
$ rpki-client -vvf rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/6B5765BC499211ED879F2D11C4F9AE02.roa
File: 6B5765BC499211ED879F2D11C4F9AE02.roa (raw, json)
Hash identifier: /vzrtqQCcQVSvHagWxuB+gMULE9rVx3mbboeBNca//A=
Subject key identifier: 9B:C2:35:9E:7F:6E:E2:86:E8:2F:03:2F:D9:BF:BD:C4:F0:C2:32:E3
Certificate issuer: /CN=A91577A2/serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7
Certificate serial: 0AC7
Authority key identifier: 36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/6B5765BC499211ED879F2D11C4F9AE02.roa
Signing time: Thu 30 Apr 2026 20:25:11 +0000
ROA not before: Thu 30 Apr 2026 20:25:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138974
IP address blocks: 103.150.68.0/23 maxlen: 23
103.150.68.0/24 maxlen: 24
2001:df3:5d80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl
rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:34:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2759 (0xac7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91577A2, serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7
Validity
Not Before: Apr 30 20:25:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f3baa6-0254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0c:84:ed:92:ac:46:d2:55:5d:7e:55:22:09:
3a:e5:24:1a:55:73:e2:9b:d8:c0:99:3f:74:83:6f:
e9:10:67:ae:90:c3:66:b4:62:4e:5b:c7:44:da:08:
d8:9b:6b:77:9c:d1:b2:2b:17:8d:f0:e4:88:59:66:
17:b3:2e:2e:87:ee:07:f0:be:10:f5:eb:35:6e:46:
64:1d:2f:9d:48:a1:64:ee:59:25:21:59:0a:a4:26:
45:36:13:1e:65:0e:bf:b3:0c:57:fd:e2:05:7f:34:
7c:de:bf:e1:56:6a:ea:64:f3:16:80:6c:09:95:36:
1b:c2:42:b9:eb:02:dd:2d:0d:c3:0c:d8:26:50:0d:
7d:44:ea:58:df:7a:ee:59:c6:2b:b8:93:bd:fe:f9:
a1:de:ce:7d:c8:16:a3:17:14:2c:ab:52:71:fc:e7:
a9:4c:29:99:5f:59:29:e3:8d:49:24:02:4d:c3:44:
5e:d2:9e:98:0c:8f:ed:c0:a8:9f:19:a1:aa:2f:0e:
3a:ef:b5:67:41:9f:06:79:fd:ce:e7:6a:60:a9:50:
48:89:ff:07:4b:6a:43:91:59:02:3e:59:18:58:37:
a8:df:cd:c6:eb:94:17:d8:8f:6d:37:95:8d:ad:b9:
fe:53:b4:0d:37:72:d5:81:81:56:2d:14:d9:ea:d2:
e1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C2:35:9E:7F:6E:E2:86:E8:2F:03:2F:D9:BF:BD:C4:F0:C2:32:E3
X509v3 Authority Key Identifier:
keyid:36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/6B5765BC499211ED879F2D11C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.150.68.0/23
IPv6:
2001:df3:5d80::/48
Signature Algorithm: sha256WithRSAEncryption
99:45:2d:10:9c:8f:fa:00:a7:23:3c:cc:2c:49:64:2b:8c:b3:
32:df:5f:a4:71:be:6d:a1:f3:d5:26:16:fe:e9:94:0e:ae:e9:
02:b6:51:bd:e4:8e:20:34:1c:96:1e:16:4c:2a:fa:86:20:16:
55:68:26:b0:ea:f6:9a:e0:90:c1:f4:ff:37:6f:b4:93:47:c9:
08:01:02:51:6a:c3:eb:5c:29:b2:ed:25:4a:97:de:af:66:e8:
9e:9b:ef:a6:4f:6a:d7:48:90:40:cf:fe:f4:36:2b:59:e2:e1:
da:9f:b9:ce:9a:3b:9e:3a:09:6c:e7:df:8d:f8:b1:b3:b6:d2:
01:1d:8b:86:38:ec:4f:a0:c6:7c:94:29:41:63:b4:21:82:14:
87:74:c2:1c:b7:dc:67:47:5d:35:6a:6c:aa:4e:89:a9:fe:26:
e4:4a:24:7d:5e:d3:bb:51:ae:9d:75:a8:65:dc:a6:fd:85:0b:
fe:2c:b3:e4:36:1a:3a:93:50:5a:70:b4:4b:30:b7:20:e1:18:
df:20:cb:d9:f7:c2:09:bc:c5:a1:98:31:a0:a1:33:a4:68:e5:
96:44:b3:f3:0b:c7:23:a0:63:fc:55:a7:75:f6:39:43:73:28:
4d:13:e4:c9:aa:70:c9:aa:28:96:a6:ef:f8:af:d2:71:0b:a8:
a8:e6:fe:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:39:23 2026 by rpki-client