
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/512CFEFE68BD11EE87942B4EC4F9AE02.roa
File: 512CFEFE68BD11EE87942B4EC4F9AE02.roa (raw, json)
Hash identifier: d361r9fYfx4QlmvOZDXaFl9lFshWegTqKOt6ceQ4xWk=
Subject key identifier: DA:37:43:85:2F:0D:29:DA:9E:59:33:D9:D8:B0:60:8B:4C:86:BD:29
Certificate issuer: /CN=A91DB6FB/serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
Certificate serial: 0247
Authority key identifier: 6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/512CFEFE68BD11EE87942B4EC4F9AE02.roa
Signing time: Sat 17 Oct 2026 03:52:00 +0000
ROA not before: Sat 17 Oct 2026 03:52:00 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 138360
IP address blocks: 103.131.106.0/24 maxlen: 24
103.142.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl
rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Nov 2026 02:59:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 583 (0x247)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB6FB, serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
Validity
Not Before: Oct 17 03:52:00 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ad2f0e0-737b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:51:89:0e:ef:13:07:0b:90:9a:c9:9f:fa:49:
7e:5d:f2:a3:2e:15:03:65:37:38:ea:3a:c5:0c:f7:
af:64:cb:47:cf:13:f3:74:53:d2:88:c5:37:21:40:
f4:d1:5a:2b:00:33:19:a5:f2:a5:4e:2c:65:41:78:
c0:c3:46:04:c3:c0:2b:bc:9e:60:9a:4a:1d:c8:1a:
11:f9:90:43:e9:c3:13:d0:7a:2c:57:c0:c3:a4:cf:
43:4f:45:2f:70:8b:a0:24:10:5e:80:b7:4d:8c:f2:
07:cd:e2:bb:fc:f9:d1:7a:31:28:75:a9:48:57:b7:
8e:43:40:11:a6:f8:cf:46:65:f1:f4:67:e7:ec:d6:
77:92:7c:07:9a:61:2d:f3:75:3f:0e:77:8b:8c:88:
39:31:a6:3e:e6:4c:89:ac:34:98:48:38:06:d4:18:
f7:26:96:c1:9b:60:d9:fa:25:23:87:3c:bc:f6:eb:
23:89:ad:e7:1f:66:92:aa:89:8c:17:52:6c:94:61:
ea:f7:fd:72:4d:cb:19:bb:23:cf:8a:e3:bb:fc:46:
c6:70:e7:bc:3d:21:d3:4e:7e:a7:64:23:1b:bf:91:
c0:f6:f9:bb:df:ee:6e:6e:66:1b:25:12:68:ae:e9:
39:d3:76:88:ce:37:e0:7c:c8:0c:f6:7d:4d:ed:98:
5d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:37:43:85:2F:0D:29:DA:9E:59:33:D9:D8:B0:60:8B:4C:86:BD:29
X509v3 Authority Key Identifier:
keyid:6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/512CFEFE68BD11EE87942B4EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.131.106.0/24
103.142.160.0/24
Signature Algorithm: sha256WithRSAEncryption
97:92:6b:95:8a:22:9d:d2:58:42:7d:80:4f:26:26:00:9a:e9:
87:a7:1e:44:c0:dc:7c:5c:16:2b:2e:e9:ce:33:0a:38:a3:ec:
bc:23:79:50:65:ff:67:4d:ae:ad:6f:83:50:d3:f9:53:45:70:
3c:17:08:16:cf:65:c7:07:48:94:b2:23:a6:cb:0c:ad:4e:e9:
2e:9f:88:2c:5a:66:c9:ca:d0:04:58:e1:64:0b:d3:12:36:8f:
ae:a0:d7:63:ec:6b:48:4a:77:e9:5b:5b:d9:0e:45:8e:50:10:
a6:18:54:e0:c5:eb:e6:51:01:57:5a:57:a8:40:d5:32:74:0e:
1f:ec:f3:20:b9:f7:03:4c:9f:15:46:38:c1:47:92:34:78:f8:
c1:3a:38:68:4a:c1:20:26:91:a3:0e:33:c5:57:7d:0d:03:b5:
0e:09:a4:18:58:fc:01:82:34:42:49:d0:f9:b5:ca:74:08:9a:
e6:99:15:65:c1:b8:c7:6c:e5:b0:6c:07:86:2e:61:29:f4:94:
1d:06:93:5c:7a:a6:54:ff:a1:b2:7e:07:cb:5c:03:1f:df:a5:
ee:9e:0d:67:90:0e:60:f2:0c:f4:e0:29:8b:f2:c6:b6:d7:50:
24:02:43:1d:18:55:45:45:b7:bf:29:b4:71:67:91:03:5b:e4:
3e:b1:fb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 16:46:07 2026 by rpki-client