
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/6AE1616AA3F711EBBA757063C4F9AE02.roa
File: 6AE1616AA3F711EBBA757063C4F9AE02.roa (raw, json)
Hash identifier: 7pa2URbMwRRXzMA50+PGHDb/krBWLrMS0fjPxhWy67U=
Subject key identifier: C3:F8:68:53:A5:48:A2:75:20:C1:7F:C9:B1:B5:00:A6:68:95:5E:26
Certificate issuer: /CN=A91CE7BD/serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80
Certificate serial: 069D
Authority key identifier: E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/6AE1616AA3F711EBBA757063C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:47:11 +0000
ROA not before: Fri 06 Jun 2025 23:23:23 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 137213
IP address blocks: 103.166.58.0/23 maxlen: 23
103.166.58.0/24 maxlen: 24
103.166.59.0/24 maxlen: 24
2001:df6:7e80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl
rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1693 (0x69d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE7BD, serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80
Validity
Not Before: Jun 6 23:23:23 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3fd0f-fb4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9a:7c:5a:87:51:1a:00:3d:3b:b4:54:e2:d7:
d0:ae:a1:c4:9e:fe:06:49:81:f0:59:5e:d3:1a:80:
22:59:b0:22:cf:b6:00:71:19:a7:f5:7b:af:ef:50:
54:e3:b1:5b:1e:cf:0e:87:77:f6:6f:26:5d:91:c5:
26:0c:c6:cd:ad:1a:51:02:7d:65:f2:01:ef:19:3e:
4a:e3:66:11:e7:49:b0:e2:7d:fe:b9:97:85:e7:a1:
57:ea:df:97:49:6b:9a:c1:88:22:fe:b9:ef:7c:c4:
9c:4a:86:16:d4:20:03:53:84:d5:24:d5:d5:10:ea:
64:38:18:86:20:03:d1:88:34:86:d1:11:14:c2:fd:
00:1d:fd:ae:a7:37:64:df:15:1c:98:00:cd:2d:e5:
cc:62:cf:11:96:86:b1:43:59:01:c2:67:00:84:54:
67:de:f3:c0:9b:6e:ca:5a:77:79:ed:29:36:01:00:
e9:96:5d:e1:d3:74:af:14:b6:d5:1e:0f:a6:c1:6d:
99:08:d4:59:1f:d0:ce:df:52:4d:a3:23:4d:58:e4:
84:7b:72:2b:2e:29:3b:c9:83:d2:02:d9:e3:81:a6:
a0:bc:60:69:d1:a3:52:c1:a3:9f:76:33:6d:e2:f6:
fd:b7:b0:e8:84:43:ee:72:ef:78:d2:07:5b:0c:f8:
dc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F8:68:53:A5:48:A2:75:20:C1:7F:C9:B1:B5:00:A6:68:95:5E:26
X509v3 Authority Key Identifier:
keyid:E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/6AE1616AA3F711EBBA757063C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.166.58.0/23
IPv6:
2001:df6:7e80::/48
Signature Algorithm: sha256WithRSAEncryption
35:bc:a9:0b:2e:54:38:6a:75:63:02:5e:80:d5:29:e1:d2:f3:
a2:79:85:74:97:43:72:85:4e:f3:16:16:39:5f:3e:1f:5a:64:
c1:c7:6f:33:aa:af:18:8e:5b:66:a2:a8:96:b9:51:15:6e:9e:
5c:24:2a:96:88:e4:20:75:0f:f0:ce:38:83:21:04:71:70:01:
d5:2f:c6:28:a8:86:5f:26:eb:57:7e:2a:0f:f1:d2:9f:ac:ea:
e6:26:ad:ca:c6:54:cd:5e:b6:f3:7b:65:21:ff:a8:04:b4:64:
e2:85:cf:2e:5c:a2:11:2a:a6:ee:b5:5e:99:8b:60:63:64:37:
c0:84:1b:6f:59:43:7d:a1:c3:e2:18:5a:9d:48:64:43:e1:16:
b4:c5:fc:5f:9c:69:7c:ae:6b:67:12:1c:5f:80:56:b5:4f:8c:
9c:52:f2:45:75:9c:e6:2e:ac:9b:a2:2a:18:0f:e2:c9:4b:5c:
9b:55:fc:c4:7d:4e:be:c4:f4:d3:e1:9a:eb:1d:cf:d0:72:3c:
d1:7c:de:c4:cf:7e:c0:55:4c:c8:3d:88:88:d2:a9:c8:e5:fd:
c8:3e:0e:25:12:89:49:04:2d:28:9b:25:62:63:80:23:f0:c5:
02:5d:9f:40:71:d9:bf:1c:55:50:d2:cc:b6:b6:74:c2:90:eb:
79:e4:21:b3
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICBp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U3QkQxMTAvBgNVBAUTKEUxNUQxMzBCMEJCMjk4MEUxQkYxMUMwMUJDQ0I3NTNC
NDk2ODRBODAwHhcNMjUwNjA2MjMyMzIzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZmQwZi1mYjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj5p8WodRGgA9O7RU4tfQrqHEnv4GSYHwWV7TGoAiWbAiz7YAcRmn9Xuv71BU
47FbHs8Oh3f2byZdkcUmDMbNrRpRAn1l8gHvGT5K42YR50mw4n3+uZeF56FX6t+X
SWuawYgi/rnvfMScSoYW1CADU4TVJNXVEOpkOBiGIAPRiDSG0REUwv0AHf2upzdk
3xUcmADNLeXMYs8RloaxQ1kBwmcAhFRn3vPAm27KWnd57Sk2AQDpll3h03SvFLbV
Hg+mwW2ZCNRZH9DO31JNoyNNWOSEe3IrLik7yYPSAtnjgaagvGBp0aNSwaOfdjNt
4vb9t7DohEPucu940gdbDPjcawIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFMP4aFOl
SKJ1IMF/ybG1AKZolV4mMB8GA1UdIwQYMBaAFOFdEwsLspgOG/EcAbzLdTtJaEqA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTdCRC9EMzAyNjAzNEEz
RjUxMUVCOTJGOUM1NjFDNEY5QUUwMi80VjBUQ3d1eW1BNGI4UndCdk10MU8wbG9T
b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRWMFRDd3V5bUE0YjhSd0J2TXQxTzBsb1NvQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0U3QkQvRDMwMjYwMzRBM0Y1MTFFQjkyRjlDNTYxQzRGOUFFMDIvNkFFMTYxNkFB
M0Y3MTFFQkJBNzU3MDYzQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ6Y6MA8EAgACMAkDBwAgAQ32foAwDQYJKoZIhvcNAQELBQADggEB
ADW8qQsuVDhqdWMCXoDVKeHS86J5hXSXQ3KFTvMWFjlfPh9aZMHHbzOqrxiOW2ai
qJa5URVunlwkKpaI5CB1D/DOOIMhBHFwAdUvxiiohl8m61d+Kg/x0p+s6uYmrcrG
VM1etvN7ZSH/qAS0ZOKFzy5cohEqpu61XpmLYGNkN8CEG29ZQ32hw+IYWp1IZEPh
FrTF/F+caXyua2cSHF+AVrVPjJxS8kV1nOYurJuiKhgP4slLXJtV/MR9Tr7E9NPh
musdz9ByPNF83sTPfsBVTMg9iIjSqcjl/cg+DiUSiUkELSibJWJjgCPwxQJdn0Bx
2b8cVVDSzLa2dMKQ63nkIbM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:21:19 2026 by rpki-client