
$ rpki-client -vvf rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/056F0FFA2FAC11EFA4D45C6BC4F9AE02.roa
File: 056F0FFA2FAC11EFA4D45C6BC4F9AE02.roa (raw, json)
Hash identifier: F8ec6PAokFr2Tj50TlNBDnhUPWfBRTXaePI7bYNRmK4=
Subject key identifier: 3C:38:B6:43:27:8A:FA:C7:24:28:44:0E:B5:E3:D3:1A:24:E9:7B:71
Certificate issuer: /CN=A91939DA/serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC
Certificate serial: 0148
Authority key identifier: 2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/056F0FFA2FAC11EFA4D45C6BC4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:37:58 +0000
ROA not before: Thu 01 May 2025 05:12:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136493
IP address blocks: 103.90.76.0/24 maxlen: 24
103.112.67.0/24 maxlen: 24
103.112.78.0/23 maxlen: 23
103.112.78.0/24 maxlen: 24
103.112.79.0/24 maxlen: 24
2001:df4:6b00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl
rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:23:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91939DA, serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC
Validity
Not Before: May 1 05:12:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a5a0c6-22fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a0:06:0c:5f:f9:84:f3:cd:e7:ab:55:f8:9e:
d3:4e:5f:28:e6:d8:5d:03:b7:9d:d8:d4:42:9c:e4:
eb:4c:df:83:75:8e:24:b2:6d:ff:25:b5:35:64:d1:
e0:4a:1c:4e:0a:0e:4d:9a:da:5e:7d:55:cd:4f:fc:
33:32:5a:9b:de:70:76:63:22:e5:a0:c7:92:da:6f:
19:12:e5:b4:1b:f4:cc:40:60:62:99:5d:ad:ca:61:
3d:37:88:c4:69:ed:95:99:df:cd:3e:6a:aa:7a:d0:
c2:3d:55:0d:5e:22:45:2f:8f:8d:86:83:d2:f3:e4:
b4:1a:63:35:39:6d:30:07:c9:14:c0:9d:ba:db:76:
e2:e0:2b:5e:a0:27:3e:e3:9d:e4:0c:cd:8a:59:71:
2c:9a:de:46:96:f6:38:5b:53:6e:1a:ff:bb:bb:cd:
24:b4:9c:f3:61:c9:b4:e5:f0:7e:5f:51:96:99:2a:
92:02:7b:38:7b:18:5d:4e:b9:ec:c8:59:2f:00:46:
d9:06:41:5c:ac:42:c0:77:4d:a1:49:94:7f:35:f4:
36:a1:c0:cd:29:e4:e8:62:1f:c7:1d:59:3f:b2:91:
97:21:6f:62:3a:4c:3e:43:2b:6d:d7:0b:89:49:a8:
eb:4b:4f:39:d0:06:67:a1:4a:42:6c:e2:6a:7f:8c:
be:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:38:B6:43:27:8A:FA:C7:24:28:44:0E:B5:E3:D3:1A:24:E9:7B:71
X509v3 Authority Key Identifier:
keyid:2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/056F0FFA2FAC11EFA4D45C6BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.90.76.0/24
103.112.67.0/24
103.112.78.0/23
IPv6:
2001:df4:6b00::/48
Signature Algorithm: sha256WithRSAEncryption
1d:76:69:a6:d3:2e:f1:db:15:f6:a2:45:e0:cf:62:82:a4:da:
a5:e3:79:7d:2f:a5:5d:7c:28:76:3c:81:f4:08:83:51:0e:a9:
eb:35:6a:e0:5d:bf:1c:57:79:ee:f9:b3:c7:2d:14:c9:36:3d:
8b:f3:bd:b6:81:9b:df:56:28:b3:81:98:e5:f2:dc:58:de:66:
88:74:aa:8c:fb:0d:b4:79:44:5f:f1:a6:f1:5d:05:d3:19:ff:
49:0e:45:d2:3a:28:eb:79:ef:df:fe:bb:f0:37:89:21:64:99:
e1:ad:ce:4d:04:12:3c:61:20:0d:49:36:75:d8:ae:b6:89:b6:
e1:c4:74:18:9c:5c:1e:bd:34:6e:b4:d2:07:13:90:b7:70:17:
f2:ec:6d:f1:f1:bf:7e:d1:ef:c0:5d:9d:2e:e1:cb:9b:60:93:
be:09:ec:74:8a:2d:cb:07:4c:ff:bb:b0:75:be:2a:96:a9:1d:
1c:45:60:e9:c1:d8:86:d8:c3:72:59:e0:83:68:f5:e7:1c:81:
3e:d0:b8:f6:1f:c9:46:b4:c8:09:2a:24:95:e8:c2:84:85:f5:
7b:fb:83:20:f0:9a:47:3e:8f:73:13:f2:69:15:fe:3a:e4:a4:
54:a5:95:2c:e3:7e:d2:cc:af:7f:ca:06:1c:cd:48:52:0a:30:
ea:0f:df:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:14:59 2026 by rpki-client