
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/1EF560BEEA6911EF9AE7CD14C4F9AE02.roa
File: 1EF560BEEA6911EF9AE7CD14C4F9AE02.roa (raw, json)
Hash identifier: u0AZ+G521Y1mpL9O4RU7VPlcvfZ7loLQEOc3ANO3jN0=
Subject key identifier: 16:CF:69:A8:BD:61:40:38:14:30:AE:03:76:FD:76:C7:59:5F:6E:C0
Certificate issuer: /CN=A91A7978/serialNumber=500C60A7F69C04BE84FCF3C65723C07970E5A128
Certificate serial: D0
Authority key identifier: 50:0C:60:A7:F6:9C:04:BE:84:FC:F3:C6:57:23:C0:79:70:E5:A1:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/1EF560BEEA6911EF9AE7CD14C4F9AE02.roa
Signing time: Thu 05 Mar 2026 06:48:59 +0000
ROA not before: Thu 05 Mar 2026 06:48:59 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 134829
IP address blocks: 103.135.104.0/24 maxlen: 24
103.135.105.0/24 maxlen: 24
2404:7b40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.crl
rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:57:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208 (0xd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7978, serialNumber=500C60A7F69C04BE84FCF3C65723C07970E5A128
Validity
Not Before: Mar 5 06:48:59 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69a9275b-509f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c2:73:39:2d:79:17:73:7a:f5:70:a7:42:81:
0a:6d:3e:94:e9:61:bc:ec:5e:4f:72:4f:a5:ce:03:
72:18:92:b1:25:96:44:7a:d6:5e:43:96:eb:7e:32:
9c:c1:5a:58:2b:d7:b4:8e:e2:59:93:bd:4a:64:2c:
0b:fd:e4:91:15:bc:15:ee:58:63:4a:d5:0d:f5:d4:
f0:3b:72:11:c3:11:8c:46:72:5d:41:d3:be:7f:13:
a2:4f:3e:09:3a:be:8d:c1:b7:0d:7c:a9:e2:19:0d:
ec:41:02:6c:1d:b2:36:fe:16:04:2b:04:01:33:68:
dc:64:2c:2c:97:84:9b:8f:81:8e:9b:e5:29:4c:e1:
94:63:07:dc:23:7e:dc:88:6a:68:21:b6:c2:b0:d5:
ce:9a:92:52:69:19:8c:9e:7a:f1:ee:0a:85:68:d1:
3b:95:0d:11:00:6d:ac:ac:d6:b3:3c:3b:71:23:0b:
b8:f2:39:98:50:28:c2:98:41:30:36:58:3c:1f:e4:
09:49:e2:d8:b4:a1:ed:00:2e:59:56:98:69:99:1d:
a5:71:b5:2b:e3:bc:6a:6d:d7:4a:2b:9e:b0:40:96:
ee:41:d2:5b:37:04:7b:cc:2d:16:3e:a5:2e:97:86:
cb:4d:11:5a:03:04:12:f1:4a:52:0b:1d:6b:81:80:
a9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CF:69:A8:BD:61:40:38:14:30:AE:03:76:FD:76:C7:59:5F:6E:C0
X509v3 Authority Key Identifier:
keyid:50:0C:60:A7:F6:9C:04:BE:84:FC:F3:C6:57:23:C0:79:70:E5:A1:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/1EF560BEEA6911EF9AE7CD14C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.135.104.0/23
IPv6:
2404:7b40::/32
Signature Algorithm: sha256WithRSAEncryption
25:6e:1b:fa:04:e6:db:b5:c3:eb:6d:fd:d4:06:1a:2c:8c:52:
86:1e:73:00:4f:19:6c:9e:d1:5d:bc:b3:d9:59:9f:39:5d:d6:
9f:35:61:33:ab:0f:94:30:66:9d:fb:e9:28:d8:10:d2:7e:2c:
d2:c5:53:ad:f9:d5:76:ef:be:f1:50:20:74:48:1b:57:8b:9e:
23:de:5e:81:9e:c4:43:28:ad:ec:eb:13:e1:fb:e1:54:ed:3f:
e9:70:fe:52:bd:26:1d:49:6c:20:7f:85:d3:93:87:55:a1:a6:
70:e3:fb:55:96:af:82:2e:65:1f:74:b7:71:10:ca:00:0b:7e:
f6:b3:fb:3b:43:c0:1d:eb:d6:e8:5a:4c:cd:f1:ef:df:aa:c8:
ee:28:3e:c1:54:c9:20:7b:cf:bc:e7:43:13:cc:42:99:7b:45:
17:93:80:8e:fe:d4:68:c4:06:bf:7a:89:a7:dd:8d:10:e7:e0:
28:8f:56:c8:f4:9f:05:19:12:44:a3:9f:ba:fb:96:97:67:39:
3a:b0:82:3a:ab:98:12:9c:2e:2c:30:cd:dc:c9:26:b5:96:b6:
7d:56:f6:6b:40:ab:c2:b8:af:ef:55:e1:d7:16:40:bf:8a:93:
7c:76:10:ce:d5:26:8a:22:6a:4c:d5:04:e9:6b:86:de:e6:89:
17:5e:b8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:13:41 2026 by rpki-client