
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/6084E4F217E811EC8A22700DC4F9AE02.roa
File: 6084E4F217E811EC8A22700DC4F9AE02.roa (raw, json)
Hash identifier: 4+PTFdgl3/Y2zZl8cZ4hou7wKPwTyGH/S+rTxQnvDys=
Subject key identifier: F4:51:06:EE:D4:0A:0C:AC:83:58:C1:4E:19:3A:11:F1:E5:FF:6A:FD
Certificate issuer: /CN=A91E8B44/serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107
Certificate serial: 0580
Authority key identifier: 21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/6084E4F217E811EC8A22700DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:41:49 +0000
ROA not before: Fri 17 Oct 2025 01:35:09 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 56264
IP address blocks: 103.173.100.0/24 maxlen: 24
103.173.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl
rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:15:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1408 (0x580)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8B44, serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107
Validity
Not Before: Oct 17 01:35:09 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a4340d-5e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:e7:17:10:a2:1b:31:ad:f5:ee:8a:dd:71:
8e:66:39:8d:1a:d1:9a:c1:61:88:b1:fb:0f:01:23:
d5:2d:95:98:7a:47:49:f4:7c:4d:04:df:7d:fa:f3:
9d:0c:b7:50:1c:27:99:7b:d0:08:ff:14:c7:79:b3:
eb:a3:2b:f2:eb:12:51:a5:21:b5:1d:55:28:f1:ee:
9e:f5:af:b9:c2:7b:ce:2f:5b:18:66:c2:78:8c:2e:
c4:30:88:5c:43:d7:c3:dc:a1:a5:f2:c8:40:54:5f:
f7:c5:0c:f4:8a:de:fa:e1:de:14:07:95:91:92:0e:
e9:b2:f5:e5:16:3f:1f:e4:ed:f8:89:89:8f:be:d8:
9d:81:05:2f:11:a5:54:83:85:4c:aa:df:94:91:a2:
b2:df:61:33:1a:4a:db:09:d9:04:aa:07:41:85:a3:
8a:37:f4:8e:26:9c:b4:8c:22:21:21:00:b4:78:eb:
8c:a3:a2:e1:85:5e:36:29:9b:3c:0e:c6:81:c7:54:
bd:94:98:72:19:1f:9c:52:c3:35:8c:08:eb:66:f0:
06:7e:e3:2b:5c:22:79:e5:7c:d5:41:ba:9b:71:32:
fd:ae:d0:36:f2:92:fd:cd:27:dd:81:38:01:92:ed:
19:ae:34:45:1b:96:e8:21:8e:67:f9:f6:20:7e:6c:
a5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:51:06:EE:D4:0A:0C:AC:83:58:C1:4E:19:3A:11:F1:E5:FF:6A:FD
X509v3 Authority Key Identifier:
keyid:21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/6084E4F217E811EC8A22700DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.173.100.0/23
Signature Algorithm: sha256WithRSAEncryption
54:07:31:32:e4:01:a0:b4:72:b0:b3:f4:0f:c4:bf:8a:29:22:
9e:49:34:e0:a2:9b:8b:00:c1:75:08:8e:2e:41:99:ed:35:4c:
4e:3a:20:07:62:c1:c1:19:89:13:6d:48:da:db:df:38:c2:a5:
b7:4f:f2:0d:af:48:3a:de:57:d1:20:39:29:6b:48:15:d4:68:
e2:64:8b:7b:65:3c:7d:bd:2a:bb:bd:d9:66:34:8e:b8:c7:9c:
c8:c3:13:ea:1c:f7:5f:33:d5:9d:e9:54:51:38:08:2a:d4:f9:
28:2d:18:56:5b:97:8a:01:c2:88:e6:e2:07:ef:18:8d:33:05:
96:1f:a6:75:2a:78:5d:84:0c:7d:7d:0c:26:90:ef:8c:e2:da:
a4:c3:7c:49:c4:2a:4f:4c:b2:56:a0:a9:34:8b:14:22:0d:6d:
c7:b3:f6:7c:10:d1:71:46:e5:ce:33:be:5a:cf:83:c2:a6:0d:
50:d5:54:3e:3c:01:a6:9f:b3:6c:ea:f7:98:b2:b4:d6:b6:46:
d2:d3:20:fe:e8:28:eb:02:45:4c:db:d9:ee:7f:48:71:83:64:
f5:58:dd:52:ff:39:7d:ae:bb:77:45:34:0e:1f:80:18:d9:a6:
f3:55:1e:06:23:6a:35:47:f5:ce:42:08:c4:70:38:7f:04:f5:
1c:9a:21:81
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThCNDQxMTAvBgNVBAUTKDIxRjcxM0M4MDhCQ0QxNEJGQ0JDQ0ZENDYyNzNDMjBF
RDA3QjQxMDcwHhcNMjUxMDE3MDEzNTA5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzQwZC01ZTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmc3nFxCiGzGt9e6K3XGOZjmNGtGawWGIsfsPASPVLZWYekdJ9HxNBN99+vOd
DLdQHCeZe9AI/xTHebProyvy6xJRpSG1HVUo8e6e9a+5wnvOL1sYZsJ4jC7EMIhc
Q9fD3KGl8shAVF/3xQz0it764d4UB5WRkg7psvXlFj8f5O34iYmPvtidgQUvEaVU
g4VMqt+UkaKy32EzGkrbCdkEqgdBhaOKN/SOJpy0jCIhIQC0eOuMo6LhhV42KZs8
DsaBx1S9lJhyGR+cUsM1jAjrZvAGfuMrXCJ55XzVQbqbcTL9rtA28pL9zSfdgTgB
ku0ZrjRFG5boIY5n+fYgfmylYwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPRRBu7U
Cgysg1jBThk6EfHl/2r9MB8GA1UdIwQYMBaAFCH3E8gIvNFL/LzP1GJzwg7Qe0EH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEI0NC9GM0IxNjRBQzE3
RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBVdjh2TV9VWW5QQ0R0QjdR
UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lmY1R5QWk4MFV2OHZNX1VZblBDRHRCN1FRYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RThCNDQvRjNCMTY0QUMxN0U0MTFFQzlCODg0Njg1QzRGOUFFMDIvNjA4NEU0RjIx
N0U4MTFFQzhBMjI3MDBEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ61kMA0GCSqGSIb3DQEBCwUAA4IBAQBUBzEy5AGgtHKws/QPxL+K
KSKeSTTgopuLAMF1CI4uQZntNUxOOiAHYsHBGYkTbUja2984wqW3T/INr0g63lfR
IDkpa0gV1GjiZIt7ZTx9vSq7vdlmNI64x5zIwxPqHPdfM9Wd6VRROAgq1PkoLRhW
W5eKAcKI5uIH7xiNMwWWH6Z1KnhdhAx9fQwmkO+M4tqkw3xJxCpPTLJWoKk0ixQi
DW3Hs/Z8ENFxRuXOM75az4PCpg1Q1VQ+PAGmn7Ns6veYsrTWtkbS0yD+6CjrAkVM
29nuf0hxg2T1WN1S/zl9rrt3RTQOH4AY2abzVR4GI2o1R/XOQgjEcDh/BPUcmiGB
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:01:46 2026 by rpki-client