
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/CCD6F0DE5DE711F0BC6E0A50C4F9AE02.roa
File: CCD6F0DE5DE711F0BC6E0A50C4F9AE02.roa (raw, json)
Hash identifier: 5cgf0ISAMxYWm7zrPrCKiC5371eZ0TJcko/OPv9sPXA=
Subject key identifier: 86:EA:2B:DB:53:06:EC:0E:19:9D:7E:3C:91:D2:80:6B:41:4A:0F:74
Certificate issuer: /CN=A91D0F0F/serialNumber=38EB0D8E7AF1EB187D5AA3FC5F794191338BDB66
Certificate serial: 7D
Authority key identifier: 38:EB:0D:8E:7A:F1:EB:18:7D:5A:A3:FC:5F:79:41:91:33:8B:DB:66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOsNjnrx6xh9WqP8X3lBkTOL22Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/CCD6F0DE5DE711F0BC6E0A50C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:12:13 +0000
ROA not before: Wed 13 Aug 2025 08:47:53 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 150680
IP address blocks: 103.27.1.0/24 maxlen: 24
202.172.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.crl
rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOsNjnrx6xh9WqP8X3lBkTOL22Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125 (0x7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0F0F, serialNumber=38EB0D8E7AF1EB187D5AA3FC5F794191338BDB66
Validity
Not Before: Aug 13 08:47:53 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a3f4dd-8d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:68:1e:68:38:e7:d9:7d:1a:54:2f:c6:92:bc:
71:49:1f:d7:a3:ce:8f:a1:68:b6:40:58:f9:b0:cc:
f1:78:66:29:4a:20:f0:26:da:ae:36:2d:12:15:60:
ef:4f:6e:d0:5a:65:77:9d:29:43:30:19:03:d4:a7:
16:38:22:f9:49:2b:1e:4f:73:a7:f0:38:27:2d:aa:
46:6d:6f:e2:d4:c1:d6:85:20:37:06:6e:b3:7c:4a:
69:87:3c:2b:7b:0f:b6:af:31:d4:f1:cd:38:8f:b7:
6e:37:ba:97:b4:6b:0f:ea:97:fa:6c:98:b5:79:87:
fe:68:70:b2:d9:1d:74:0c:c5:a5:4b:1e:ef:51:a8:
c1:15:10:93:ba:c4:cb:51:d0:b3:ec:df:ca:62:4d:
b0:d7:cb:c8:79:c0:35:e0:2c:f9:81:56:33:69:7a:
8b:6f:3e:6e:50:c4:c5:03:81:d7:4e:1a:97:88:cb:
60:06:25:e7:72:6d:66:19:17:15:86:1f:3e:3b:af:
94:6c:5d:74:e5:36:6f:3b:00:17:cb:a0:1d:e7:96:
7f:84:fb:54:d8:fd:aa:b4:5c:3a:37:ae:cc:47:7c:
e2:00:45:a3:b2:d0:d5:7a:fe:36:7b:40:1f:04:7f:
a4:12:02:25:6a:48:e2:57:8a:63:78:00:28:bd:cf:
76:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EA:2B:DB:53:06:EC:0E:19:9D:7E:3C:91:D2:80:6B:41:4A:0F:74
X509v3 Authority Key Identifier:
keyid:38:EB:0D:8E:7A:F1:EB:18:7D:5A:A3:FC:5F:79:41:91:33:8B:DB:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/OOsNjnrx6xh9WqP8X3lBkTOL22Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOsNjnrx6xh9WqP8X3lBkTOL22Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0F0F/5C18A6125DE711F0A867914EC4F9AE02/CCD6F0DE5DE711F0BC6E0A50C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.27.1.0/24
202.172.6.0/24
Signature Algorithm: sha256WithRSAEncryption
50:c8:31:f8:6c:24:cd:34:eb:0b:81:62:79:77:f7:13:0c:87:
54:b4:16:b8:b8:46:e1:33:af:25:57:08:6c:11:3a:94:90:d2:
c8:9b:6f:bf:76:78:8e:bf:70:32:23:d9:32:97:9d:83:c5:d7:
6e:6f:17:29:3a:1a:ed:a9:2c:57:d4:0c:e7:ca:01:f6:7d:10:
03:c8:ae:de:c3:96:ed:a6:32:8d:6d:1b:81:e5:25:c9:60:b7:
fc:98:86:d2:63:d2:8f:d0:82:ac:1a:79:82:38:12:0d:7a:a9:
e3:f2:f5:e4:c7:29:a9:bb:f8:3f:d0:7d:39:a7:50:78:15:e9:
4b:f5:08:86:63:4d:b9:71:94:f2:1f:2b:b9:7e:c3:62:d0:b5:
00:1b:5f:cb:dc:23:dc:25:2a:2c:01:ec:06:5e:71:11:78:37:
31:b8:ae:35:71:a5:11:f8:7a:15:f4:07:b4:1d:30:22:87:9b:
88:fe:e8:26:09:29:bf:70:aa:fb:fd:89:3a:b4:21:d7:c5:fa:
80:e4:dd:53:87:0f:50:9d:02:7b:83:cc:1f:84:e1:f2:27:82:
58:9e:f5:12:1f:82:94:11:b6:72:08:4a:20:8a:89:6e:d1:de:
e8:b3:5a:c7:4f:53:4a:56:ab:a0:74:9d:82:92:db:55:ca:de:
80:ef:e1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:08 2026 by rpki-client