
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/11328E82645511EBAE4A4633C4F9AE02.roa
File: 11328E82645511EBAE4A4633C4F9AE02.roa (raw, json)
Hash identifier: Rrdeba2iRrlx3MhV3/APf3Xd2tjy6l49DilBdRwhXjE=
Subject key identifier: 61:5E:7C:E6:8F:61:FC:9D:6B:33:64:CB:5C:99:D4:88:5D:78:B3:A5
Certificate issuer: /CN=A91FDB80/serialNumber=8D668AFD3E03E70B8449881FA350131BACAC4856
Certificate serial: 0746
Authority key identifier: 8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/11328E82645511EBAE4A4633C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:41:26 +0000
ROA not before: Fri 14 Feb 2025 23:40:43 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 141689
IP address blocks: 103.162.6.0/24 maxlen: 24
103.165.242.0/24 maxlen: 24
2001:df5:dc80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.crl
rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:37:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1862 (0x746)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDB80, serialNumber=8D668AFD3E03E70B8449881FA350131BACAC4856
Validity
Not Before: Feb 14 23:40:43 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a3fbb6-fdab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:42:ef:13:ba:89:10:c0:9f:e5:bb:8d:54:20:
36:d5:d5:f9:a9:a7:64:17:b7:f2:f7:61:18:ea:89:
d8:37:00:d2:0f:9e:19:b7:c4:7d:be:88:9e:d8:0d:
bf:c2:39:19:e3:5e:3e:b4:cc:48:0f:fc:2f:9b:10:
1f:79:f8:c4:39:92:0f:58:86:44:14:d1:c0:0e:e4:
e6:e7:02:6e:32:cd:16:a2:e1:a2:88:10:d0:f5:4c:
f2:6a:df:d8:9c:e7:11:74:b0:90:17:8d:ae:c6:80:
d5:ca:0b:dc:25:ec:0b:12:e6:ba:fc:c2:ac:b7:9d:
a3:a4:e9:bd:e7:79:90:7f:dc:59:52:04:f1:32:a9:
b5:b3:9e:f8:15:5c:27:f1:6d:61:58:c2:ec:60:d0:
2e:35:ea:99:6a:2a:0a:1a:57:e0:be:fd:9a:12:27:
5a:b9:25:8c:13:dd:eb:39:7e:5f:a8:71:9b:1c:32:
39:7e:ff:4e:0a:73:6c:fc:e8:6f:73:32:36:88:2c:
b4:9f:56:d7:be:0d:a3:51:1c:65:f7:62:5b:67:a0:
bd:21:e9:0f:e3:49:ea:aa:bf:49:68:a7:cd:ae:ca:
6f:b7:79:d9:5e:51:12:b2:ad:e7:e3:bc:d8:50:e9:
26:98:9e:7b:b4:a4:ad:14:1d:28:c3:e9:2a:fb:d4:
e1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5E:7C:E6:8F:61:FC:9D:6B:33:64:CB:5C:99:D4:88:5D:78:B3:A5
X509v3 Authority Key Identifier:
keyid:8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/11328E82645511EBAE4A4633C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.162.6.0/24
103.165.242.0/24
IPv6:
2001:df5:dc80::/48
Signature Algorithm: sha256WithRSAEncryption
94:c8:31:99:f2:ef:bc:85:6e:81:45:be:73:55:9b:03:23:99:
24:d4:d1:ea:70:95:59:63:a5:a8:a0:06:cb:83:e6:c2:70:94:
ff:cb:80:5f:16:05:6e:5e:a3:56:39:9c:2c:dc:c8:7a:8d:2d:
d8:e3:6e:3f:a8:3a:d9:25:e8:a9:c4:1f:1a:61:fd:c6:6f:50:
bf:cf:fa:ea:96:38:9d:95:07:01:80:c7:6f:fa:2e:13:bf:77:
91:4b:78:51:c8:f7:9a:96:12:49:34:09:32:09:fd:f2:04:9c:
6b:c7:5a:c7:9d:04:61:79:21:27:f5:c1:60:ec:69:1e:d7:3e:
25:cb:5c:85:af:8f:87:17:8b:6a:2a:e3:42:cd:72:50:05:83:
56:f9:46:0a:0a:9f:8f:08:02:6a:80:7b:d7:dc:ed:95:50:56:
da:af:76:e7:fe:65:47:8a:65:74:5d:8c:ed:5e:ef:e1:e9:4d:
da:53:e9:ad:3f:cd:72:e3:d2:2e:e2:ea:32:1b:9a:cd:d3:ae:
60:82:52:4c:f9:7d:04:0e:1c:c0:b1:06:12:f9:21:b1:9a:60:
0d:45:ca:ae:83:b7:24:3d:71:4d:e6:13:bb:d2:59:c5:22:4b:
d8:02:f4:3c:0f:2b:25:6b:c3:43:e2:a0:9c:51:60:71:a2:2a:
36:36:9e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:29 2026 by rpki-client