
$ rpki-client -vvf rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/6B5765BC499211ED879F2D11C4F9AE02.roa
File: 6B5765BC499211ED879F2D11C4F9AE02.roa (raw, json)
Hash identifier: Gij6YaDS1wfHNVRKMaJ5A1SN4efMb1QxYQGgmn19MtM=
Subject key identifier: 30:80:9E:BA:67:62:C5:A3:34:FC:E7:31:92:0B:77:C3:0F:5C:FC:06
Certificate issuer: /CN=A91577A2/serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7
Certificate serial: 0AA3
Authority key identifier: 36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/6B5765BC499211ED879F2D11C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:48:13 +0000
ROA not before: Fri 30 May 2025 20:06:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138974
IP address blocks: 103.150.68.0/23 maxlen: 23
103.150.68.0/24 maxlen: 24
2001:df3:5d80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl
rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:21:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2723 (0xaa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91577A2, serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7
Validity
Not Before: May 30 20:06:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4277d-aec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f5:ea:da:3d:0e:11:89:04:b7:f0:0a:14:5d:
ea:34:88:1a:bf:47:51:98:ab:4f:65:0b:60:1b:6f:
2d:a8:b2:8e:b1:81:f1:4c:19:a2:64:d2:33:d0:f9:
97:60:bd:10:f0:c6:23:a7:60:68:e9:fb:1b:54:73:
0a:89:28:38:ad:40:96:2a:db:b7:a9:c5:9c:67:e2:
1e:f0:67:48:1d:06:7f:ad:e9:cd:44:39:ec:c7:f5:
f6:4a:e3:e9:e7:1d:13:54:64:81:63:5f:a0:74:d3:
cb:88:72:45:95:89:9b:10:5e:cb:fd:05:1f:f3:45:
fb:f1:54:c7:d7:bd:9e:14:80:4f:f2:bb:70:36:98:
a4:ef:4b:8c:95:5c:c7:ce:b2:8a:58:92:db:35:e3:
3e:de:cc:4e:0e:82:26:6a:44:81:fc:1d:5e:f6:39:
eb:7d:5d:9f:16:50:55:89:da:71:46:6f:3c:a9:51:
28:91:09:91:00:1f:7b:ab:df:f4:39:e5:cd:4b:78:
d8:05:ff:26:70:49:59:08:09:a2:f0:dd:83:54:80:
53:9b:83:02:fb:f9:44:91:73:96:b6:32:15:92:e7:
64:b5:1e:7d:c4:e7:80:83:af:72:48:50:d6:0a:1d:
95:57:4c:27:71:a3:73:d1:a0:9a:1b:c4:b0:26:67:
7e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:80:9E:BA:67:62:C5:A3:34:FC:E7:31:92:0B:77:C3:0F:5C:FC:06
X509v3 Authority Key Identifier:
keyid:36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/6B5765BC499211ED879F2D11C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.150.68.0/23
IPv6:
2001:df3:5d80::/48
Signature Algorithm: sha256WithRSAEncryption
77:7a:87:ae:6e:95:62:b1:7c:cd:35:c9:1c:52:ba:8e:a8:91:
73:85:3b:0d:61:69:4d:c6:7d:cb:92:c7:1d:79:5c:f3:e7:24:
ae:ed:76:20:12:0a:d4:57:3d:b7:05:91:db:c1:b9:05:6c:97:
36:26:81:7e:90:6a:06:a2:d0:27:ed:ba:94:b4:01:79:d7:59:
c0:4b:b3:79:33:17:67:70:89:ec:61:d6:25:3b:c9:56:23:78:
bd:a4:04:2e:e3:5d:91:1e:d3:80:91:26:53:4f:8f:7d:69:45:
2f:61:d1:45:15:b4:ec:91:30:4b:7f:cf:81:94:c5:0c:bc:5f:
eb:2b:72:82:69:b2:08:a5:59:ba:4e:e9:f0:62:a9:74:29:0e:
7a:b4:57:22:0e:79:24:b7:71:04:77:f7:24:a1:39:20:15:e7:
14:9f:d8:d4:65:54:b4:5c:a5:7a:c5:a3:cc:7a:fa:70:e8:6d:
9e:a6:f9:ae:ca:1e:ff:af:a1:68:1d:b7:2b:f0:95:29:83:0a:
95:c9:ba:9b:0a:cc:3e:38:e0:e3:b9:c3:3d:bd:ab:33:39:66:
49:7b:7c:16:72:0b:39:ae:4c:bc:a6:26:ba:56:31:d5:72:81:
42:10:47:1a:48:9f:d1:bd:d2:49:71:5b:d1:be:01:c8:c8:e1:
9b:60:19:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:54:01 2026 by rpki-client