
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/67A55414D56911EFB3E08134C4F9AE02.roa
File: 67A55414D56911EFB3E08134C4F9AE02.roa (raw, json)
Hash identifier: kAzpZUfwrPPULu39+opOJk6qvp1ijsjz0hw+Ol5r+ds=
Subject key identifier: 31:EE:25:99:EB:07:40:0D:FA:B5:EA:57:9A:8B:42:8A:FC:36:D8:0F
Certificate issuer: /CN=A91E6DB3/serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5
Certificate serial: 03D2
Authority key identifier: 03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/67A55414D56911EFB3E08134C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:01:37 +0000
ROA not before: Thu 03 Jul 2025 01:36:23 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 153494
IP address blocks: 45.121.56.0/22 maxlen: 24
103.61.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl
rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:48:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 978 (0x3d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6DB3, serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5
Validity
Not Before: Jul 3 01:36:23 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a42aa1-1a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:c2:aa:52:59:ca:de:8f:3b:c3:70:83:6d:
de:4c:70:d5:ed:69:0c:a0:6f:96:77:24:53:96:76:
ce:43:20:97:ce:72:2b:f1:fb:5c:8a:cf:44:8f:10:
f5:5c:a1:37:b2:76:a9:65:4f:86:60:4f:e7:e4:1e:
aa:1b:3b:bb:95:a0:a2:f8:a9:cc:2b:78:16:9f:05:
91:b4:19:37:f6:fa:c1:84:8d:d2:86:50:03:98:95:
73:56:ec:00:04:1a:31:35:b7:fa:27:c5:75:b2:c4:
1b:ad:34:88:67:1d:b9:cb:0d:f8:06:d5:37:b7:d3:
3e:27:54:6a:a4:5b:a4:d3:e7:fb:b3:a2:a2:07:a6:
a2:33:4a:71:b0:1c:14:f7:ab:66:0a:bc:58:19:db:
5f:13:b1:9b:a9:f0:97:92:02:63:1e:66:f9:19:cc:
d1:e2:87:13:01:1a:a2:b7:36:78:75:4d:11:25:0d:
a9:a1:28:c7:08:5e:b5:e8:0e:e7:f9:66:04:5c:fc:
0e:17:4b:2b:76:04:b2:ad:46:21:fb:d4:8b:24:de:
ee:b6:84:65:13:1f:24:92:e3:ea:c0:96:60:7e:3e:
b7:a3:a6:46:18:5d:c6:d0:ed:06:de:20:68:60:ef:
7b:b9:dc:22:60:3f:18:a7:23:86:dd:54:dc:64:a2:
9e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EE:25:99:EB:07:40:0D:FA:B5:EA:57:9A:8B:42:8A:FC:36:D8:0F
X509v3 Authority Key Identifier:
keyid:03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/67A55414D56911EFB3E08134C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.121.56.0/22
103.61.144.0/22
Signature Algorithm: sha256WithRSAEncryption
37:4e:f2:75:dd:a8:9c:6c:9a:af:60:8d:08:c7:e7:07:30:d5:
bc:6c:84:65:3f:84:e9:36:95:fd:ea:d9:3a:87:0f:68:9c:fa:
2e:fa:53:94:b5:64:25:e1:77:12:c1:8b:64:fe:76:4e:3a:1e:
15:56:c0:24:67:77:af:34:ef:4e:08:25:25:e5:65:be:36:fa:
1c:28:a5:dd:37:da:48:ce:08:72:20:d1:35:64:4d:84:cc:63:
c4:62:36:4f:0c:dd:e7:14:67:6e:32:b8:1c:53:6a:ed:29:b2:
22:8a:11:04:3b:b0:f4:89:88:54:51:43:c9:93:ac:39:c1:f5:
78:57:b0:cd:87:01:df:0a:5f:a2:84:46:6a:f6:b1:3e:bf:89:
87:ad:b9:22:e8:b7:ca:27:55:30:5d:c3:db:1d:75:1a:ca:2d:
2a:b3:46:2e:6a:83:b1:23:fd:a2:27:83:44:72:02:ce:c2:83:
0c:93:d5:ee:13:8d:db:29:99:4f:81:88:a0:ba:4e:c2:72:93:
42:16:59:47:b6:31:4f:4d:79:96:8b:77:3a:81:23:12:81:42:
68:d8:38:58:5e:94:52:7c:c6:32:1c:77:56:ec:8f:47:76:a0:
a4:9e:49:5a:2e:2e:1f:e6:1f:ed:c1:7d:07:b2:f5:d0:15:51:
99:af:cf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:00:38 2026 by rpki-client