
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/A6CBF914AC3411EDB324F037C4F9AE02.roa
File: A6CBF914AC3411EDB324F037C4F9AE02.roa (raw, json)
Hash identifier: 1lAKMWWiDhArZBXjlm4IA+8JjIhSP0kfTCYDjl8+xiU=
Subject key identifier: 85:B2:09:05:67:4E:B8:D6:40:65:12:02:54:5C:FB:75:8F:0C:AB:80
Certificate issuer: /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
Certificate serial: 01A8
Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/A6CBF914AC3411EDB324F037C4F9AE02.roa
Signing time: Sun 11 May 2025 02:31:26 +0000
ROA not before: Sun 11 May 2025 02:31:26 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 135345
IP address blocks: 103.186.106.0/24 maxlen: 24
103.186.107.0/24 maxlen: 24
2400:6fe0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl
rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424 (0x1a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE374, serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
Validity
Not Before: May 11 02:31:26 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=68200bfd-f00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e0:86:86:97:95:83:05:0d:d1:05:e3:ee:b4:
f9:60:12:57:74:4b:93:68:9d:bd:89:f2:96:81:36:
2f:7a:cf:54:5f:b0:8c:78:b9:e2:db:14:d9:03:46:
ba:78:9e:4d:8f:c3:a7:13:41:36:65:91:1e:31:3d:
17:e8:df:58:50:16:fe:0d:85:e6:86:53:ae:24:b9:
68:e4:17:8f:3a:06:7c:4a:ca:ee:62:ba:0d:d6:c4:
a5:45:c9:8c:88:e1:a6:8b:86:91:b5:b4:d8:2f:34:
67:49:67:0a:62:23:a8:12:44:73:b7:ee:25:3e:86:
07:8e:57:5d:89:81:55:26:24:ee:13:eb:79:ea:81:
8a:e6:21:ff:39:7e:00:80:d5:b6:7f:41:c7:ce:16:
5e:a0:f3:3f:18:81:12:06:cf:5c:89:51:e1:51:19:
a0:9b:17:fe:7c:17:2d:23:65:2c:31:5e:6f:bc:c3:
c8:6a:95:1b:0d:88:c6:3b:18:bb:43:83:63:65:97:
7b:b8:d9:94:f9:d4:99:a0:7f:f3:44:0d:60:fd:cb:
2a:62:93:17:25:74:14:44:74:c6:3d:6e:db:fa:c0:
63:a8:55:74:94:b6:b6:d6:c9:fb:95:95:43:01:bb:
b1:1f:e5:a7:99:95:ef:53:54:aa:9f:3a:e0:b8:ea:
e6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B2:09:05:67:4E:B8:D6:40:65:12:02:54:5C:FB:75:8F:0C:AB:80
X509v3 Authority Key Identifier:
keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/A6CBF914AC3411EDB324F037C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.186.106.0/23
IPv6:
2400:6fe0::/32
Signature Algorithm: sha256WithRSAEncryption
7f:8f:9e:8a:12:42:df:4c:27:ae:08:55:17:e0:a5:a6:9c:08:
78:31:ec:ba:b3:ae:f7:fc:a9:2c:da:fe:4c:84:79:cc:23:f9:
63:5d:a3:05:ef:41:7c:75:57:88:6b:51:1a:29:9d:c8:9c:b8:
3b:1c:eb:21:0a:d5:5b:4f:43:e0:3d:a3:a3:69:06:db:f5:72:
d0:b2:4f:ec:af:1c:6e:fa:de:ee:f8:56:fd:15:87:e0:1d:cb:
3e:70:c4:a2:69:6e:9e:cf:48:47:a3:39:9c:bb:c5:23:9d:d5:
60:68:88:c2:26:e4:8e:ca:6d:b6:eb:71:82:c9:b9:be:6e:a3:
13:8f:60:97:e3:95:85:ff:d0:11:72:4e:00:54:1b:d4:22:db:
af:dc:a5:1f:d3:cf:58:b1:43:92:f4:8f:63:c9:53:bc:27:66:
92:85:2d:f2:52:15:d8:f0:14:e1:57:e3:30:73:b3:a5:f5:9a:
49:2e:7e:22:30:d9:1b:6b:1a:85:c4:88:9c:ac:d3:24:93:fa:
bf:0e:34:b2:0f:89:89:4d:61:1a:f7:03:ad:ea:c2:3a:e5:79:
ef:cc:dd:07:b5:b7:d6:25:68:bf:36:b2:3b:6b:09:3b:ab:21:
e6:89:98:0d:56:e4:bd:14:e4:3a:48:6b:7c:8d:41:3e:ec:73:
6a:5d:df:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:07:17 2025 by rpki-client