
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/6D49440845BC11EAB591BD20C4F9AE02.roa
File: 6D49440845BC11EAB591BD20C4F9AE02.roa (raw, json)
Hash identifier: zPalni0azpF/zlC0w+aS0ngHnlgcsl2xEhMwm9vK8X0=
Subject key identifier: 6B:52:20:CA:FB:D3:A9:AE:5A:1E:72:14:7D:45:8B:8D:3E:D1:8D:88
Certificate issuer: /CN=A91BF039/serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A
Certificate serial: 0B90
Authority key identifier: 4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/6D49440845BC11EAB591BD20C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:45:07 +0000
ROA not before: Wed 14 Jan 2026 19:15:45 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 137252
IP address blocks: 103.106.32.0/22 maxlen: 24
2402:3940::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl
rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:08:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2960 (0xb90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF039, serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A
Validity
Not Before: Jan 14 19:15:45 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a450f3-5f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:26:9e:83:b6:cd:ab:3d:29:23:1d:73:b7:
fe:17:4c:df:ca:64:9d:fc:bd:1f:6d:59:85:90:93:
7c:0e:f8:f0:49:1b:90:d8:45:60:18:17:8c:1f:31:
41:b4:ea:74:35:80:28:7f:68:a9:92:b2:bf:69:53:
aa:45:3e:1d:78:61:de:6d:01:fe:a0:3e:15:81:1f:
6e:de:19:2c:45:8d:d9:51:18:94:15:03:90:cb:04:
ef:fe:9e:9a:31:8e:06:8d:7b:09:48:79:3e:6b:7e:
59:21:7a:f3:33:50:8c:c0:b8:cb:f1:15:da:fc:a3:
ff:4f:91:93:0e:9f:84:23:4e:53:72:6b:68:83:da:
eb:a7:d4:8f:e6:7c:09:87:85:33:d3:c4:84:eb:1d:
00:b7:87:bf:de:cf:77:b2:08:8e:9a:2a:84:e9:b0:
4b:79:8f:86:fe:98:7f:e4:58:c1:46:2e:f2:0d:bd:
83:13:ec:1f:ca:ea:14:72:92:5b:85:fc:5a:58:75:
05:47:ea:09:3c:48:20:9b:bf:f1:df:f5:b2:e9:e8:
72:5a:a3:06:6e:bf:8c:e1:51:95:59:10:c1:9e:eb:
85:0d:23:5f:d3:96:fa:47:82:0e:06:3d:e3:98:12:
b3:4b:dd:8b:ae:6a:7e:07:1c:af:fb:8e:f9:a5:e1:
fc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:52:20:CA:FB:D3:A9:AE:5A:1E:72:14:7D:45:8B:8D:3E:D1:8D:88
X509v3 Authority Key Identifier:
keyid:4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/6D49440845BC11EAB591BD20C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.106.32.0/22
IPv6:
2402:3940::/32
Signature Algorithm: sha256WithRSAEncryption
35:c5:af:d3:ab:03:22:f8:fd:1f:15:57:03:b1:3b:c9:f0:16:
5c:a8:1f:02:96:70:50:aa:38:89:6f:46:e8:b0:a4:32:63:9b:
59:c5:d1:1c:de:00:c1:67:64:05:05:8b:96:2e:0b:20:e7:68:
79:a6:3e:2c:d6:f1:8c:72:df:51:9d:f6:91:72:7c:29:bc:7c:
1f:e1:05:78:cf:a4:ee:7c:bc:20:7b:eb:f9:ea:b7:d0:d8:c6:
1e:82:27:f7:8d:ea:41:d0:92:42:1c:01:4f:5d:55:b3:30:a6:
d5:b3:c6:10:8b:77:f8:54:d1:26:81:a1:0c:e0:2d:ef:07:a9:
6f:b8:9d:42:10:f2:49:38:50:f5:1a:dc:eb:6b:a0:3e:ff:83:
d4:fb:10:af:bd:66:b9:c4:ed:da:f2:c4:04:a9:40:7e:ed:0b:
7a:8b:b2:51:c7:bb:16:c7:2a:b0:2e:5f:be:5c:43:98:43:47:
42:8c:84:71:50:05:cc:92:3a:41:84:b0:10:ba:c4:a5:46:e8:
73:e3:42:3b:ca:16:00:16:ea:ab:21:ea:20:b9:e2:b1:02:b9:
43:3d:4f:9c:34:8b:55:e3:37:71:16:c7:60:68:72:e6:03:2a:
40:41:72:dd:20:07:bb:8d:bf:a9:36:a7:44:96:e3:dc:1a:d3:
f2:ce:e0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:51 2026 by rpki-client