
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/416E569CC1F911EB91796381C4F9AE02.roa
File: 416E569CC1F911EB91796381C4F9AE02.roa (raw, json)
Hash identifier: F2GebCWcaFjXC+R1GW0YWmxK0km0Z1FV+dTDi5Ce6Yc=
Subject key identifier: C8:6C:BC:99:88:A8:E7:A6:2F:F6:56:AB:6E:56:42:F2:39:91:EE:E4
Certificate issuer: /CN=A91FAFBA/serialNumber=A3DDDABE3D46B4480261DABBE529A066B6205D8B
Certificate serial: 0654
Authority key identifier: A3:DD:DA:BE:3D:46:B4:48:02:61:DA:BB:E5:29:A0:66:B6:20:5D:8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o93avj1GtEgCYdq75SmgZrYgXYs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/416E569CC1F911EB91796381C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:48:30 +0000
ROA not before: Sun 06 Apr 2025 23:04:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142022
IP address blocks: 103.165.18.0/23 maxlen: 24
2001:df6:5880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.crl
rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o93avj1GtEgCYdq75SmgZrYgXYs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:23:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1620 (0x654)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAFBA, serialNumber=A3DDDABE3D46B4480261DABBE529A066B6205D8B
Validity
Not Before: Apr 6 23:04:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3fd5e-decb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:14:af:66:70:e3:3e:52:11:41:61:e6:55:08:
af:24:c3:0b:c6:76:ac:75:ac:19:47:41:bb:da:f0:
a4:30:a9:a6:a5:e3:e9:ac:5d:bc:c9:75:65:69:a9:
ec:5d:da:19:ca:c0:a0:0c:c5:bb:f2:10:b7:bf:a7:
8c:d8:f5:fd:85:d6:86:95:54:0d:2e:54:e9:4f:1a:
49:2f:b6:30:e3:e3:18:3a:1d:89:72:c5:ee:fe:7f:
1d:07:49:9b:dd:b6:22:9e:e7:cd:20:fb:ca:dd:66:
67:b1:3d:91:10:a8:e5:b4:1b:c9:ec:57:f6:58:ab:
f1:4b:b1:b9:ee:c2:c6:5a:10:e3:0e:af:29:f5:b8:
17:35:b1:d5:33:85:9a:76:6b:5a:6c:32:6a:59:23:
2d:f0:f2:ca:6d:8f:ce:86:79:43:6c:4d:46:2e:5e:
11:e8:4b:93:6e:d3:0c:c1:ae:4f:cf:97:0f:25:9b:
53:46:ae:38:e4:d6:97:6e:29:89:bc:e9:6e:5b:f9:
ee:3a:f7:a6:df:02:28:a1:62:51:e8:0c:f2:32:5f:
27:13:3b:a6:af:4d:4b:f9:c7:0f:ec:51:6c:21:84:
79:30:b6:79:20:ba:d3:bc:a8:bd:6c:03:5a:a9:f0:
f2:fb:39:a6:76:54:25:9b:7f:2b:86:31:bd:1c:56:
b5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6C:BC:99:88:A8:E7:A6:2F:F6:56:AB:6E:56:42:F2:39:91:EE:E4
X509v3 Authority Key Identifier:
keyid:A3:DD:DA:BE:3D:46:B4:48:02:61:DA:BB:E5:29:A0:66:B6:20:5D:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o93avj1GtEgCYdq75SmgZrYgXYs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/416E569CC1F911EB91796381C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.165.18.0/23
IPv6:
2001:df6:5880::/48
Signature Algorithm: sha256WithRSAEncryption
07:56:a1:4d:f7:9c:6e:67:37:45:bf:c4:3d:41:b8:2c:8a:12:
31:c8:30:02:91:02:48:ac:8d:c9:9d:b9:82:48:81:de:83:4e:
35:3f:b0:51:78:a9:26:6b:58:e0:39:c7:13:5b:bb:fc:27:b8:
3e:a4:00:8b:7f:ea:42:a9:e2:46:60:4f:19:6c:e8:36:54:b1:
90:ca:25:7f:82:74:bb:91:6d:8f:e0:8a:a4:eb:ea:f7:8d:dd:
2a:a7:8c:c4:2a:15:1c:0c:fc:13:4e:d9:82:b0:81:d2:13:71:
cc:f1:1e:57:97:9a:11:2a:69:f5:8d:b1:ec:a7:b8:aa:b4:ff:
36:a9:e3:b0:d6:83:bf:80:03:9c:97:f2:da:4b:b3:1c:f3:7d:
2f:d4:83:8b:e0:98:c4:d9:13:f8:df:81:39:c4:0d:49:2a:04:
24:8c:a9:55:50:87:17:57:97:3d:b9:26:bc:f5:f7:69:c0:23:
c9:83:09:34:e6:d0:93:96:59:1a:dd:ff:50:74:d9:c2:18:65:
6a:32:b7:50:ca:eb:99:7f:b8:46:26:ae:3e:be:7d:a0:cf:89:
d3:f9:03:ed:11:c1:c4:ec:3b:08:c2:f6:27:09:6f:dc:d1:12:
3b:9f:8a:b2:49:f9:1f:12:27:6b:4e:e7:a1:c6:1d:26:9f:04:
fa:73:06:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:15:25 2026 by rpki-client