
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/F96174ECC27D11EDB8226F2DC4F9AE02.roa
File: F96174ECC27D11EDB8226F2DC4F9AE02.roa (raw, json)
Hash identifier: G5wyunrhNPZHL5dnU3YCTVm9J7AtwfPqbQe5Aa4DplE=
Subject key identifier: 86:A7:75:57:45:22:46:FE:B9:EC:DC:BB:B9:7A:15:31:85:0A:96:6C
Certificate issuer: /CN=A91BB6E3/serialNumber=919FA819B2FFF145521AF664035278E7E7914A49
Certificate serial: 025F
Authority key identifier: 91:9F:A8:19:B2:FF:F1:45:52:1A:F6:64:03:52:78:E7:E7:91:4A:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kZ-oGbL_8UVSGvZkA1J45-eRSkk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/F96174ECC27D11EDB8226F2DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:11:10 +0000
ROA not before: Tue 03 Feb 2026 02:22:37 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 150705
IP address blocks: 103.62.148.0/24 maxlen: 24
103.62.149.0/24 maxlen: 24
2401:dee0::/32 maxlen: 32
2401:dee0::/48 maxlen: 48
2401:dee0:1::/48 maxlen: 48
2401:dee0:2::/48 maxlen: 48
2401:dee0:3::/48 maxlen: 48
2401:dee0:4::/48 maxlen: 48
2401:dee0:5::/48 maxlen: 48
2401:dee0:6::/48 maxlen: 48
2401:dee0:7::/48 maxlen: 48
2401:dee0:8::/48 maxlen: 48
2401:dee0:9::/48 maxlen: 48
2401:dee0:a::/48 maxlen: 48
2401:dee0:b::/48 maxlen: 48
2401:dee0:c::/48 maxlen: 48
2401:dee0:e::/48 maxlen: 48
2401:dee0:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.crl
rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kZ-oGbL_8UVSGvZkA1J45-eRSkk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 607 (0x25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB6E3, serialNumber=919FA819B2FFF145521AF664035278E7E7914A49
Validity
Not Before: Feb 3 02:22:37 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a410be-8202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:e3:62:f7:fa:37:71:2e:ff:3b:73:92:99:
1d:16:ac:c1:0e:b5:9a:9d:f8:16:07:60:5f:70:98:
58:94:ab:7b:6f:40:c5:04:fc:91:8a:8d:a4:62:a2:
d5:3d:2c:72:29:ea:0f:54:d2:59:b5:69:10:31:f2:
cb:36:e4:ea:42:cd:05:e2:c9:19:e0:13:5c:44:73:
1c:56:7e:60:fc:62:b4:d3:f6:ae:6d:5b:a6:93:40:
e8:98:5f:91:e6:14:8f:1c:f6:50:63:17:ac:59:7c:
a8:b2:bc:31:00:c7:a5:48:77:e8:9f:45:4d:61:4a:
d8:ee:a5:ee:bf:72:64:02:b8:64:52:03:41:07:6a:
0e:6d:92:94:92:6a:6b:95:fd:e7:b1:f3:f2:00:29:
8b:3b:0f:ae:79:a8:f4:03:e7:0f:da:1e:ec:a8:43:
85:f0:3d:b3:08:9e:69:2f:93:21:1a:d8:79:cd:61:
6a:7e:b5:c7:33:4a:b6:aa:18:a1:84:8f:35:eb:41:
97:59:2b:88:52:ca:32:54:31:d3:78:7b:e7:cd:0e:
26:b7:c5:51:93:92:48:66:ac:72:6e:c0:c4:4a:d4:
fa:7a:84:03:e5:bb:a5:75:f4:ea:09:93:84:a4:85:
b0:cb:db:93:42:3d:9f:20:2e:d4:c9:1c:3d:dc:17:
4e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A7:75:57:45:22:46:FE:B9:EC:DC:BB:B9:7A:15:31:85:0A:96:6C
X509v3 Authority Key Identifier:
keyid:91:9F:A8:19:B2:FF:F1:45:52:1A:F6:64:03:52:78:E7:E7:91:4A:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kZ-oGbL_8UVSGvZkA1J45-eRSkk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/F96174ECC27D11EDB8226F2DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.62.148.0/23
IPv6:
2401:dee0::/32
Signature Algorithm: sha256WithRSAEncryption
57:d0:ac:a5:98:67:3e:19:e0:83:86:8d:2b:47:5b:cc:f9:cb:
f0:c8:36:26:ca:dc:eb:dc:40:61:1a:93:3c:1b:d0:f2:ac:a9:
b6:64:20:cb:b6:6b:e0:05:eb:37:09:e3:69:9b:b2:ba:70:da:
1b:fa:cb:a0:33:9d:91:67:98:fe:2b:ce:c6:e7:75:ab:9c:10:
35:d3:8f:aa:ae:58:b2:63:7c:ce:90:de:2a:07:32:26:12:3b:
16:6d:59:39:7c:37:1e:41:6c:29:52:f2:21:0e:d4:d7:5f:32:
42:c3:dc:5a:45:06:27:43:ba:6d:44:b6:e7:f6:64:91:97:e1:
3d:f1:fd:65:57:6c:12:2b:c5:61:f4:bb:57:5c:80:45:b7:b1:
a3:78:f5:d5:63:44:d2:6a:48:42:8e:d2:87:3d:d9:a9:53:7b:
42:8a:b9:a2:da:c2:68:be:86:31:ba:57:b4:fd:74:f8:6b:f3:
e4:dd:d3:f5:20:84:a5:45:07:62:ea:a4:59:45:a3:35:f1:51:
24:fd:0a:fc:83:2e:76:4d:f2:49:a8:39:14:ce:3f:a1:ce:18:
53:8c:2e:a0:3d:5b:1d:51:77:a1:c9:ce:44:51:4d:df:b0:e3:
99:70:61:b2:bf:6a:2f:f2:29:91:69:24:40:11:88:ff:e5:3b:
e1:5c:7f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:40 2026 by rpki-client