
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/6F46908C2D3411ED92165562C4F9AE02.roa
File: 6F46908C2D3411ED92165562C4F9AE02.roa (raw, json)
Hash identifier: UPDUd4t5zx8UFYbNLzFGnvRhyMjEHl7Tb9rUHZFXp40=
Subject key identifier: 3A:CD:74:2A:81:6F:27:87:F9:B4:2C:E0:7D:51:58:24:88:67:CC:8E
Certificate issuer: /CN=A91FA1BE/serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2
Certificate serial: 02BE
Authority key identifier: 95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/6F46908C2D3411ED92165562C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:07:41 +0000
ROA not before: Wed 09 Jul 2025 03:08:26 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 16509
IP address blocks: 103.10.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl
rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:07:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 702 (0x2be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA1BE, serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2
Validity
Not Before: Jul 9 03:08:26 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a42c0d-b514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dc:81:e2:bd:7b:59:c5:bd:25:3f:d2:7a:68:
60:d2:af:4e:67:28:2f:3a:dc:77:49:35:d6:fb:02:
a6:87:77:6c:78:7f:41:37:81:b8:03:f9:2c:d1:a4:
3c:55:46:c3:aa:44:d8:97:6d:39:a3:8a:f2:8b:25:
e9:15:ac:a6:39:63:27:57:59:83:38:94:b1:28:ee:
0b:ef:c2:fc:36:9d:61:aa:6e:18:f5:b2:fd:4d:4d:
f9:d6:40:cd:c0:7e:31:5a:d6:61:41:16:4d:d2:6b:
ea:25:ec:18:c5:e6:3d:14:43:f5:77:8c:c0:6c:e9:
ae:fe:16:85:f8:68:7b:27:d2:a1:db:87:ca:fa:e8:
51:e4:75:8a:d8:0b:f1:3a:68:37:03:ed:9b:a4:70:
f2:47:65:a4:bf:fe:df:5a:58:34:b9:75:34:c7:87:
2e:f5:3f:da:d4:01:f1:9b:de:9e:a7:fd:ff:f4:7a:
c1:68:db:b0:b3:4c:27:1f:3e:e3:dd:07:4a:ca:75:
0a:b4:e5:43:f9:95:89:67:44:b6:b4:4d:9a:f4:8c:
bb:b5:43:6c:3c:1d:c2:e7:96:85:2d:3e:b1:a3:37:
29:a0:eb:80:e9:df:00:45:0a:03:58:35:13:db:92:
c4:59:a5:60:6f:83:cc:7b:52:d4:b4:da:e3:06:74:
d5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CD:74:2A:81:6F:27:87:F9:B4:2C:E0:7D:51:58:24:88:67:CC:8E
X509v3 Authority Key Identifier:
keyid:95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/6F46908C2D3411ED92165562C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.10.127.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:23:ce:8d:ba:4f:f5:45:9c:10:b7:f1:f7:3a:d4:50:3a:2f:
56:51:7e:23:f8:e1:cd:0f:8d:f3:d0:7f:b6:80:71:ed:a9:65:
b3:9c:ee:ec:f1:b2:d6:53:86:ca:12:57:8d:ff:6e:5c:fc:71:
3c:61:b0:78:5b:cf:84:8a:ba:52:b1:b6:8a:83:54:b2:7e:d8:
5c:20:75:4f:cb:85:35:3f:d3:d4:64:c5:de:73:cc:65:d2:bc:
14:28:4c:fe:af:13:59:a4:88:a2:b8:44:a6:87:5c:ba:53:86:
d3:17:24:57:b5:1e:05:92:24:1b:ce:e5:da:ab:e4:28:5e:03:
fe:10:cd:66:84:9a:0c:b4:95:fa:cd:af:b9:38:43:d4:54:63:
33:64:76:0f:f8:ab:1b:19:b3:74:a8:14:1f:da:41:03:39:d4:
27:03:61:e6:16:d7:d2:e6:b2:80:c4:54:91:7a:ea:d5:fe:e9:
7f:7f:2f:90:e4:38:ab:16:b0:33:b1:1e:2d:78:b5:e1:3e:e2:
ee:a9:f7:fa:14:7a:6d:42:f5:c5:28:61:c0:18:e9:66:42:df:
41:3e:f8:a0:f5:59:81:e2:77:d8:54:42:d1:cd:17:aa:a3:7a:
1c:94:89:22:d1:04:4e:b3:c7:29:54:8b:46:08:49:a8:32:0b:
58:a4:1b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:53:14 2026 by rpki-client