
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/A6CBF914AC3411EDB324F037C4F9AE02.roa
File: A6CBF914AC3411EDB324F037C4F9AE02.roa (raw, json)
Hash identifier: lg5BmvJvKTTVfM5jqqI1swljGGFx139JD9z+JtbKwVs=
Subject key identifier: C1:4A:0F:D8:90:5B:DD:C7:D7:9D:D4:64:45:03:28:79:C8:48:F3:7F
Certificate issuer: /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
Certificate serial: 023E
Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/A6CBF914AC3411EDB324F037C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:31:40 +0000
ROA not before: Sun 11 May 2025 02:31:26 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 135345
IP address blocks: 103.186.106.0/24 maxlen: 24
103.186.107.0/24 maxlen: 24
2400:6fe0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl
rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 574 (0x23e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE374, serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
Validity
Not Before: May 11 02:31:26 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3dd4c-05de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f9:ad:7f:10:50:30:e2:d8:cd:48:19:c9:ef:
cd:4c:42:aa:a1:58:63:4b:39:98:da:65:92:36:48:
3a:93:0b:b7:df:84:06:b0:9f:51:3d:6d:ab:97:20:
86:b8:08:90:26:03:16:c4:53:7c:6e:f7:8d:65:a9:
f7:96:e0:0f:9a:cb:a3:d6:99:26:83:a6:79:6b:cb:
61:b3:b3:29:40:82:bb:26:a6:de:83:f9:0e:89:73:
78:20:6a:0b:a5:3e:7e:5c:a7:bf:c3:a5:23:2b:c7:
dc:42:e7:b1:da:fd:4d:f8:de:be:5c:4d:eb:ac:8e:
98:a6:c1:e8:40:42:7c:5e:ca:f5:7c:92:89:5e:1a:
1a:0d:2c:d4:78:c2:82:ca:e6:cd:48:4f:bb:bb:a9:
27:cb:93:1a:79:27:1b:ef:99:f9:fa:f4:b3:27:b6:
9b:aa:98:d9:14:a0:cb:c5:e4:fb:8f:79:c2:86:c9:
54:a5:1a:bf:f8:0b:bb:2f:c0:81:44:b2:09:16:64:
d3:0c:dd:94:c9:7c:8f:1e:1b:5d:70:41:ea:91:b1:
93:11:d1:e6:ad:f2:9a:d7:06:8f:a6:f3:5f:58:54:
dc:32:0e:b8:7f:6e:82:ec:88:1c:c9:34:cf:01:6c:
e6:74:2c:af:87:47:53:32:64:e6:e0:d0:fa:ca:2d:
b7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4A:0F:D8:90:5B:DD:C7:D7:9D:D4:64:45:03:28:79:C8:48:F3:7F
X509v3 Authority Key Identifier:
keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/A6CBF914AC3411EDB324F037C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.186.106.0/23
IPv6:
2400:6fe0::/32
Signature Algorithm: sha256WithRSAEncryption
0b:8d:0e:4c:2b:67:24:29:67:41:f9:81:9c:dd:c6:aa:26:2b:
83:15:96:d0:2b:4a:b3:03:85:e0:30:78:e1:73:3b:31:ca:ad:
9b:0c:ee:e8:c2:92:7d:59:4e:6b:45:72:72:c0:5c:90:16:34:
7a:c5:fe:b0:7c:86:a3:74:83:bb:6a:3b:89:19:68:28:32:96:
28:9b:aa:b1:80:d2:c2:09:bf:7f:2c:e8:18:d8:5d:4b:78:48:
7e:cb:2b:7e:71:5e:b0:54:0a:2d:cf:18:79:03:fa:ea:ce:31:
86:39:77:f6:8b:a1:6c:aa:64:67:38:88:ef:f1:23:bd:5a:1a:
6d:b2:98:0b:55:e8:6f:9b:51:89:e9:c6:b2:8d:43:5a:2a:41:
f3:ce:d5:d8:7e:7f:27:30:72:41:e4:b4:ad:ef:d2:52:35:dd:
11:74:03:57:15:10:17:af:0c:88:21:1c:2b:90:bc:84:4e:3c:
ae:30:a6:da:c6:8a:6a:a6:74:c1:5a:f6:ee:38:fb:81:ad:29:
7e:25:2b:74:9a:75:fc:f1:57:3d:29:68:90:e3:69:65:6e:0c:
15:05:d0:9f:1e:86:bc:12:8d:59:87:3c:4c:9f:83:51:2f:52:
cc:ba:a0:4f:a7:c4:0c:59:b6:6c:99:9e:7e:d7:ed:c6:2e:4b:
a4:ed:1b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:35 2026 by rpki-client