
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9128/86A79556485011ECBDD48E5DC4F9AE02/6262C03A1F2711EEA1F6981AC4F9AE02.roa
File: 6262C03A1F2711EEA1F6981AC4F9AE02.roa (raw, json)
Hash identifier: LOaa+vw/F2RQ0nd1A/OgcRGhjIY/yD4cxxMylspVQDo=
Subject key identifier: DB:1B:63:26:43:69:32:EF:6F:0F:A3:2D:56:DB:1B:A2:BE:61:A1:EF
Certificate issuer: /CN=A91B9128/serialNumber=A6DB5ED7F50766D0795BF356BE5523063C60ACDC
Certificate serial: 0530
Authority key identifier: A6:DB:5E:D7:F5:07:66:D0:79:5B:F3:56:BE:55:23:06:3C:60:AC:DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ptte1_UHZtB5W_NWvlUjBjxgrNw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9128/86A79556485011ECBDD48E5DC4F9AE02/6262C03A1F2711EEA1F6981AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:18:41 +0000
ROA not before: Wed 24 Dec 2025 23:20:13 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 149019
IP address blocks: 103.176.174.0/23 maxlen: 23
103.176.174.0/24 maxlen: 24
103.176.175.0/24 maxlen: 24
2401:1660::/32 maxlen: 32
2401:1660::/48 maxlen: 48
2401:1660:1::/48 maxlen: 48
2401:1660:2::/48 maxlen: 48
2401:1660:3::/48 maxlen: 48
2401:1660:4::/48 maxlen: 48
2401:1660:5::/48 maxlen: 48
2401:1660:6::/48 maxlen: 48
2401:1660:7::/48 maxlen: 48
2401:1660:8::/48 maxlen: 48
2401:1660:9::/48 maxlen: 48
2401:1660:a::/48 maxlen: 48
2401:1660:b::/48 maxlen: 48
2401:1660:c::/48 maxlen: 48
2401:1660:d::/48 maxlen: 48
2401:1660:e::/48 maxlen: 48
2401:1660:f::/48 maxlen: 48
2401:1660:10::/48 maxlen: 48
2401:1660:11::/48 maxlen: 48
2401:1660:12::/48 maxlen: 48
2401:1660:13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9128/86A79556485011ECBDD48E5DC4F9AE02/ptte1_UHZtB5W_NWvlUjBjxgrNw.crl
rsync://rpki.apnic.net/member_repository/A91B9128/86A79556485011ECBDD48E5DC4F9AE02/ptte1_UHZtB5W_NWvlUjBjxgrNw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ptte1_UHZtB5W_NWvlUjBjxgrNw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:19:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1328 (0x530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9128, serialNumber=A6DB5ED7F50766D0795BF356BE5523063C60ACDC
Validity
Not Before: Dec 24 23:20:13 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a44ac1-2755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:82:57:3d:21:96:12:a3:0e:1f:fd:28:54:ed:
81:cd:48:1d:fd:d4:40:b2:57:d2:13:f4:15:66:e7:
ea:7b:80:45:91:fa:12:94:65:a6:20:6d:fa:42:f2:
76:21:f5:c7:bf:c7:f5:07:4a:0f:19:4e:16:05:f4:
aa:64:b9:92:de:df:8a:f3:e3:8b:d7:0f:6d:bb:4d:
95:7c:96:95:92:32:98:93:8d:32:84:80:b2:b7:19:
ba:56:ac:fe:60:b1:8e:f5:b6:7c:63:ef:28:6d:0c:
a0:68:9f:04:80:5d:a1:a4:9b:c2:8e:92:7f:52:16:
4c:98:ab:21:d6:bb:4a:32:6e:74:5f:35:4d:09:45:
c3:67:3a:24:ed:15:48:37:5d:be:53:92:8b:cf:aa:
fc:41:6d:7e:62:09:a0:55:94:63:8b:7d:b1:a9:5f:
b1:76:6d:53:77:5d:cc:12:1e:64:23:67:e0:23:f5:
25:45:85:cc:2c:59:9e:23:44:c2:1c:35:d4:d0:cc:
67:2c:ff:7c:f6:35:40:44:f9:4a:75:2a:62:3a:14:
31:35:6a:0b:1c:45:5b:8e:8b:67:e5:66:59:cf:74:
13:c1:da:ff:07:03:6d:99:74:5a:8d:61:9a:2a:06:
9e:e5:16:32:0e:58:ed:98:64:3f:ec:d5:27:15:74:
11:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1B:63:26:43:69:32:EF:6F:0F:A3:2D:56:DB:1B:A2:BE:61:A1:EF
X509v3 Authority Key Identifier:
keyid:A6:DB:5E:D7:F5:07:66:D0:79:5B:F3:56:BE:55:23:06:3C:60:AC:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9128/86A79556485011ECBDD48E5DC4F9AE02/ptte1_UHZtB5W_NWvlUjBjxgrNw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ptte1_UHZtB5W_NWvlUjBjxgrNw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9128/86A79556485011ECBDD48E5DC4F9AE02/6262C03A1F2711EEA1F6981AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.176.174.0/23
IPv6:
2401:1660::/32
Signature Algorithm: sha256WithRSAEncryption
16:86:dd:1d:d9:b1:7d:15:a3:ab:1a:7a:87:9f:10:cb:00:cb:
07:4a:79:6b:e4:67:00:6b:ca:a5:08:27:dc:e0:3e:d7:54:75:
6c:fc:a2:41:c2:17:7d:d8:93:e4:61:27:ea:f7:b0:2f:e8:c2:
ed:48:83:9a:c2:29:41:92:95:14:0a:5f:95:43:c7:ee:57:36:
19:10:a5:f1:04:63:02:aa:ff:77:2e:19:53:9c:c6:66:a8:3a:
36:88:fa:0c:71:7d:a2:4f:1d:a0:ea:2a:f5:72:31:bf:99:72:
c2:92:e4:aa:ec:8f:fe:ac:c2:cf:3b:f4:0a:28:b0:96:c1:2d:
ca:75:7e:42:81:98:30:80:01:c7:24:36:99:df:68:a1:31:0d:
a8:e3:41:32:c3:49:92:9f:0e:2b:47:36:ac:1b:25:07:36:6a:
a5:18:71:69:95:81:28:a8:c3:70:cb:e2:b3:cd:dc:98:0f:39:
ef:ce:eb:15:61:2e:77:e7:21:8f:76:d3:88:97:11:31:6b:ae:
cb:72:fc:69:a6:5b:97:e1:92:94:df:35:52:7d:34:9a:a4:e2:
b6:b9:18:92:76:40:52:e9:89:f6:0b:cf:cd:d6:f0:71:27:4c:
9f:07:53:1e:05:5a:f8:04:f8:0d:28:54:64:51:40:86:f3:a8:
9a:d4:d0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:27:54 2026 by rpki-client