
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/106F283CB74311EDB0C38030C4F9AE02.roa
File: 106F283CB74311EDB0C38030C4F9AE02.roa (raw, json)
Hash identifier: hpocYvDPf9bP8lk8bw2eWDBV0MmWUMrFYAIPH3SFhGE=
Subject key identifier: BB:19:E0:7E:26:0E:A7:FC:B4:FD:B9:0E:78:69:9E:70:25:40:56:75
Certificate issuer: /CN=A91FA9BC/serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C
Certificate serial: 0287
Authority key identifier: 4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/106F283CB74311EDB0C38030C4F9AE02.roa
Signing time: Sat 11 Apr 2026 02:34:25 +0000
ROA not before: Sat 11 Apr 2026 02:34:25 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 150787
IP address blocks: 103.163.225.0/24 maxlen: 24
103.243.179.0/24 maxlen: 24
2001:df6:3480::/47 maxlen: 47
2001:df6:3480::/48 maxlen: 48
2001:df6:3481::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl
rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 647 (0x287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA9BC, serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C
Validity
Not Before: Apr 11 02:34:25 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69d9b331-6cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a1:32:f9:49:79:7a:22:f1:df:96:d2:39:ab:
87:89:5d:48:5b:e6:bb:27:b2:06:67:96:e6:c1:e6:
73:1f:8c:7d:1b:e6:a5:36:06:ea:fb:04:e8:6a:e5:
e6:74:a2:81:11:86:81:5f:89:60:8a:c0:43:0d:d0:
8d:85:d1:9d:71:18:a0:4f:5b:28:07:58:1c:cc:dc:
a0:4f:c7:a5:78:75:df:56:9c:27:48:5c:05:5b:1d:
84:93:87:6c:98:56:8c:1a:08:6f:e7:e4:6b:a7:f9:
cd:8e:aa:7f:5c:3e:fe:33:26:4d:77:01:ca:a6:51:
07:1c:b6:7c:80:47:d6:90:cc:27:4f:a0:f8:13:bc:
80:f4:d2:0c:fd:47:23:b4:08:f8:56:8f:1e:03:11:
8c:d7:e8:46:93:09:fa:c9:a8:ef:d1:52:37:26:2c:
b9:56:af:15:4e:0c:15:81:99:9a:9c:84:c3:18:56:
2c:01:36:21:ce:18:46:26:4b:2e:a4:fb:65:87:e7:
5b:46:50:57:69:98:a7:2b:b5:4e:6b:15:8e:06:41:
16:75:ea:eb:25:3b:e4:ca:61:70:08:40:de:c5:24:
bf:17:c8:6e:70:3b:a3:a5:f5:1b:e8:59:a0:d5:74:
05:1e:33:25:c9:69:af:90:47:71:bd:af:4b:9a:ee:
d3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:19:E0:7E:26:0E:A7:FC:B4:FD:B9:0E:78:69:9E:70:25:40:56:75
X509v3 Authority Key Identifier:
keyid:4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/106F283CB74311EDB0C38030C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.163.225.0/24
103.243.179.0/24
IPv6:
2001:df6:3480::/47
Signature Algorithm: sha256WithRSAEncryption
a6:90:b3:5c:06:ba:74:58:a7:68:83:5c:30:d9:c6:ef:e2:27:
ac:47:7a:9c:87:44:cf:1a:e3:f3:c0:3c:18:cc:09:77:d7:9a:
39:e1:0b:26:ee:de:cc:2d:ed:6a:05:51:4a:cc:46:ce:bb:1f:
cf:6b:7a:81:43:39:5b:59:e9:9c:fe:bd:75:6a:a7:a8:9a:99:
ac:f7:6c:c6:85:eb:97:91:e9:7a:2a:72:ac:2a:0c:8d:67:e3:
f0:45:48:8d:93:3a:cf:36:bc:7d:c4:8b:9a:27:de:3a:8b:ab:
23:c2:3b:2e:b2:5d:f6:92:84:68:47:96:82:71:98:70:64:2a:
05:ef:0e:d4:b9:ca:5e:cb:7f:3c:2f:f5:54:b6:c6:d5:0d:f1:
c1:0f:b5:d6:b1:f8:08:b5:2b:77:fc:ce:3a:16:ef:da:20:9c:
56:db:40:e7:c0:4f:86:7b:10:97:59:4f:1b:dd:24:4e:be:8c:
ef:97:7f:8d:d6:55:fe:98:ae:09:a9:be:d3:f1:11:77:a9:b8:
b4:b0:59:86:bd:e9:66:cb:7d:3b:47:96:2d:2e:ba:80:d1:1f:
6b:5f:e4:3c:0e:c2:15:7e:fa:58:8d:64:65:39:95:47:c8:5a:
6f:7f:79:6e:c0:ad:90:0e:28:d0:97:23:cc:95:1c:72:ce:b5:
03:ad:5b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:19:19 2026 by rpki-client