
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/F164038CBBE211ED8685DC61C4F9AE02.roa
File: F164038CBBE211ED8685DC61C4F9AE02.roa (raw, json)
Hash identifier: KI77GgT+UX9jlaO4DgV6Wg7UQcHDXz/g2286KEtVD+Q=
Subject key identifier: 7F:30:EA:D6:03:30:0D:3C:2D:4B:18:9C:AC:7E:2B:3C:EB:C9:A7:53
Certificate issuer: /CN=A91BB5D3/serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
Certificate serial: 06B8
Authority key identifier: 05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/F164038CBBE211ED8685DC61C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:48:09 +0000
ROA not before: Thu 10 Apr 2025 23:03:55 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 54415
IP address blocks: 103.99.169.0/24 maxlen: 24
103.99.170.0/24 maxlen: 24
103.99.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl
rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1720 (0x6b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB5D3, serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
Validity
Not Before: Apr 10 23:03:55 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a40b59-7b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ac:ca:02:ad:0d:b1:ad:3e:b8:e1:cb:a1:4c:
32:4c:2b:21:1b:6f:b5:5f:6c:08:91:26:1c:13:50:
70:80:36:fe:39:b7:8d:e5:96:96:06:bf:1d:87:e1:
ec:e8:7d:8f:9b:e1:61:d0:c8:2d:41:a9:77:d4:ba:
47:9f:c7:55:27:33:42:7d:9b:e0:b1:dd:96:02:d6:
4b:ea:70:3c:d6:a8:be:2c:63:3c:1e:9a:ae:21:5f:
01:b9:5b:f8:55:15:df:57:a6:45:2d:af:af:0a:f6:
d3:a3:9d:9b:d8:d3:d7:ae:1b:7f:85:e1:02:f0:98:
41:89:17:53:53:6b:f6:2f:ee:75:5a:0f:91:98:63:
a2:4f:f0:b2:bf:cb:af:7f:9a:ac:4c:8a:33:3b:e8:
b4:ed:c1:83:1e:bd:36:85:b8:f4:e3:4b:e0:50:b3:
dc:e7:ae:72:64:9f:b2:3c:31:bd:0c:f3:8a:9d:86:
4a:39:7e:8c:15:af:5a:17:7d:70:f5:ac:b8:b7:a1:
71:b4:a4:63:62:5a:19:4b:2a:58:45:b1:ec:95:97:
5a:f2:c7:72:a6:8b:9c:9b:40:cd:65:05:b2:83:3e:
8c:ba:49:2c:34:7e:41:8e:b2:0d:90:e3:7e:77:61:
2f:c8:39:22:3d:cf:19:4c:ce:c1:d5:f7:1c:46:21:
79:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:30:EA:D6:03:30:0D:3C:2D:4B:18:9C:AC:7E:2B:3C:EB:C9:A7:53
X509v3 Authority Key Identifier:
keyid:05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/F164038CBBE211ED8685DC61C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.99.169.0-103.99.171.255
Signature Algorithm: sha256WithRSAEncryption
51:30:14:50:2d:6b:02:1d:e7:c1:80:bd:74:95:e0:c5:72:27:
52:1c:e1:53:4e:1a:a0:09:9e:56:3a:92:b9:ad:e9:97:ba:79:
17:4a:80:4c:00:df:99:cb:6f:7e:4e:79:2c:a7:61:2b:0a:a8:
f0:4a:21:8c:78:bb:7a:95:49:9a:59:40:72:40:03:68:73:0b:
7c:4c:7c:2c:bc:db:28:96:a9:59:6e:a7:f3:16:6d:63:02:a9:
a6:c9:78:10:fd:d0:b3:f8:46:78:8a:55:41:eb:9c:6c:b0:50:
39:9b:e3:26:2e:3c:e8:07:6f:8e:a8:00:e8:f7:3c:95:5e:20:
2b:2a:a6:27:21:92:cc:0d:94:61:18:8c:95:57:3b:81:74:60:
67:d5:b9:92:4e:3f:ee:fa:69:cb:8a:cb:f6:dd:b7:2e:89:b5:
c2:e7:60:66:de:84:9f:0e:6e:0f:81:56:18:b9:f1:6f:1f:d9:
19:0e:8f:43:01:f7:2b:40:ff:75:5d:40:5d:12:b8:15:07:c1:
e3:f7:10:c7:20:54:b3:7a:c7:22:15:8f:08:49:03:3e:82:bc:
97:ca:6b:46:6d:bb:78:e1:eb:c6:74:dc:67:4a:6e:21:43:42:
dc:b2:6d:c4:30:d5:c8:92:22:60:4b:15:7b:07:0b:b8:4e:a5:
fb:34:99:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:22:26 2026 by rpki-client