
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/1FB8AA58E9AB11ED8B614C43C4F9AE02.roa
File: 1FB8AA58E9AB11ED8B614C43C4F9AE02.roa (raw, json)
Hash identifier: LAHOIKFpFwzBjLaubjqrHvEvm+1tow0c4OEU5ikCXiU=
Subject key identifier: A9:82:B3:98:DF:2D:81:92:5B:23:33:09:D9:E3:3B:61:B9:0D:6C:8C
Certificate issuer: /CN=A91CB763/serialNumber=33512F9C676C309E35F3558F03B9AE6419BF7415
Certificate serial: 0247
Authority key identifier: 33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/1FB8AA58E9AB11ED8B614C43C4F9AE02.roa
Signing time: Wed 27 May 2026 03:33:44 +0000
ROA not before: Wed 27 May 2026 03:33:44 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 135158
IP address blocks: 103.69.78.0/24 maxlen: 24
103.69.79.0/24 maxlen: 24
2400:f960::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.crl
rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 583 (0x247)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB763, serialNumber=33512F9C676C309E35F3558F03B9AE6419BF7415
Validity
Not Before: May 27 03:33:44 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a166618-e185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:11:d0:36:1a:83:c8:dd:3e:5a:71:d4:5c:8e:
b2:b9:26:34:62:91:bf:b5:be:d8:32:b1:5d:7e:27:
52:28:e3:91:b8:54:72:87:f2:2e:65:2d:ac:d2:0c:
84:c2:93:a7:cf:4d:c1:6a:6c:45:56:a5:dd:67:9d:
04:3b:b9:f9:1c:b0:c9:5b:cf:76:b3:f1:7a:c8:dd:
ca:ce:d1:e9:d2:ee:da:c2:72:17:95:95:20:44:f1:
2b:69:93:24:b1:65:1b:73:a2:16:83:14:cf:10:ed:
64:c4:c4:ac:a6:8c:4d:32:0e:5c:53:15:34:fa:b1:
8f:d3:d1:6e:72:ac:e3:23:94:81:ec:c3:b2:21:51:
6c:8e:8a:45:58:e4:5d:b3:cc:ca:4a:d4:a0:33:8d:
0b:2f:f6:cc:59:93:ce:e6:25:5f:90:2f:5f:c3:17:
7a:17:82:16:a2:6e:71:b7:cb:ba:08:7a:36:0a:c0:
58:82:76:ce:b2:a3:a2:98:af:19:4f:f6:10:a6:c4:
d6:d9:80:79:f2:2f:d3:63:b3:0d:f3:b4:eb:4f:92:
87:80:24:30:4a:38:e7:a9:f4:12:9c:8b:a1:33:36:
0f:5b:24:6c:f3:4f:a7:cf:65:9c:ad:76:b4:e2:91:
b9:b7:2f:b5:6b:3b:55:1b:ff:37:55:86:8d:b9:fc:
b1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:82:B3:98:DF:2D:81:92:5B:23:33:09:D9:E3:3B:61:B9:0D:6C:8C
X509v3 Authority Key Identifier:
keyid:33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/1FB8AA58E9AB11ED8B614C43C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.69.78.0/23
IPv6:
2400:f960::/36
Signature Algorithm: sha256WithRSAEncryption
a6:7b:e7:5f:65:ce:74:31:7a:bd:56:ab:94:1c:69:56:8b:9b:
ef:56:8e:50:ce:60:32:55:e1:52:17:91:66:6b:7f:f3:eb:ce:
40:20:12:89:7c:b0:a6:45:1d:1a:cf:02:26:b6:77:ba:e5:7b:
49:de:55:4e:c4:6f:76:99:ec:ae:af:f6:ae:3f:17:46:3b:82:
57:74:0b:f9:f2:cb:84:61:9d:9c:d8:54:8e:23:2f:b6:93:24:
e4:6d:ba:e3:a9:00:1e:b6:3e:70:3c:9c:44:19:18:73:cb:35:
6d:0f:f5:35:90:24:63:94:69:da:2c:b1:8a:de:07:28:ad:ba:
10:dd:b8:ef:ba:c5:06:ba:b1:a9:f2:8d:5a:61:89:9a:33:a2:
06:3f:f6:78:61:ba:69:87:bb:2e:6b:84:3e:12:05:ce:a2:2e:
3a:8d:15:47:ec:95:e1:6f:53:70:47:9e:93:25:3c:4f:87:42:
ea:a4:c3:94:0a:61:0f:20:49:a2:05:1c:c6:b0:c6:de:23:58:
bd:0f:4f:2e:0d:75:1f:ac:ed:da:f4:25:82:c4:d0:38:f1:e8:
59:08:65:63:26:47:7b:71:0f:be:93:1a:0a:a6:f3:6e:fd:43:
27:18:fd:5b:59:bf:5b:91:bc:89:37:c1:72:39:65:a8:55:3a:
a5:42:20:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:54:21 2026 by rpki-client