
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/6B106380A53111F0A0F3DA52C4F9AE02.roa
File: 6B106380A53111F0A0F3DA52C4F9AE02.roa (raw, json)
Hash identifier: g76ZamyRjODzgQS6yEVFN20AKLXKwu0wqqIXxgPUFe8=
Subject key identifier: E6:4B:63:8F:6B:FD:31:C2:24:C4:76:67:98:C0:08:F0:91:E5:7A:FF
Certificate issuer: /CN=A91E3493/serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
Certificate serial: 053D
Authority key identifier: E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/6B106380A53111F0A0F3DA52C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:36:50 +0000
ROA not before: Tue 18 Nov 2025 22:44:57 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 147304
IP address blocks: 103.174.170.0/23 maxlen: 24
2001:df7:cd80::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl
rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:31:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1341 (0x53d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3493, serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
Validity
Not Before: Nov 18 22:44:57 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a47931-6c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:34:0e:23:c7:b7:33:90:e1:b0:15:df:ea:a1:
4f:21:bd:c2:aa:66:b9:51:b4:40:47:26:dd:b8:b1:
15:59:8b:10:0d:70:6a:9b:9c:a8:7d:6b:90:f1:00:
72:2b:7d:d9:e9:f2:08:d7:8d:35:ef:2a:eb:62:95:
48:e2:e6:a1:83:fd:62:b7:6c:0b:6d:83:c8:27:df:
b6:5c:d4:ea:9c:4b:03:bd:bf:7a:cc:1b:be:fe:9d:
87:0d:9c:47:85:ee:14:c4:fa:56:60:35:1c:01:ab:
fe:a0:c9:be:eb:ea:67:91:54:37:cc:5d:f8:66:50:
d3:29:f3:68:f4:6a:aa:73:a8:a7:63:c2:b1:aa:49:
93:ec:3d:65:2f:6f:ec:1c:63:c3:23:62:73:ad:47:
2a:16:92:eb:1a:00:f2:7a:ac:4e:62:09:d1:e7:11:
22:e9:03:58:4f:75:42:4b:3e:2d:6a:41:c6:b0:a5:
6e:51:cc:05:6b:39:b4:03:19:2a:af:08:df:d1:87:
f9:c9:a1:15:6c:20:03:d1:2c:86:73:73:30:4f:b9:
9f:ea:ae:d0:a2:a1:f1:2e:98:f9:b4:a3:cd:31:aa:
1f:f7:ec:b8:32:ad:d8:8a:b8:e1:c7:3b:a1:23:98:
24:83:5a:b3:54:83:93:aa:0a:40:4c:cf:ae:97:f9:
8f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4B:63:8F:6B:FD:31:C2:24:C4:76:67:98:C0:08:F0:91:E5:7A:FF
X509v3 Authority Key Identifier:
keyid:E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/6B106380A53111F0A0F3DA52C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.174.170.0/23
IPv6:
2001:df7:cd80::/47
Signature Algorithm: sha256WithRSAEncryption
2d:47:f2:22:95:a5:c8:8f:cc:73:2a:27:17:43:12:90:a1:66:
71:b2:9a:6f:70:3c:11:dc:6c:27:b5:d2:0f:50:c4:a0:ec:18:
93:20:42:85:b7:cf:75:5b:15:7b:d2:f6:2f:5d:0b:27:66:6f:
77:07:bc:11:07:52:b6:98:a2:b8:00:b9:59:34:3e:70:a5:bc:
18:a3:7d:7f:eb:7f:52:89:0c:96:f6:e0:01:85:2b:8e:59:b2:
36:97:f0:7c:72:4a:c8:a6:1b:b0:f7:03:ed:96:41:7b:ad:1a:
9f:10:5d:f3:2d:80:bd:2d:7b:cf:06:2f:e8:41:e4:af:c2:20:
be:de:df:af:18:03:a5:70:b0:50:11:89:35:cf:b8:6d:6f:1a:
18:7a:06:dc:c4:f7:59:f5:4f:e7:6e:4f:76:48:0e:be:94:65:
d6:23:57:c7:c0:98:ef:df:3c:d4:a5:7b:6e:12:2a:57:5b:d4:
e0:8c:bf:da:51:93:b0:f1:11:22:57:c1:ef:bd:31:71:c6:65:
5e:c5:9c:1a:63:71:13:81:f9:4a:39:fa:66:ee:41:87:26:81:
c9:c5:35:b5:03:10:3b:22:fc:0a:07:8b:4d:da:dc:e5:14:a3:
2f:2c:a8:bd:c9:27:24:76:b3:b3:f1:ac:45:78:b4:82:03:e7:
10:e1:f8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:25:26 2026 by rpki-client