
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/6AFD06C0EB8B11EEA2DC1E49C4F9AE02.roa
File: 6AFD06C0EB8B11EEA2DC1E49C4F9AE02.roa (raw, json)
Hash identifier: hMxzaXUa5KhfHhIu9nH+fdfYmt9JDHfwRMOmFpZGmbY=
Subject key identifier: 3C:23:4D:3A:56:49:D6:50:CA:1E:3A:DF:79:3F:C6:75:31:73:C9:FD
Certificate issuer: /CN=A91F7E85/serialNumber=596852D52994FBB67A6379AB1E0AF514553EE886
Certificate serial: 0CD1
Authority key identifier: 59:68:52:D5:29:94:FB:B6:7A:63:79:AB:1E:0A:F5:14:55:3E:E8:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/6AFD06C0EB8B11EEA2DC1E49C4F9AE02.roa
Signing time: Wed 20 May 2026 19:22:25 +0000
ROA not before: Wed 20 May 2026 19:22:25 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 139026
IP address blocks: 103.138.164.0/23 maxlen: 23
103.138.164.0/24 maxlen: 24
103.138.164.212/30 maxlen: 30
103.138.165.0/24 maxlen: 24
103.138.165.32/29 maxlen: 29
2001:df0:4480::/48 maxlen: 48
2400:a7e0::/32 maxlen: 32
2400:a7e0::/33 maxlen: 33
2400:a7e0::/34 maxlen: 34
2400:a7e0::/38 maxlen: 38
2400:a7e0:400::/38 maxlen: 38
2400:a7e0:800::/38 maxlen: 38
2400:a7e0:c00::/38 maxlen: 38
2400:a7e0:4000::/34 maxlen: 34
2400:a7e0:8000::/33 maxlen: 33
2400:a7e0:8000::/34 maxlen: 34
2400:a7e0:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.crl
rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:35:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3281 (0xcd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7E85, serialNumber=596852D52994FBB67A6379AB1E0AF514553EE886
Validity
Not Before: May 20 19:22:25 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a0e09f1-a095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:f2:58:f0:2a:82:91:eb:a9:50:bc:2c:ed:
8e:99:eb:22:af:05:72:17:15:9e:98:27:82:82:5f:
c4:a4:e5:9e:60:1c:27:30:c4:7c:31:c0:7a:90:1d:
be:ad:d2:6c:04:cd:93:df:8a:61:1b:1e:86:d1:2a:
22:79:00:f7:46:b5:0b:4e:11:21:a4:46:d6:e2:80:
bc:db:e7:84:4d:87:1b:b5:be:19:c8:2f:40:28:91:
08:c7:10:05:21:e6:42:e3:2d:03:01:11:d4:8b:db:
ca:fc:28:bf:15:32:22:11:f9:a7:cb:dc:82:2f:f5:
01:b2:a9:9f:c5:a3:0e:b6:6f:62:cc:fc:8a:fd:22:
ca:3b:91:96:ac:a1:d3:aa:bc:e6:94:b7:da:4b:a9:
04:ba:af:a0:d1:5f:6e:7c:2c:06:4a:8a:35:d1:8d:
a2:e4:9b:5b:fb:34:5f:e0:0f:c5:7f:d4:d1:1e:4f:
e4:7f:2f:66:4a:09:b5:c9:85:a3:81:39:9a:46:e0:
6b:6c:fa:02:86:46:56:4f:bf:1a:a0:90:83:af:ab:
da:44:9c:d8:04:68:4c:d8:1b:5a:b9:17:ac:b5:82:
97:e0:d6:34:16:5c:13:51:c4:c1:83:62:2f:87:f6:
02:68:2e:ee:2b:6a:5e:65:20:79:10:f8:04:dc:3e:
61:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:23:4D:3A:56:49:D6:50:CA:1E:3A:DF:79:3F:C6:75:31:73:C9:FD
X509v3 Authority Key Identifier:
keyid:59:68:52:D5:29:94:FB:B6:7A:63:79:AB:1E:0A:F5:14:55:3E:E8:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/6AFD06C0EB8B11EEA2DC1E49C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.164.0/23
IPv6:
2001:df0:4480::/48
2400:a7e0::/32
Signature Algorithm: sha256WithRSAEncryption
6d:08:af:cf:56:f9:c5:da:7d:89:b9:81:27:5b:83:c9:ef:6d:
43:f9:03:9e:68:6f:ad:66:5b:d7:6a:e6:54:03:07:33:a9:52:
29:95:2f:21:c3:94:c3:f9:57:8d:d7:be:2f:78:8a:ac:74:75:
6a:b5:ef:89:07:9a:0f:96:33:2c:9d:a1:6e:e7:49:9f:8a:a8:
7a:ce:d1:b0:aa:26:e2:39:ae:66:44:90:c2:ae:44:28:e3:bf:
47:f5:55:30:00:0f:74:ae:ea:c8:49:75:9b:c4:da:e3:69:2a:
58:01:34:41:4c:2f:29:ae:16:ff:57:16:16:45:01:af:f9:61:
15:d1:02:b7:37:13:d9:a8:79:13:41:82:21:60:52:ed:29:ef:
48:88:92:6e:c8:95:89:67:14:4e:46:bc:b9:bd:55:bc:6b:fd:
01:6e:10:81:a7:e0:83:a4:61:cb:21:76:31:25:19:1b:ed:4f:
71:be:06:72:e8:cc:73:ad:24:0e:03:35:5c:00:86:71:54:b9:
ff:b8:cc:60:ea:7b:18:0d:3c:61:b7:07:be:bc:88:68:1f:b1:
6c:70:4a:ac:94:ef:86:72:16:de:36:5f:71:77:86:a0:da:0c:
ee:9b:b9:f0:c7:2e:16:58:d1:57:63:d9:bd:5c:f4:f3:dd:93:
f3:3c:de:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:33:20 2026 by rpki-client