
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/B69C27DCB6D711EB9D603F7DC4F9AE02.roa
File: B69C27DCB6D711EB9D603F7DC4F9AE02.roa (raw, json)
Hash identifier: WUXJJ8dA0rIPvSiYS0+Cpa5v7JDaDBTiBjA7j+6k8hI=
Subject key identifier: 96:A0:89:27:4C:0A:14:38:0D:BA:DC:A4:75:D3:41:B9:CB:99:85:20
Certificate issuer: /CN=A91BBCC9/serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9
Certificate serial: 0676
Authority key identifier: AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/B69C27DCB6D711EB9D603F7DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:47:58 +0000
ROA not before: Wed 04 Jun 2025 23:02:58 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 142059
IP address blocks: 103.166.3.0/24 maxlen: 24
2001:df6:7b80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl
rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:13:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1654 (0x676)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBCC9, serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9
Validity
Not Before: Jun 4 23:02:58 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3fd3d-9af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:0e:cd:66:e6:24:24:fe:c7:ad:49:5c:c0:
4d:2b:46:40:5e:e2:59:44:a7:73:60:91:43:22:9b:
65:7e:c5:81:89:e9:89:3f:17:6b:d2:1b:8c:ed:64:
69:4e:69:6e:3f:f6:f1:43:44:cf:11:0a:14:d2:de:
17:62:0e:8f:74:6f:ea:5f:80:17:4e:3d:67:7e:fa:
d0:25:18:4f:2c:6e:fa:d8:df:a0:98:37:33:04:51:
a7:45:cc:b3:1b:4c:b8:35:f0:57:1e:c4:e5:1c:ef:
18:f7:4d:77:22:b8:5d:a6:45:71:a9:23:d9:c3:71:
b3:ee:6d:00:0e:1c:ad:c0:0d:69:72:33:0d:82:35:
b3:35:00:e9:d5:a2:b1:0a:ea:19:a6:b5:c8:5e:31:
37:2b:52:f3:56:8c:36:cb:c8:1f:e8:3f:79:d6:23:
ea:5a:a3:d0:36:46:7a:3b:7a:2a:7a:e2:6a:68:b0:
ab:d6:86:b8:b7:93:16:9c:c0:c4:c8:75:3d:fe:1f:
db:a7:72:64:84:15:65:05:9b:97:76:6d:d7:38:54:
5f:23:f1:40:79:c5:ba:e0:82:87:ff:c7:6a:8d:21:
09:1e:fd:3a:48:8f:a2:0c:a0:ad:35:91:71:56:7e:
b4:52:c4:65:a5:ea:d3:ac:a7:a0:ad:b1:91:be:e3:
e9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A0:89:27:4C:0A:14:38:0D:BA:DC:A4:75:D3:41:B9:CB:99:85:20
X509v3 Authority Key Identifier:
keyid:AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/B69C27DCB6D711EB9D603F7DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.166.3.0/24
IPv6:
2001:df6:7b80::/48
Signature Algorithm: sha256WithRSAEncryption
d9:aa:99:1f:c2:da:15:27:27:19:77:32:b1:23:20:cb:29:66:
07:c4:5c:0e:2e:7b:97:3a:1d:fd:9e:97:d2:35:6e:cd:1f:28:
da:e6:b9:3d:d1:4d:cd:ac:b4:4f:2d:ca:40:dd:5c:c4:73:67:
d0:12:32:80:df:c5:00:35:1d:f4:ba:87:30:af:73:d0:9a:dd:
a7:c8:c6:9f:bc:9e:c5:1e:b6:d8:aa:e4:74:42:49:95:75:59:
d4:99:65:0e:31:c7:06:d5:7d:ee:9b:1a:bf:f8:e7:6e:57:04:
02:d5:61:f0:13:53:9e:24:a1:48:46:65:23:d4:b9:e5:8d:3f:
66:a1:fb:df:9f:8b:7a:c8:e6:70:bc:b1:db:3e:96:50:7b:6e:
25:e7:96:8c:94:32:31:bd:b6:75:8c:0c:0b:b6:1f:d2:90:16:
7a:43:8c:7f:0f:eb:c4:a2:bf:05:b7:31:52:8e:54:83:27:8b:
ef:92:b8:09:a0:7d:22:dd:06:9f:b3:69:d1:64:25:12:c4:6f:
58:13:91:4d:af:b0:ad:dc:44:ec:42:ec:e5:e7:b9:da:b9:85:
eb:54:85:c4:5b:0c:54:21:8f:48:ca:25:c2:84:90:80:d8:2e:
9b:9c:4b:bf:8c:72:51:99:79:23:b1:e5:70:8b:0d:c7:e7:71:
99:01:74:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:24:21 2026 by rpki-client