
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/61A85BEE21CF11EBA0C85857C4F9AE02.roa
File: 61A85BEE21CF11EBA0C85857C4F9AE02.roa (raw, json)
Hash identifier: k25mGg2F5n8UJwp6eRSCGIM2AwOiMLd27y+spCrOgFE=
Subject key identifier: F7:B1:ED:3D:45:D9:FD:6D:7B:07:DC:7F:A0:6D:8B:6B:B2:7E:57:FA
Certificate issuer: /CN=A91BC6B4/serialNumber=6CA6B2AC1DD17B014DB6C767279D08C66E4EFC05
Certificate serial: 103E
Authority key identifier: 6C:A6:B2:AC:1D:D1:7B:01:4D:B6:C7:67:27:9D:08:C6:6E:4E:FC:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/61A85BEE21CF11EBA0C85857C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:21:28 +0000
ROA not before: Tue 30 Sep 2025 17:46:14 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 138538
IP address blocks: 103.99.40.0/23 maxlen: 24
103.132.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.crl
rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:21:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4158 (0x103e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC6B4, serialNumber=6CA6B2AC1DD17B014DB6C767279D08C66E4EFC05
Validity
Not Before: Sep 30 17:46:14 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a47598-d464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b9:e8:48:19:20:6e:5a:1a:1c:14:7d:bc:b6:
f4:15:2f:77:df:a9:0e:b5:90:d4:3a:f4:03:1b:de:
53:f6:4b:40:bf:96:de:87:c5:2e:c1:61:48:a6:85:
33:82:66:b2:70:a9:83:59:c3:51:3b:1c:cb:b5:30:
d1:ed:b9:11:6c:59:a4:ba:c6:9e:8d:6e:c9:00:61:
17:c3:32:90:00:7e:5b:ad:2d:07:3e:14:48:ba:82:
bb:92:56:4b:76:1f:4b:26:8c:7d:c8:c9:93:b4:8c:
e6:ab:8b:0b:84:31:c5:b6:e8:5a:94:69:e4:1e:58:
da:8d:52:68:26:4a:68:c6:76:09:48:a8:77:d0:23:
63:38:3e:6b:0b:dc:de:ba:1b:54:fc:5b:8a:37:eb:
80:0f:6f:20:e8:bf:a6:d5:0a:1d:61:af:07:e7:5c:
a7:2e:0b:00:46:fc:98:5f:a6:cf:c8:9d:40:78:d2:
e6:7f:06:e7:24:55:9b:98:75:5b:17:9c:ac:93:06:
53:5a:5f:88:db:98:b3:c5:93:92:b0:c0:ea:3b:18:
47:04:25:a7:94:fe:95:37:a3:e0:f9:cb:2c:e0:0b:
c1:18:35:53:63:39:30:00:ff:cc:79:c9:80:44:23:
92:a6:d6:50:c2:be:7d:89:25:f9:85:6b:f5:6a:90:
49:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B1:ED:3D:45:D9:FD:6D:7B:07:DC:7F:A0:6D:8B:6B:B2:7E:57:FA
X509v3 Authority Key Identifier:
keyid:6C:A6:B2:AC:1D:D1:7B:01:4D:B6:C7:67:27:9D:08:C6:6E:4E:FC:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/61A85BEE21CF11EBA0C85857C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.99.40.0/23
103.132.234.0/23
Signature Algorithm: sha256WithRSAEncryption
73:f1:49:e5:2c:d2:5e:00:b8:f1:1e:b0:55:84:82:34:38:4f:
d4:11:5a:52:7f:37:fc:a5:b9:c5:ea:41:bf:00:84:7a:b7:6b:
88:f2:89:b4:5e:df:5c:70:e6:1f:bd:8c:d6:39:75:e1:a9:52:
e5:0a:61:08:72:09:51:d6:6b:67:62:b0:c1:e1:37:b9:1f:41:
b7:8a:7b:bc:8b:0c:4c:40:a9:77:9d:d6:6a:88:09:f8:6f:9b:
fe:a0:f5:54:64:dc:4e:ae:e6:6b:2f:6b:00:9c:01:25:f2:b0:
5b:c3:8a:e1:8f:4e:75:62:34:06:35:d9:7e:1a:1f:6e:1b:4f:
ca:0f:d3:b8:0a:62:d1:17:05:ab:4e:70:0a:e2:b8:cd:9a:10:
64:ad:41:65:20:bf:42:6b:71:bd:bb:61:bd:06:27:ab:f0:7b:
8e:b4:bb:f2:2b:a5:95:c0:4a:60:94:bf:fe:e5:b1:94:4d:61:
69:fc:aa:12:fd:eb:42:bf:9b:f3:b8:d8:7e:bd:56:85:35:7d:
e6:21:3e:d1:70:d7:19:d6:97:49:cd:43:38:71:94:1d:08:ff:
15:0a:07:9d:5a:ba:cc:b5:3e:b9:bd:74:28:47:78:86:50:15:
96:75:e1:6c:fd:dc:f3:54:f6:5a:df:a2:38:c5:37:ce:f5:2f:
e3:52:fe:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:52:02 2026 by rpki-client