
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/84706C70D12411EBAD06CD48C4F9AE02.roa
File: 84706C70D12411EBAD06CD48C4F9AE02.roa (raw, json)
Hash identifier: 1uRa9qCZnC1NyVtsdBrtA6UVUVTLZi1rR+2Ai/+6L3o=
Subject key identifier: 3A:AA:4A:7B:50:91:8B:26:E4:52:02:1D:C3:6C:5D:C4:24:81:F1:98
Certificate issuer: /CN=A91DF55D/serialNumber=60DC375DAACC9781BB702E03882A325FEBBFE9B4
Certificate serial: 0637
Authority key identifier: 60:DC:37:5D:AA:CC:97:81:BB:70:2E:03:88:2A:32:5F:EB:BF:E9:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/84706C70D12411EBAD06CD48C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:46:27 +0000
ROA not before: Fri 16 Jan 2026 22:18:30 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 134479
IP address blocks: 103.160.252.0/23 maxlen: 23
103.160.252.0/24 maxlen: 24
103.160.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl
rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:58:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1591 (0x637)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF55D, serialNumber=60DC375DAACC9781BB702E03882A325FEBBFE9B4
Validity
Not Before: Jan 16 22:18:30 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a45f53-2009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cc:3c:eb:2e:cc:46:b6:5c:e3:3d:2e:e2:4c:
f2:14:a8:bd:5a:ef:ef:4e:51:0b:c1:d9:c6:30:f2:
4f:f5:a2:c2:f4:eb:46:d8:4a:7f:7c:64:30:70:5a:
c9:9f:54:50:25:da:79:f1:f8:73:8f:a2:20:c6:bd:
a5:34:76:76:7a:85:ad:4e:96:d9:0e:d7:80:00:20:
c9:2f:6e:ea:a9:99:36:2f:97:3a:c5:42:26:f7:d0:
64:da:18:19:49:b1:f8:83:b6:60:e7:9b:16:11:cc:
fe:d3:c0:86:db:89:7d:07:aa:2b:71:8d:5d:c4:81:
72:fd:4a:18:b7:50:4a:dd:fe:95:5e:a5:4a:e2:99:
0b:9e:c4:c6:3c:f1:f8:c0:61:a2:18:61:3c:25:4c:
93:79:e4:83:b4:cd:60:27:b4:b4:72:26:92:05:74:
33:5b:84:a6:bd:e8:e8:c9:5d:b5:21:31:f0:95:8f:
13:54:53:f3:e1:0b:cd:9c:32:3b:93:33:e6:7d:0d:
92:b0:c1:ba:b1:a4:be:04:4f:f8:aa:dc:87:49:9b:
34:32:27:f1:cb:06:fb:05:91:be:62:d3:ea:fa:9e:
e0:88:db:10:d2:91:20:a8:30:a1:35:7f:d5:ed:b8:
50:c7:78:16:c4:38:69:09:67:f4:69:b5:0b:69:da:
11:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AA:4A:7B:50:91:8B:26:E4:52:02:1D:C3:6C:5D:C4:24:81:F1:98
X509v3 Authority Key Identifier:
keyid:60:DC:37:5D:AA:CC:97:81:BB:70:2E:03:88:2A:32:5F:EB:BF:E9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/84706C70D12411EBAD06CD48C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.160.252.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:d7:49:75:7b:55:1b:03:ff:0d:ee:52:ef:15:85:c1:10:7f:
63:8c:51:cf:61:3c:cf:4d:8a:18:41:92:ea:86:0f:8f:6f:aa:
77:5f:13:ba:40:66:98:83:09:74:bf:7a:cb:50:11:02:49:0d:
eb:49:9d:40:f4:70:96:43:ca:49:14:16:f8:fc:7e:23:79:cc:
49:69:41:64:90:f8:a2:8e:3d:e0:5d:2c:b3:fd:90:73:ff:66:
c3:46:99:58:77:77:62:57:0a:1b:88:12:c6:06:e0:9b:a0:a8:
2d:45:1b:2b:2e:5a:38:1c:41:33:04:e7:b3:f7:35:8e:31:6c:
48:bf:ba:7f:69:ab:a6:5e:c6:72:61:c7:c8:93:eb:24:16:23:
99:3e:82:a1:ea:62:05:81:ab:33:93:1a:e2:ca:0d:66:4b:36:
cf:ee:8b:16:2f:c0:20:7a:79:30:b5:ff:5c:c3:89:15:58:7d:
3b:fc:a8:d0:59:b7:ca:64:4c:69:a0:91:3a:13:f4:22:ac:6c:
eb:f7:23:ce:97:5c:1c:b1:c2:d8:d5:ad:4f:b6:46:19:93:b5:
7b:da:81:49:f0:18:d3:65:1f:c8:b8:b2:77:5a:0b:42:e7:d2:
7d:e0:d9:61:d3:b1:a3:f4:a5:35:7a:8e:db:65:2b:b9:58:e1:
70:db:23:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:41:14 2026 by rpki-client