
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/C56AF018E98B11F0A24D3E834F6F56BC.roa
File: C56AF018E98B11F0A24D3E834F6F56BC.roa (raw, json)
Hash identifier: BX6Gc1GUbhxWTmon8FP3iCan1L2uG44mZNtXxPqfU40=
Subject key identifier: F8:CC:BC:FD:C5:13:08:07:61:99:0A:E1:2B:CE:76:07:08:6F:1F:23
Certificate issuer: /CN=A91CAA4E/serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E
Certificate serial: 0828
Authority key identifier: 9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/C56AF018E98B11F0A24D3E834F6F56BC.roa
Signing time: Fri 28 Aug 2026 17:32:50 +0000
ROA not before: Fri 28 Aug 2026 17:32:50 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 138023
IP address blocks: 103.137.109.0/24 maxlen: 24
2001:df6:700::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl
rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 16:57:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2088 (0x828)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CAA4E, serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E
Validity
Not Before: Aug 28 17:32:50 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a91c642-1468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:77:c3:aa:56:4f:03:11:27:2b:3e:72:2b:57:
c1:4f:15:06:cb:2d:77:7c:6c:68:60:5a:56:2e:60:
9a:76:b1:7f:31:ce:e8:fe:fc:2d:70:48:39:98:2a:
f7:a9:74:de:99:93:30:bf:87:1c:19:81:97:cc:cd:
62:9d:89:7e:65:fa:7d:71:d9:82:cd:17:43:94:a4:
9e:cd:03:0e:f6:d1:46:7a:3e:a4:04:9d:66:1c:ec:
2b:be:1f:d6:1f:71:f2:cf:42:c8:39:01:8e:23:9b:
fa:28:10:3e:f6:e9:2b:39:16:8e:c1:cb:ec:7d:d1:
01:84:75:d9:94:1d:45:52:23:d2:63:59:10:93:f8:
68:21:13:69:84:82:41:d0:f5:d6:36:52:cb:5e:2a:
56:a3:89:22:ae:68:a1:7f:a3:3b:38:16:a9:3b:72:
64:3f:87:13:83:5d:2f:2e:fd:07:ed:dc:9d:05:7c:
e7:93:dd:8a:ec:86:41:22:f1:2f:da:5b:ec:d2:c1:
fe:b3:26:93:06:b7:00:0d:79:7c:83:b6:7b:4f:02:
19:08:5f:9b:e6:08:e9:f3:2a:10:e0:89:e8:e0:2f:
5f:b0:21:a5:f2:99:0f:e8:11:75:83:a0:ae:9a:d3:
da:94:cc:94:e5:bf:16:6f:f8:07:1c:0c:f7:f1:87:
21:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CC:BC:FD:C5:13:08:07:61:99:0A:E1:2B:CE:76:07:08:6F:1F:23
X509v3 Authority Key Identifier:
keyid:9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/C56AF018E98B11F0A24D3E834F6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.137.109.0/24
IPv6:
2001:df6:700::/48
Signature Algorithm: sha256WithRSAEncryption
90:7b:d6:49:46:34:4f:c1:a5:6f:81:25:92:50:51:f4:13:e0:
84:cb:3d:dc:4d:d6:b4:eb:5c:6e:42:a7:7b:ed:a5:29:cb:6f:
28:b9:91:4b:70:35:25:00:91:d7:6b:bb:91:23:c8:89:46:89:
f3:27:16:b5:5a:35:e3:c5:cb:ca:26:99:89:95:1a:1c:59:7c:
17:7a:5a:33:e6:20:49:fd:1d:a5:2d:43:c8:fb:a5:94:4e:87:
ec:e8:23:9d:78:25:e3:6e:a8:5d:4f:85:59:19:88:5e:fa:d1:
b0:a3:2a:a8:3a:04:fc:8a:ea:50:e6:bf:b5:ee:c7:78:8c:f4:
47:31:56:6f:2f:4e:55:63:3e:b2:3b:54:3d:06:7f:a9:19:63:
4e:fc:c0:00:a9:fd:8c:a8:b2:16:54:8b:5c:45:af:a7:d7:8c:
be:9c:f8:68:a2:99:7a:fb:7e:ef:bd:a5:2a:e6:a6:65:6b:de:
d4:3e:9f:03:1b:12:24:79:79:20:bd:46:52:a8:20:86:1a:86:
c2:89:68:24:34:9b:ce:5f:ee:96:9b:3b:50:8d:43:51:69:9c:
48:d7:e3:36:72:8b:05:bd:d8:2f:13:da:61:df:e4:78:2d:27:
64:a5:0c:54:f0:09:f5:dc:da:dd:01:05:62:1f:8f:1d:0c:5c:
ad:dd:8b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:58:47 2026 by rpki-client