
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/A1F46062A64611EAA24E1461C4F9AE02.roa
File: A1F46062A64611EAA24E1461C4F9AE02.roa (raw, json)
Hash identifier: zK6lG6qBER/8ICDiEU5RYdbytR54/LmR0O7DOfT8VTo=
Subject key identifier: 67:AA:77:9C:7F:0C:13:ED:9A:D0:BE:3C:AF:78:C6:40:1C:DB:E9:23
Certificate issuer: /CN=A91BD090/serialNumber=E55A5957385B6CF8CA0C0481D62DDFFDAB12C1F4
Certificate serial: 09A8
Authority key identifier: E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/A1F46062A64611EAA24E1461C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:49:10 +0000
ROA not before: Fri 06 Feb 2026 20:16:54 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 134074
IP address blocks: 103.51.60.0/24 maxlen: 24
103.142.243.0/24 maxlen: 24
2001:df3:9840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.crl
rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:42:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2472 (0x9a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD090, serialNumber=E55A5957385B6CF8CA0C0481D62DDFFDAB12C1F4
Validity
Not Before: Feb 6 20:16:54 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a451e6-301b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:34:c2:65:f8:1b:ed:d6:d5:df:d4:d2:55:de:
5a:8a:a7:a1:93:3f:08:3d:5c:6e:10:25:c2:6a:c7:
69:69:29:83:1c:74:a1:85:a9:e8:0c:3b:7a:7c:46:
09:26:1b:4a:55:23:40:07:2e:b1:ad:48:c6:d8:cf:
52:ec:db:79:66:e9:d3:00:da:2b:8a:35:fd:97:f3:
3e:f6:1d:28:d4:f2:b4:52:18:48:bb:64:b2:4a:b0:
ca:b4:0b:a9:2c:5b:05:24:b8:b2:61:e1:06:1e:0d:
f1:62:a8:00:98:29:4d:c9:51:02:2b:aa:47:94:4a:
23:40:57:49:13:f4:df:eb:ef:4e:be:f9:0f:b8:ae:
cb:09:c6:c5:d9:d1:18:83:fa:86:16:f0:1c:95:3b:
d0:bd:e9:c3:5c:ae:ff:c8:43:ec:65:82:ff:81:49:
5b:82:f9:7d:db:b3:b4:83:1c:41:da:b0:ef:5b:c8:
8a:4b:84:4c:cb:0f:4d:00:2b:2e:bb:01:ac:b7:21:
54:c6:8a:6d:36:e5:9f:99:d3:f1:71:2a:e8:91:71:
16:eb:1f:66:12:bd:de:5f:1e:2a:56:c9:b0:c4:52:
00:9c:ba:9b:1f:bf:2f:25:a1:ea:f2:4c:da:a9:20:
4c:28:ce:66:2b:36:91:25:97:7a:97:c3:b7:02:54:
50:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AA:77:9C:7F:0C:13:ED:9A:D0:BE:3C:AF:78:C6:40:1C:DB:E9:23
X509v3 Authority Key Identifier:
keyid:E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/A1F46062A64611EAA24E1461C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.51.60.0/24
103.142.243.0/24
IPv6:
2001:df3:9840::/48
Signature Algorithm: sha256WithRSAEncryption
ca:26:22:e5:9f:80:75:49:66:2b:6f:0a:a3:38:ed:05:b8:b5:
be:98:ad:bf:3f:0f:28:c4:91:9c:d0:f5:bb:78:35:84:e6:a2:
20:49:9e:50:8a:18:68:51:1c:ec:95:52:34:6d:59:b0:4c:22:
bf:63:b0:46:e1:6a:61:32:9a:c5:d8:b5:ae:1c:02:50:32:31:
89:7a:96:df:ac:fa:ac:25:98:a0:7e:f4:a5:43:42:f6:f4:ba:
d6:4f:89:da:ec:1d:aa:48:b5:14:d9:de:4e:0d:be:d1:cf:77:
e2:49:72:41:9a:09:08:34:f3:4f:9b:99:fc:e2:53:a3:75:85:
0a:6f:1f:c9:d2:84:5a:8c:7d:ce:36:a0:06:2f:5d:07:37:c8:
96:fd:eb:3e:13:ce:d6:d3:d0:51:54:b9:51:e7:9c:09:aa:26:
4c:73:6d:ec:45:1c:c7:96:0c:44:29:7d:3e:71:42:bc:fc:8c:
6e:0f:74:7a:fc:49:3d:99:ad:b8:b6:bd:25:a5:75:13:2d:93:
a7:ff:1e:9a:f8:48:2f:34:39:a3:8f:3f:c7:ee:53:90:92:f8:
3a:7c:42:ec:52:df:ed:38:17:a7:41:51:53:d7:7a:06:14:5e:
62:16:f8:cf:bd:84:f4:68:62:ba:32:3b:2f:fd:b9:af:c7:48:
74:d4:59:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:23 2026 by rpki-client