
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/6DDABFB26CD511ED9EC9CF83C4F9AE02.roa
File: 6DDABFB26CD511ED9EC9CF83C4F9AE02.roa (raw, json)
Hash identifier: egC6j0/L+vNrahwqS7R8sgu3NxXeX9dmJPD7oQ0uOyg=
Subject key identifier: B0:A6:20:F2:E3:AB:FD:C5:AA:A7:ED:BA:1F:4C:74:1D:62:CC:86:4F
Certificate issuer: /CN=A91AF9A1/serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8
Certificate serial: 0DE6
Authority key identifier: A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/6DDABFB26CD511ED9EC9CF83C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:17:56 +0000
ROA not before: Mon 18 Aug 2025 18:27:48 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 137828
IP address blocks: 103.115.72.0/22 maxlen: 22
103.115.72.0/23 maxlen: 23
103.115.72.0/24 maxlen: 24
103.115.73.0/24 maxlen: 24
103.115.74.0/23 maxlen: 23
103.115.74.0/24 maxlen: 24
103.115.75.0/24 maxlen: 24
2402:e1c0::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl
rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:43:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3558 (0xde6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF9A1, serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8
Validity
Not Before: Aug 18 18:27:48 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a42e74-59e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7f:af:65:f2:ad:47:8f:d7:5a:16:04:5a:1f:
a4:eb:3e:87:cc:7c:ef:b2:04:81:1f:ac:07:69:c6:
43:67:51:d9:a7:28:18:39:73:65:8c:14:c9:98:98:
86:13:76:00:58:0e:fd:53:da:19:d3:f7:58:0e:34:
bd:da:c5:11:26:73:e3:2e:07:53:32:09:97:3d:e0:
1a:d6:22:32:a1:b4:a9:d0:97:11:87:74:e5:51:c2:
0b:c3:c1:1e:f4:61:bb:ed:e5:f9:5f:e3:36:de:a8:
5d:a1:a3:0b:96:41:9e:58:94:33:31:24:6f:9a:3e:
21:66:f1:c1:57:8d:2c:1c:55:6e:5f:2c:6c:03:bf:
5b:32:08:78:2c:7e:bd:53:b0:fe:bb:6c:62:44:88:
95:8a:16:9e:f8:2c:6f:16:92:a7:a8:8f:a1:c5:3a:
22:24:8a:0d:d0:98:94:cb:1a:bc:6b:18:b4:e7:fc:
23:15:38:ef:29:72:b5:b0:8e:34:20:b5:92:0e:7f:
0b:3e:87:d4:73:93:a7:0d:1e:0a:eb:3c:df:63:f8:
03:26:ef:cb:10:ce:13:29:92:3f:5f:85:c6:ad:e7:
07:84:98:0a:63:8f:31:e6:8b:9f:fa:c8:94:5f:df:
a2:e9:3c:48:32:e8:f2:ef:dd:6f:2b:0e:a9:e4:64:
f1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A6:20:F2:E3:AB:FD:C5:AA:A7:ED:BA:1F:4C:74:1D:62:CC:86:4F
X509v3 Authority Key Identifier:
keyid:A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/6DDABFB26CD511ED9EC9CF83C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.115.72.0/22
IPv6:
2402:e1c0::/32
Signature Algorithm: sha256WithRSAEncryption
71:3b:a5:23:55:70:7e:89:e8:ad:66:93:fc:8a:76:23:31:53:
23:26:87:d1:29:59:05:32:dd:70:93:c2:fb:9b:f7:ba:54:19:
17:73:58:10:38:e0:86:34:1f:ca:5a:f6:50:9a:9f:31:de:51:
37:2c:3d:3a:34:ef:c9:3f:dd:4f:84:a4:31:e9:cb:ec:99:b9:
c1:c4:e6:e9:a0:19:13:6b:32:ae:1e:b4:e5:3d:0d:33:70:24:
12:32:49:96:2f:b8:7f:79:d3:33:af:ed:a0:3c:f2:25:9a:d6:
32:8f:db:78:3e:64:27:f3:17:cb:1c:3e:b0:3c:ee:1f:0a:3b:
71:09:c6:76:4d:9e:dc:fe:d1:9c:1c:d2:4f:dd:bf:fa:60:48:
67:b0:88:b0:91:1d:99:f0:92:95:2a:f7:73:62:3d:86:90:86:
52:62:dc:2a:f4:91:07:cb:33:a1:a3:86:cf:67:3a:88:e2:04:
61:73:59:cd:3f:c1:da:1f:0f:a1:03:28:35:07:e2:78:81:bd:
04:dd:a3:af:36:b3:5f:5a:1c:89:35:a5:2e:c7:44:7e:35:9d:
51:0b:63:e1:8c:39:43:d4:91:9f:92:60:ac:f7:d4:04:c1:9c:
35:71:2c:37:a4:af:0c:21:ca:68:9a:c4:a3:32:6f:0a:2f:94:
23:f3:51:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:48 2026 by rpki-client