
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/6F94DE3C628911EEA2D58C10C4F9AE02.roa
File: 6F94DE3C628911EEA2D58C10C4F9AE02.roa (raw, json)
Hash identifier: lCCCgRKltVj1F5+3t91KsYsJsur+tgTu4Y/f3jpfcFY=
Subject key identifier: 0D:C1:25:F4:6D:95:DE:34:2F:75:BB:3B:F4:85:FA:53:00:75:6A:F9
Certificate issuer: /CN=A91C607C/serialNumber=31CBED1D4A02170831807D7744AC4AAFF26A06E6
Certificate serial: 01C9
Authority key identifier: 31:CB:ED:1D:4A:02:17:08:31:80:7D:77:44:AC:4A:AF:F2:6A:06:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/6F94DE3C628911EEA2D58C10C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:39:21 +0000
ROA not before: Wed 19 Mar 2025 04:20:46 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 131310
IP address blocks: 103.6.236.0/22 maxlen: 22
103.6.236.0/24 maxlen: 24
103.6.237.0/24 maxlen: 24
103.6.238.0/24 maxlen: 24
103.6.239.0/24 maxlen: 24
150.129.68.0/22 maxlen: 22
150.129.68.0/24 maxlen: 24
150.129.69.0/24 maxlen: 24
150.129.70.0/24 maxlen: 24
150.129.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.crl
rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457 (0x1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C607C, serialNumber=31CBED1D4A02170831807D7744AC4AAFF26A06E6
Validity
Not Before: Mar 19 04:20:46 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3df19-c2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e7:7a:52:aa:d7:d0:9a:7e:a8:04:b8:dd:bc:
03:3d:91:ac:f0:df:fd:38:4d:ba:36:f8:a8:14:a7:
89:b9:4e:d4:ac:5f:9b:5c:c0:13:ec:01:aa:2c:92:
ce:23:97:27:2b:1b:e2:a4:3b:fb:14:3c:eb:c9:e3:
4d:e9:61:8a:af:b9:bc:4c:e6:6f:8f:1e:af:19:18:
40:24:4b:a2:95:db:56:9a:5b:78:32:0b:34:0f:53:
68:7c:44:24:ab:ad:bd:dc:bb:d3:78:73:83:44:0d:
85:98:b5:14:bf:ee:36:4f:7f:04:4b:a5:97:27:21:
ad:50:28:ef:5d:97:0d:b8:70:65:ba:b0:78:01:37:
18:72:d4:55:1a:d8:63:e0:5b:37:19:38:21:11:45:
a7:b1:46:84:70:89:47:6e:73:2e:29:f9:fe:32:e4:
6f:0c:14:56:3a:54:fc:28:4f:0a:1a:29:56:08:ac:
db:59:25:58:b5:47:31:57:6c:96:5d:b6:7b:89:eb:
77:f1:dc:e9:dc:b3:be:a9:3a:ef:b5:8b:37:21:51:
e4:b7:d7:d0:2d:a4:30:f7:ca:49:76:a2:c6:89:eb:
39:f8:48:3a:2f:4a:1d:a3:d9:92:21:4f:de:dd:df:
f8:c1:c3:ce:fa:fb:ec:13:0b:3b:26:bf:30:47:07:
51:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C1:25:F4:6D:95:DE:34:2F:75:BB:3B:F4:85:FA:53:00:75:6A:F9
X509v3 Authority Key Identifier:
keyid:31:CB:ED:1D:4A:02:17:08:31:80:7D:77:44:AC:4A:AF:F2:6A:06:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/6F94DE3C628911EEA2D58C10C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.6.236.0/22
150.129.68.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:9f:70:bd:64:a4:7a:f3:d7:de:f9:93:86:81:17:57:86:fb:
de:8b:3a:6b:5c:5f:56:f1:5f:90:af:c6:86:ec:fc:ec:c8:58:
5a:1c:62:c7:b6:3d:d5:11:f3:98:b4:e8:80:5f:c4:c7:f3:18:
a6:c0:6b:2b:b4:b5:ef:0b:14:80:bd:5c:ce:9b:9c:07:75:cc:
68:1a:07:46:6d:aa:a5:35:54:8e:8e:15:95:82:72:e2:ea:7e:
c0:10:23:bc:93:5b:d5:4e:73:01:7f:cb:b9:08:b4:2e:79:a6:
43:f2:97:d6:fe:23:e6:57:4e:26:1d:7f:f0:c0:de:4c:ce:05:
88:b8:39:01:f2:fe:cb:dc:38:2d:38:cb:66:d8:db:5e:1b:a1:
52:03:6d:22:40:d9:9a:a1:66:38:90:85:02:d0:72:d4:4f:f5:
12:26:06:43:4c:dc:c3:16:cf:8d:96:b8:14:23:9f:57:e6:da:
c8:e8:23:1a:72:9f:71:45:5e:32:f7:1b:39:73:bb:be:26:43:
91:ac:7c:15:91:41:af:a3:0f:0c:86:66:5e:e9:ba:bc:ab:ea:
e8:2a:14:8b:11:14:b7:26:51:4e:24:43:ce:d1:2b:6e:b6:ee:
f0:d3:c3:13:9a:38:2b:c9:75:c6:54:18:d8:d9:64:87:43:ba:
34:58:e0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:52:29 2026 by rpki-client