50:36 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 140695
IP address blocks: 103.151.231.0/24 maxlen: 24
2001:df3:e180::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl
rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:55:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2078 (0x81e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0049, serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8
Validity
Not Before: May 30 21:50:36 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4091f-09f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8d:b9:08:81:04:b0:7e:8d:ab:c4:0a:89:f6:
d9:a7:16:31:a3:a0:26:17:d2:32:9b:22:ad:3f:cf:
d8:79:d6:9a:d6:f6:81:5b:7e:e6:eb:de:51:65:ae:
9d:83:91:f3:9a:5e:ef:6e:b5:8d:28:e3:f7:44:c7:
ec:36:84:9b:f7:0a:27:5d:c1:b1:56:ae:b8:c5:e8:
7d:78:e7:42:cf:ba:1e:60:f2:a5:81:0e:a7:2e:02:
5c:2b:1b:68:40:dc:c2:99:5a:8a:ed:84:7e:52:36:
69:dd:bf:ce:d9:9e:a4:42:be:6a:94:09:7c:31:64:
96:fd:5f:e5:0c:bf:ac:75:b6:33:f7:14:25:a9:98:
75:81:27:e5:ee:de:dc:66:7e:c0:a2:f1:ee:8e:f9:
e9:8d:ac:8c:37:cf:d4:ac:f0:c9:99:d0:00:46:5b:
32:43:5d:da:99:52:39:fc:21:4a:7d:b1:5a:88:f3:
d9:bf:06:58:c0:50:f4:7d:83:af:83:ca:e8:b1:a8:
ae:21:06:fd:7f:b7:ef:d2:5b:10:39:11:7a:43:9b:
18:5a:06:0d:0b:c8:63:e9:f4:de:36:34:1f:e1:1d:
2c:48:35:c4:ba:92:66:a7:7d:ec:b1:b9:c9:5e:d7:
c4:56:e9:36:16:08:7d:3f:ab:13:59:43:36:06:db:
a3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:18:D7:22:31:DF:A1:DB:BF:C5:CF:F4:D8:7A:FB:94:47:B7:2C:2C
X509v3 Authority Key Identifier:
keyid:17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/C6591C620DFD11EBAD63A21CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.151.231.0/24
IPv6:
2001:df3:e180::/48
Signature Algorithm: sha256WithRSAEncryption
60:dc:81:c1:12:d4:a2:73:b4:94:70:29:55:5a:9d:14:06:c4:
24:cf:10:c3:12:1e:52:dd:83:5a:bf:3c:46:8f:7b:67:d5:c4:
f1:e8:0c:9d:52:6e:72:da:1a:e2:31:15:b8:31:6e:b7:cf:c0:
f5:69:67:7d:93:99:bf:a5:fd:33:4d:15:47:5f:41:54:2e:14:
3d:da:6f:bd:de:1c:6e:18:5f:35:db:81:0b:01:0a:ee:d6:12:
9b:eb:a2:3c:34:df:c3:87:da:e9:b9:6c:af:6e:c6:a9:38:ef:
fb:56:a1:f8:30:bc:e5:7f:b4:7b:06:e4:52:81:ae:e6:3b:fd:
a6:e8:4a:6c:ff:02:d7:5a:fd:a7:e1:3f:58:fc:d1:29:2a:4f:
3e:ad:35:ac:e5:5f:48:16:c6:50:10:52:42:f0:ce:aa:4d:b6:
ca:39:1a:0e:4c:07:1e:e9:6e:a3:bd:32:67:6e:ef:8d:90:4c:
6f:94:48:a2:aa:b3:2c:93:14:7c:cc:83:ed:64:d3:d1:df:6e:
a4:8a:6e:59:4c:38:5d:ed:4d:b0:6e:3a:da:69:29:9f:03:7c:
a3:c6:19:58:a5:df:85:d3:f6:7a:3f:38:2d:1b:62:85:9b:02:
71:9d:1b:0c:f3:07:d3:28:b1:21:60:52:b0:d5:55:fd:cc:4a:
69:33:15:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:21 2026 by rpki-client