
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/F6CE4EEC56F911E997D5B40AC4F9AE02.roa
File: F6CE4EEC56F911E997D5B40AC4F9AE02.roa (raw, json)
Hash identifier: D9Vbd5oLTjv1UtRVThtNHCYhAvomqLgl47nTBJHilWA=
Subject key identifier: 2B:D6:B3:FC:3B:E3:31:07:DC:3D:A0:8F:64:0B:DC:DC:EB:53:87:36
Certificate issuer: /CN=A91F44EA/serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A
Certificate serial: 165D
Authority key identifier: 69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/F6CE4EEC56F911E997D5B40AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:49:01 +0000
ROA not before: Wed 02 Apr 2025 17:15:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137521
IP address blocks: 103.111.79.0/24 maxlen: 24
103.123.84.0/24 maxlen: 24
2001:df3:e0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl
rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:22:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5725 (0x165d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F44EA, serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A
Validity
Not Before: Apr 2 17:15:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a40b8d-e33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:9a:13:bc:ad:4a:bc:eb:7e:48:3c:02:65:
4b:6d:ab:19:f9:fa:79:ea:07:51:2b:7f:58:e2:26:
96:68:2c:21:66:ab:02:69:94:ea:4a:7d:c2:cf:22:
7d:83:de:21:d6:10:4e:5f:a8:bb:2f:22:10:ec:d4:
4a:e5:40:bf:d1:2c:5b:5f:6d:c5:89:d9:59:9a:ef:
58:8e:c8:6f:03:62:62:95:56:b7:bd:7a:de:24:aa:
93:83:85:5c:2a:3b:f7:dc:62:5e:de:eb:70:e8:b0:
50:20:0d:f3:e6:2d:c1:ad:9f:90:c6:23:61:bc:8b:
25:ca:cd:2e:29:14:a8:93:6b:ef:e2:2c:21:ae:16:
2e:3b:4c:a6:a0:66:c3:d1:a4:5b:d7:a4:30:22:34:
75:60:17:ea:68:2e:1c:cc:da:8b:c7:07:b0:c1:d9:
e9:9e:c9:41:21:3d:59:c6:c5:34:79:dc:0d:2a:7a:
eb:31:8c:59:f3:d4:62:41:3c:6e:06:17:12:7a:9d:
71:55:99:83:75:10:20:4e:3a:47:b5:f8:62:6f:7f:
e2:f8:66:ca:e5:ea:b1:8d:e2:21:4c:24:aa:73:b7:
e4:65:f3:0e:02:51:f5:dd:2e:e7:47:35:a7:8c:4a:
af:1a:22:c9:8a:64:10:c5:49:79:b3:36:27:b9:e7:
1e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D6:B3:FC:3B:E3:31:07:DC:3D:A0:8F:64:0B:DC:DC:EB:53:87:36
X509v3 Authority Key Identifier:
keyid:69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/F6CE4EEC56F911E997D5B40AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.111.79.0/24
103.123.84.0/24
IPv6:
2001:df3:e0c0::/48
Signature Algorithm: sha256WithRSAEncryption
b4:54:8e:e9:df:dc:33:4d:38:23:e1:f4:da:db:fb:ba:4d:3c:
c1:fe:73:19:6e:97:92:46:cf:e9:95:d4:f4:ec:91:c0:9d:77:
19:20:1a:4d:8e:f6:b5:c2:d7:35:26:26:c7:e1:df:82:3c:f8:
e0:55:92:9d:72:a4:56:89:85:4f:48:5f:07:28:2f:e8:e2:af:
c5:41:e7:a6:8a:5c:4c:a7:d0:60:78:61:62:4d:19:c5:b3:e4:
32:f7:3d:0a:be:9c:87:77:3f:35:6e:38:d7:a3:9c:6d:49:a3:
54:77:73:67:00:b0:0c:32:9a:c3:d5:58:3c:f4:69:71:59:89:
54:65:fd:6b:f8:74:ac:61:dc:dc:c1:7d:ac:af:d4:6c:26:a5:
03:b0:f9:41:ba:f3:58:6e:e0:32:0a:4e:ab:b3:c3:c9:a1:41:
cf:a8:48:c0:7c:e7:e6:ac:0c:57:9b:5c:e5:cf:b1:a1:ee:21:
8a:f1:c5:37:22:b7:f9:c7:41:4f:76:49:df:7d:89:fe:aa:aa:
34:82:9c:f2:58:fa:38:d6:38:64:bd:fb:2f:bb:03:ea:4e:9b:
ee:74:1d:31:d1:23:4d:77:75:ba:67:7f:4e:57:f6:99:02:37:
2e:55:ee:c1:af:ad:e5:9d:9a:b7:85:3e:8f:5d:94:e0:f7:ac:
26:36:ef:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:28 2026 by rpki-client