
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/F1A4DAD6403211EEB47BF84AC4F9AE02.roa
File: F1A4DAD6403211EEB47BF84AC4F9AE02.roa (raw, json)
Hash identifier: FdNaF3+d7P8rDGstXuH8gApZBnIYbbzLiawSXMHrTM8=
Subject key identifier: 4C:D5:10:43:AA:D6:39:C1:27:20:97:54:A9:5A:4E:25:E4:AB:C2:81
Certificate issuer: /CN=A91C928D/serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
Certificate serial: 01EB
Authority key identifier: 1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/F1A4DAD6403211EEB47BF84AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:16:37 +0000
ROA not before: Sun 21 Dec 2025 02:23:52 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 150683
IP address blocks: 103.255.66.0/24 maxlen: 24
103.255.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl
rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 491 (0x1eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C928D, serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
Validity
Not Before: Dec 21 02:23:52 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a46665-3f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:df:a6:7a:60:38:9d:c2:c4:3a:20:8a:6f:ce:
98:fb:92:29:f0:71:79:8d:38:57:aa:d5:dc:20:e7:
16:97:b0:77:00:ac:ad:23:e0:71:58:31:eb:5a:ab:
5f:f3:62:2a:b6:75:1d:20:9f:89:6e:0f:47:26:70:
a3:d1:11:54:f5:36:eb:e8:17:8c:25:1c:30:71:ca:
4f:16:ca:89:3d:d1:ab:33:08:c5:c9:37:0c:e1:08:
54:eb:2f:13:42:a0:ef:59:93:66:87:32:42:8a:ca:
72:79:48:da:1a:fc:13:c3:32:0a:52:d8:ea:b3:17:
c9:02:c6:c7:bb:4f:f4:80:3d:cf:60:96:34:89:85:
9d:04:68:33:86:ed:5e:4a:24:20:68:05:29:b6:df:
be:89:4e:d1:c0:0d:4d:48:17:16:f7:ec:b9:80:fd:
65:3c:bb:94:07:be:1e:cc:7f:0f:77:49:f2:30:0d:
c9:1b:d6:20:39:55:70:d3:7a:e5:ef:df:27:63:d1:
1d:c7:7d:e4:a8:90:0f:d7:0a:d8:46:dc:89:3f:12:
df:34:c7:e1:06:b0:52:b9:73:15:64:a1:20:59:9e:
00:f0:ab:8a:da:41:97:8c:12:5c:f0:54:8f:73:96:
f5:6e:db:b5:3e:e5:99:82:ae:27:b0:ab:57:f4:44:
3c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D5:10:43:AA:D6:39:C1:27:20:97:54:A9:5A:4E:25:E4:AB:C2:81
X509v3 Authority Key Identifier:
keyid:1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/F1A4DAD6403211EEB47BF84AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.255.66.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:ce:d1:ad:c2:a4:6c:52:a7:11:66:0c:10:11:dc:0f:4f:dd:
6e:8f:17:b5:2b:cf:da:f6:ef:e3:2f:12:99:d2:69:39:f6:ee:
ed:80:e3:1a:79:b3:43:4f:d8:aa:41:56:a4:67:db:b3:eb:0d:
02:5d:71:64:07:d5:5b:65:c5:96:68:06:47:1a:f4:e3:5c:79:
cd:85:73:70:ac:79:d1:01:45:36:0a:c5:69:ad:94:82:55:ab:
61:45:90:d2:04:b8:c4:63:60:68:a9:a7:8b:58:8b:97:6e:62:
ef:16:19:25:a7:ce:a2:c3:14:c8:60:bb:a2:4c:ee:fd:8c:b9:
d0:99:9f:69:91:25:c5:73:99:88:d3:ea:1e:ae:0d:11:99:2f:
93:68:2c:6f:61:93:56:91:7d:e8:02:a3:ce:e0:1f:e9:3f:07:
13:70:bd:61:c0:b9:20:bb:fa:34:c7:07:f5:40:9a:ee:3e:fd:
83:3c:fe:d4:9e:10:a9:c1:77:c9:7d:ca:18:97:07:b1:54:13:
d0:cf:42:d5:3d:7f:0a:b2:62:0f:fe:40:3f:57:05:8c:6d:4a:
e6:5f:8c:75:c8:a1:2e:06:e1:90:8d:30:99:29:0d:1a:95:02:
41:a4:bd:0b:bd:d0:79:54:04:5d:ca:59:58:dc:be:53:82:2b:
8d:c9:13:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:00 2026 by rpki-client