
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/4F445CCE1FF311F0833FC50BC4F9AE02.roa
File: 4F445CCE1FF311F0833FC50BC4F9AE02.roa (raw, json)
Hash identifier: NEyPsb5RWjdv+OoFJRvfUjkfYWeqz3AuMZCzrBRpKPw=
Subject key identifier: 9A:B8:DA:A4:22:3E:C4:F4:B7:CF:55:5E:0E:EB:89:27:BB:0D:28:2D
Certificate issuer: /CN=A91DB6FB/serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
Certificate serial: 01CF
Authority key identifier: 6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/4F445CCE1FF311F0833FC50BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:19:31 +0000
ROA not before: Thu 23 Oct 2025 05:51:38 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 19905
IP address blocks: 103.131.106.0/24 maxlen: 24
103.142.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl
rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:38:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463 (0x1cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB6FB, serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
Validity
Not Before: Oct 23 05:51:38 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a45903-2907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:be:86:17:45:2f:19:2c:6a:1c:eb:2a:13:38:
6d:b8:97:34:61:cf:c5:c2:93:37:74:95:ab:60:14:
fd:1b:48:a0:87:88:64:f0:e8:af:16:ca:5a:cc:c0:
e1:87:41:c8:f8:83:e3:1c:a4:0c:c5:6d:5d:db:06:
d0:b2:a2:41:1a:cb:df:f4:3f:76:89:d8:2c:97:9e:
7d:51:44:30:13:46:e7:94:be:5b:c2:58:a8:be:24:
fc:1a:44:51:8e:24:6d:dc:f3:36:4d:13:75:8d:6c:
65:ae:f0:32:f7:ee:96:c4:12:6a:1f:92:cc:13:f7:
b4:d0:45:f5:6c:53:43:e0:c9:98:88:0b:a3:f4:00:
a3:7f:87:20:b4:68:35:d0:88:e9:a0:0e:8e:75:aa:
eb:d2:01:28:bd:1a:81:b5:50:29:22:67:41:8d:ce:
af:6f:5e:5d:8f:f8:b0:66:06:2f:3d:a0:80:8f:28:
e3:05:53:d8:45:18:ce:f6:ad:01:48:06:90:46:56:
c7:ab:d3:98:72:ea:dc:04:e8:c6:d4:a1:75:f5:62:
63:8a:40:ca:5a:99:0d:8a:8e:1b:e8:8d:2a:7b:1b:
d3:b1:08:3e:40:e5:35:87:ac:6b:94:21:f5:2a:95:
f7:f3:43:7b:e4:60:2a:fe:4f:d8:4a:46:09:be:48:
6c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B8:DA:A4:22:3E:C4:F4:B7:CF:55:5E:0E:EB:89:27:BB:0D:28:2D
X509v3 Authority Key Identifier:
keyid:6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/4F445CCE1FF311F0833FC50BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.131.106.0/24
103.142.160.0/24
Signature Algorithm: sha256WithRSAEncryption
89:09:57:dc:76:bf:46:b9:2e:42:15:c3:29:cb:cc:3a:31:a6:
10:d2:b5:82:6f:55:5b:2c:6d:1c:6e:d7:ee:cc:29:fc:c1:b3:
e0:23:0f:86:3c:91:21:73:be:b2:6b:a6:7a:53:ae:94:d8:69:
11:af:9a:57:bf:f9:5f:4f:72:f1:5c:c7:6a:40:ec:ab:8a:d7:
d2:91:f4:1c:d2:3e:50:a2:15:49:c8:a6:f5:a4:d2:fb:a0:41:
b7:23:00:e8:1d:e6:3b:d5:9b:ab:86:4f:00:9d:af:7c:e9:48:
af:b4:cb:30:df:22:af:9d:76:6f:f8:25:ea:04:d1:1d:7a:cc:
b9:84:88:d6:d4:d7:41:4c:e9:d7:31:e5:6e:50:e4:af:6e:67:
43:20:74:a2:3a:b5:28:0a:fc:89:c8:b0:d5:e6:9d:f3:47:ac:
e3:8f:e3:34:51:fa:33:d5:f0:e4:b1:d5:3e:fb:de:9b:5b:1e:
60:59:22:37:e0:dc:58:41:65:51:69:85:11:2b:28:7f:17:0a:
ee:c8:8c:3c:0b:52:45:5b:03:7f:b7:e7:08:4e:4f:b5:b7:7c:
cd:37:33:2f:a1:aa:3b:e3:08:70:69:3f:d2:6e:d4:3d:71:80:
59:3b:6a:6e:aa:07:38:88:22:6d:44:09:09:b3:1f:00:4b:b5:
c9:9d:5d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:33:02 2026 by rpki-client