
$ rpki-client -vvf rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/6959BDA8C05B11EB9540776AC4F9AE02.roa
File: 6959BDA8C05B11EB9540776AC4F9AE02.roa (raw, json)
Hash identifier: o9LJvDAWoOpgjlM3ZhhTsc5yhOvJHm6q+nsIvmgifUo=
Subject key identifier: EA:A0:62:E2:1F:02:A9:C5:2B:D3:C3:62:8B:24:C6:43:3C:98:F7:89
Certificate issuer: /CN=A91973D2/serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3
Certificate serial: 0663
Authority key identifier: 86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/6959BDA8C05B11EB9540776AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:50:24 +0000
ROA not before: Fri 04 Jul 2025 23:35:45 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 142275
IP address blocks: 103.167.82.0/23 maxlen: 24
2407:6640::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl
rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:19:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1635 (0x663)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91973D2, serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3
Validity
Not Before: Jul 4 23:35:45 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a40bdf-daae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:59:ee:27:52:34:f3:19:7d:b8:e1:8c:c8:0c:
a9:7c:66:1a:68:52:f8:ad:cb:6f:e3:8c:a9:8d:cf:
a4:ad:8c:58:12:51:4a:77:71:30:c2:50:12:73:b1:
78:4a:fe:9e:88:7a:18:77:93:c7:bf:e8:36:9d:b1:
0c:da:02:59:94:5b:2c:d5:8b:08:22:a2:87:92:d5:
7e:4b:b5:23:20:8a:4a:88:5e:4e:d5:d4:5c:04:bc:
9c:cd:9e:90:da:2b:c8:85:d9:2b:ee:2c:4d:37:fa:
c8:0f:9d:fe:72:85:30:30:1c:79:b5:0c:a4:da:6e:
a7:70:a9:3c:b6:65:ba:5a:a5:63:c7:83:3f:cc:ad:
7b:f5:40:a1:73:a1:07:78:45:cc:83:ad:67:0a:3c:
ef:a1:3a:6a:96:2f:0f:33:b3:bc:61:7b:01:99:b1:
d8:38:1f:47:9a:1a:59:c8:82:50:67:2c:7d:33:6d:
dc:a4:65:1c:ad:70:ab:70:f2:80:74:3b:1e:c8:3c:
f8:99:6c:24:60:10:0c:d3:90:8d:87:94:24:53:e1:
bc:05:c3:c1:48:e9:7d:e9:0a:5a:f5:30:fd:18:b6:
b8:1e:0c:b4:6c:f4:53:4a:ae:75:0b:16:74:65:4f:
e5:0c:0a:19:81:4f:53:9b:c9:3d:7f:9d:67:24:5a:
98:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A0:62:E2:1F:02:A9:C5:2B:D3:C3:62:8B:24:C6:43:3C:98:F7:89
X509v3 Authority Key Identifier:
keyid:86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/6959BDA8C05B11EB9540776AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.167.82.0/23
IPv6:
2407:6640::/40
Signature Algorithm: sha256WithRSAEncryption
99:f2:1f:e9:1e:a6:89:04:f8:bd:53:c1:72:08:ef:cd:e0:b5:
0f:28:0e:82:3c:36:00:d2:b4:c6:e8:1c:88:61:cf:47:86:ac:
55:a9:d0:95:da:72:79:80:e1:2b:fc:60:80:aa:76:94:8f:d8:
c2:3d:f4:76:5d:46:52:ee:45:e8:3f:2a:d8:d2:06:bb:9d:a0:
98:94:96:0e:83:5a:40:c4:0e:d6:ca:41:64:cd:fe:89:16:71:
7e:d0:7d:ae:d9:e5:c1:88:e0:73:e6:07:2e:02:1f:f1:9d:a8:
c2:13:0b:ad:ab:b1:0d:b2:3f:c3:f0:b2:40:c5:96:0a:9a:99:
99:c5:86:21:4f:50:12:28:f0:9a:f9:9e:5d:6f:27:b4:82:d7:
46:66:50:2d:3b:29:82:79:02:7f:98:54:d5:41:52:18:2f:0d:
7b:ee:b8:b5:bb:e8:e7:24:c7:92:c6:fb:e4:d2:87:4f:fd:c6:
74:d1:c5:da:01:c3:a4:8d:84:87:38:5e:a3:9f:c5:9c:7d:46:
aa:61:ab:a9:9c:e0:a1:e3:ff:fe:06:c5:bf:a8:e6:63:78:a9:
70:6a:77:21:2e:13:d5:66:ea:44:1d:ef:86:91:c4:0f:4d:5d:
b3:be:68:b0:5f:9a:12:71:a5:2d:3d:6e:26:d1:54:a4:5e:3e:
aa:5c:8f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:53:16 2026 by rpki-client