
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/512CFEFE68BD11EE87942B4EC4F9AE02.roa
File: 512CFEFE68BD11EE87942B4EC4F9AE02.roa (raw, json)
Hash identifier: eftqJaT0OiGT6+fWanJpYi7UmZemCJiu4YrLSsovmzg=
Subject key identifier: 45:EB:50:1E:BF:EA:45:42:C3:8F:17:5D:74:D1:D6:86:A7:C7:DF:72
Certificate issuer: /CN=A91DB6FB/serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
Certificate serial: 01CE
Authority key identifier: 6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/512CFEFE68BD11EE87942B4EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:19:30 +0000
ROA not before: Thu 23 Oct 2025 05:51:37 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 138360
IP address blocks: 103.131.106.0/24 maxlen: 24
103.142.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl
rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:38:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 462 (0x1ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB6FB, serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
Validity
Not Before: Oct 23 05:51:37 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a45902-9985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ae:15:37:31:e1:be:10:5e:c3:47:98:33:06:
5b:1b:4f:06:94:3c:c1:7b:0d:4e:6c:25:cd:7b:60:
39:47:f5:e6:f7:e8:ae:1f:39:d7:c4:e3:f7:a1:7a:
2f:18:0f:fb:be:a5:b6:46:a8:8c:75:27:d5:30:6a:
b3:27:91:c4:a9:22:17:89:e4:77:86:2f:ce:77:ce:
b0:db:49:e9:78:42:97:f7:52:7c:d4:93:9f:41:45:
de:28:1a:e6:67:1c:7f:00:bb:5a:9d:1f:14:af:21:
75:cf:bc:16:a8:a5:8b:11:78:a2:a0:4a:78:81:a8:
a2:c5:d8:5d:03:2a:24:24:35:0f:f9:d3:80:80:4b:
82:a2:dc:c2:68:43:91:ba:41:05:18:6c:cd:75:45:
d7:88:06:08:90:71:97:7f:96:4b:cd:ee:65:a4:09:
b6:e1:ac:6d:52:45:2d:c4:bb:ab:75:38:91:f5:e7:
52:df:c7:19:91:82:02:10:3f:af:b8:ef:c0:d9:f8:
fa:67:de:90:30:db:b9:75:a9:fe:42:7d:2b:28:a8:
32:71:b3:05:25:af:ad:24:ad:3b:73:40:f4:69:49:
c8:21:1d:3e:3f:c9:04:43:69:9a:32:a7:bb:e8:00:
25:97:08:d9:08:12:83:27:b5:50:29:49:72:93:f1:
7f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EB:50:1E:BF:EA:45:42:C3:8F:17:5D:74:D1:D6:86:A7:C7:DF:72
X509v3 Authority Key Identifier:
keyid:6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/512CFEFE68BD11EE87942B4EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.131.106.0/24
103.142.160.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:f4:51:71:ed:83:98:35:86:5c:68:df:2e:45:29:15:d1:57:
25:ec:f0:1c:d0:fb:c5:04:d9:3b:b0:31:55:07:08:98:e7:3a:
66:bf:a2:0b:16:cf:da:a6:55:bb:ba:ed:10:43:15:e8:27:95:
49:18:6c:09:61:4c:99:eb:a8:47:1d:84:93:a1:4d:1c:2e:4b:
b7:27:48:ff:88:99:e3:d1:b8:3c:89:7e:8c:7d:98:2a:c2:b5:
fd:54:07:b7:ff:26:e2:25:eb:e5:c5:83:87:dd:59:78:5b:87:
4c:d4:23:d9:3d:ae:b6:bd:4c:f5:c5:0b:8e:51:bf:f3:24:74:
70:4c:ac:c3:12:c8:5e:1b:fe:93:a3:05:92:f6:0c:e6:09:12:
fd:5d:40:66:29:3d:52:09:d2:7a:d4:c4:64:f0:a7:0d:30:6d:
b4:54:57:d8:10:21:4b:de:b8:6c:2b:83:97:72:51:ed:58:2c:
7d:8e:1a:55:6e:e6:ca:5a:da:b7:b3:c6:e8:ce:41:15:bd:28:
22:5c:39:e6:99:be:f2:e4:c3:af:98:f0:f4:e9:6f:c6:05:ef:
b1:85:d9:9b:5e:3c:be:35:2f:4f:03:d0:c6:60:16:6a:0c:87:
0e:53:99:1e:07:9b:ec:71:64:85:e8:3f:1f:a4:fc:e6:0a:1d:
c0:14:0b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:32:49 2026 by rpki-client