
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/6C9D67B8607D11F18380FD6980EE528E.roa
File: 6C9D67B8607D11F18380FD6980EE528E.roa (raw, json)
Hash identifier: a6VTLfd8CZcr69PcntFmhHlzKBovrVN6n3VnwfNJDk4=
Subject key identifier: EB:9D:E9:58:D6:21:85:66:01:71:3E:6F:CF:BD:41:64:B1:29:4B:EB
Certificate issuer: /CN=A91E01F7/serialNumber=46DF5F5C16DFD68C2162EFAF711B18DBE70EA938
Certificate serial: 1D
Authority key identifier: 46:DF:5F:5C:16:DF:D6:8C:21:62:EF:AF:71:1B:18:DB:E7:0E:A9:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rt9fXBbf1owhYu-vcRsY2-cOqTg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/6C9D67B8607D11F18380FD6980EE528E.roa
Signing time: Sun 26 Jul 2026 17:14:28 +0000
ROA not before: Sun 26 Jul 2026 17:14:28 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 141198
IP address blocks: 103.156.66.0/23 maxlen: 23
103.156.66.0/24 maxlen: 24
103.156.67.0/24 maxlen: 24
2406:7f40::/32 maxlen: 32
2406:7f40::/33 maxlen: 36
2406:7f40::/40 maxlen: 40
2406:7f40:100::/40 maxlen: 40
2406:7f40:200::/40 maxlen: 40
2406:7f40:300::/40 maxlen: 40
2406:7f40:400::/40 maxlen: 40
2406:7f40:8000::/33 maxlen: 34
2406:7f40:8000::/34 maxlen: 36
2406:7f40:8000::/40 maxlen: 40
2406:7f40:8100::/40 maxlen: 40
2406:7f40:8200::/40 maxlen: 40
2406:7f40:8300::/40 maxlen: 40
2406:7f40:8400::/40 maxlen: 40
2406:7f40:c000::/36 maxlen: 36
2406:7f40:d000::/36 maxlen: 36
2406:7f40:e000::/35 maxlen: 35
2406:7f40:e000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/Rt9fXBbf1owhYu-vcRsY2-cOqTg.crl
rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/Rt9fXBbf1owhYu-vcRsY2-cOqTg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rt9fXBbf1owhYu-vcRsY2-cOqTg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 21:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E01F7, serialNumber=46DF5F5C16DFD68C2162EFAF711B18DBE70EA938
Validity
Not Before: Jul 26 17:14:28 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a664074-375e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:08:10:5d:be:e7:15:c9:98:79:41:c9:04:8d:
03:33:26:8b:ff:c1:b9:8b:a5:0c:02:0c:9a:4e:10:
4e:2d:d5:b8:8b:f1:8a:32:9c:e6:e7:7b:c6:7c:9d:
8d:e8:d8:75:46:fa:76:42:9d:02:d1:5c:60:2d:1f:
de:fd:8f:4f:c3:06:f0:1f:ce:f8:52:2c:b0:12:08:
bc:26:31:39:40:b2:94:50:22:70:36:44:2a:9a:6e:
be:91:ab:29:7b:0f:15:b7:05:7b:3e:f2:fb:42:4c:
b7:59:ef:9a:7e:de:29:83:a5:d4:0b:4a:c8:36:e2:
71:d7:ec:75:74:c5:ac:d2:3d:37:76:7f:db:d9:97:
41:b5:6f:28:8f:0a:cc:59:08:d6:1f:9e:2f:4d:c5:
3f:6f:d9:bc:78:eb:c9:cb:1b:e0:0f:02:fd:e0:d8:
79:48:69:62:b1:be:39:72:77:95:f1:54:cb:ef:eb:
d2:d2:42:74:e5:bf:c9:a8:2c:e5:7d:0c:49:7d:83:
6f:bb:6a:30:c9:4e:38:41:d9:d9:26:eb:15:06:ad:
3d:51:e1:84:ff:a3:72:29:48:ed:17:b3:f0:f3:b3:
7d:95:29:c2:55:ca:d5:ae:a6:18:34:63:d9:fd:12:
af:6f:ef:82:43:93:6b:6f:78:14:c5:4b:72:a9:1d:
f3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9D:E9:58:D6:21:85:66:01:71:3E:6F:CF:BD:41:64:B1:29:4B:EB
X509v3 Authority Key Identifier:
keyid:46:DF:5F:5C:16:DF:D6:8C:21:62:EF:AF:71:1B:18:DB:E7:0E:A9:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/Rt9fXBbf1owhYu-vcRsY2-cOqTg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rt9fXBbf1owhYu-vcRsY2-cOqTg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/6C9D67B8607D11F18380FD6980EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
103.156.66.0/23
IPv6:
2406:7f40::/32
Signature Algorithm: sha256WithRSAEncryption
00:3a:5d:c0:ab:62:c8:76:d2:63:2e:94:7e:85:cf:1b:f8:2d:
05:84:38:00:17:ae:16:2f:b2:47:28:13:10:17:5e:ba:5d:13:
5c:73:fc:56:ed:67:3b:cf:dd:11:53:4e:55:a6:ee:9a:8d:44:
82:a9:76:8d:9e:93:b4:17:b2:19:95:e2:00:d2:55:c0:bb:12:
1b:2a:5b:b2:7b:3d:2b:55:cd:25:ab:f1:4a:3f:42:8b:3c:fd:
3b:30:92:6d:8c:77:76:f5:8e:56:e2:1d:61:95:77:f2:43:05:
12:d4:8d:db:91:2e:ea:97:65:b3:af:ac:91:47:89:cb:4c:2c:
77:8d:a3:c8:02:a9:8a:55:17:06:c3:7b:1b:b4:59:52:b8:13:
0f:2a:ba:9d:45:51:f7:ff:9e:08:b9:d9:34:41:70:b8:d5:44:
d1:b9:90:63:11:45:29:11:c5:37:6c:08:b2:73:06:70:e8:d6:
c0:14:16:11:e2:36:e8:6c:ef:aa:26:83:47:72:a6:23:f8:21:
a4:f3:21:93:17:2a:92:f1:83:d8:80:4a:f6:7f:d7:9e:0d:29:
a3:ed:45:ff:5b:a7:8c:bb:a9:41:b9:89:27:7d:93:23:68:f1:
b0:0a:d2:eb:92:96:7c:b9:e8:52:d8:6c:25:37:bb:6f:02:e9:
6b:c9:62:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:07:21 2026 by rpki-client