
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/26F67E0A842011EB8A4C635AC4F9AE02.roa
File: 26F67E0A842011EB8A4C635AC4F9AE02.roa (raw, json)
Hash identifier: 8KA6j3uJRk9+5U4m13JBTEvb0vLH4MighfDCTZZ0d7k=
Subject key identifier: F9:1E:79:B2:84:D6:C5:09:5A:A6:31:1B:3F:F2:79:B2:72:EA:95:2B
Certificate issuer: /CN=A91E754F/serialNumber=0C1F24E9E60285769EF614CFA813EE51AC9E98FE
Certificate serial: 06EF
Authority key identifier: 0C:1F:24:E9:E6:02:85:76:9E:F6:14:CF:A8:13:EE:51:AC:9E:98:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DB8k6eYChXae9hTPqBPuUayemP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/26F67E0A842011EB8A4C635AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:44:15 +0000
ROA not before: Wed 05 Mar 2025 00:11:28 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 141991
IP address blocks: 103.164.38.0/23 maxlen: 23
103.164.38.0/24 maxlen: 24
103.164.39.0/24 maxlen: 24
2001:df6:3780::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.crl
rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DB8k6eYChXae9hTPqBPuUayemP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1775 (0x6ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E754F, serialNumber=0C1F24E9E60285769EF614CFA813EE51AC9E98FE
Validity
Not Before: Mar 5 00:11:28 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3fc5f-5886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c8:f3:d8:3c:99:29:2b:ae:d4:05:93:c5:a8:
5d:d2:a1:6a:21:08:d7:21:bd:c4:e6:cf:a0:46:96:
f5:ad:21:5e:64:07:e2:5d:78:f1:4f:b1:37:85:48:
63:55:08:a0:26:40:4f:0e:be:87:29:e2:ac:cb:cc:
98:47:91:6a:d9:3f:3a:29:84:79:6b:32:dd:54:13:
7f:08:39:fc:19:7b:15:04:d5:aa:4d:b3:f9:cd:8c:
b3:3a:05:37:fe:0d:8c:e3:eb:9a:73:34:4a:92:60:
58:75:09:a2:3f:e3:0f:e2:74:0b:66:22:42:ac:dc:
d9:f7:58:59:c3:15:bc:0b:48:bd:53:ee:e1:e4:23:
ae:b0:85:74:10:ff:67:74:5f:47:06:51:fd:7b:28:
55:e4:c1:55:85:ec:82:7f:85:aa:07:a9:11:54:0a:
95:17:c7:a4:36:96:ac:52:71:64:1b:3d:d6:98:ef:
9e:dd:3d:fa:81:e7:94:17:8a:28:c0:ef:51:84:19:
5a:dd:dc:08:26:5e:2c:a8:a7:99:e4:33:e4:fa:18:
df:3a:67:40:cc:49:09:a8:13:13:dd:0b:34:c3:1c:
1a:c8:f9:ab:1b:a4:d8:55:ad:07:d2:f6:bb:78:c6:
6c:3b:d3:2c:09:fb:47:6e:18:f4:70:45:38:d8:9c:
70:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1E:79:B2:84:D6:C5:09:5A:A6:31:1B:3F:F2:79:B2:72:EA:95:2B
X509v3 Authority Key Identifier:
keyid:0C:1F:24:E9:E6:02:85:76:9E:F6:14:CF:A8:13:EE:51:AC:9E:98:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/DB8k6eYChXae9hTPqBPuUayemP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DB8k6eYChXae9hTPqBPuUayemP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E754F/B452BF8C841D11EBA087BF31C4F9AE02/26F67E0A842011EB8A4C635AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.164.38.0/23
IPv6:
2001:df6:3780::/48
Signature Algorithm: sha256WithRSAEncryption
25:7e:96:34:22:fa:8d:60:d8:89:b4:2c:ea:99:b7:7c:4a:62:
61:9d:18:65:32:87:04:37:e8:d5:2b:49:e1:1d:6d:83:70:48:
65:e7:f4:63:60:b4:de:48:b9:09:ad:bd:c2:12:a8:77:bc:86:
1d:fe:ff:11:28:ce:17:1f:13:3d:d3:9f:a8:f9:b8:7c:21:8e:
8c:33:d9:e6:45:da:c0:12:c0:5b:d7:14:20:7d:11:21:80:66:
9a:f1:f3:53:ab:63:8b:70:99:99:be:bb:e5:47:a7:41:33:47:
07:00:37:ed:42:a5:3e:0e:a1:29:15:ca:95:ce:14:44:56:40:
43:35:26:90:6b:25:0c:04:f3:ed:0e:bc:07:9b:4d:86:02:3f:
4f:97:7c:c4:95:2c:8a:38:35:55:fd:5e:6c:7b:25:26:cc:f5:
a4:58:ac:a2:47:d0:e5:f1:5e:39:3e:b3:54:25:4c:3b:ff:e4:
83:fc:b5:42:56:2a:dc:fa:fd:e6:93:06:ac:9a:98:ee:8f:76:
02:a4:01:29:6a:ee:32:15:61:0d:01:22:11:7b:ac:fa:10:8e:
b6:2f:0d:d6:69:cc:e7:71:06:36:4c:70:cb:ff:f2:87:46:61:
e9:be:8d:33:cd:01:28:5b:a2:82:f3:be:fe:4a:a1:35:6e:10:
90:a1:7e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:22 2026 by rpki-client