
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/6AA36A7E564D11EB8B387024C4F9AE02.roa
File: 6AA36A7E564D11EB8B387024C4F9AE02.roa (raw, json)
Hash identifier: EjQAXg2usCcTUh9gyvVBrkzQeLYgfkd976KZ0ehXsBM=
Subject key identifier: 36:6A:D9:11:C0:D8:43:A4:44:F7:F2:95:DF:6B:3A:05:77:8E:A2:8F
Certificate issuer: /CN=A91CFA8D/serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D
Certificate serial: 076F
Authority key identifier: 1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/6AA36A7E564D11EB8B387024C4F9AE02.roa
Signing time: Wed 18 Mar 2026 21:28:47 +0000
ROA not before: Wed 18 Mar 2026 21:28:47 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 141463
IP address blocks: 103.161.182.0/23 maxlen: 23
103.161.182.0/24 maxlen: 24
103.161.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl
rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1903 (0x76f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFA8D, serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D
Validity
Not Before: Mar 18 21:28:47 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69bb190f-b139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:9f:5d:17:d7:6d:eb:eb:77:a6:bb:6a:fc:
4a:a6:30:29:fa:c2:86:42:47:66:81:c7:cc:52:e5:
a5:e1:85:28:cd:be:20:cd:e7:d9:52:19:a1:e2:db:
91:2d:a7:5d:0b:9e:c5:32:ed:eb:16:5b:b2:a0:4b:
c8:50:18:f8:68:5e:1f:49:86:39:98:67:83:f8:27:
ac:f5:6b:c5:26:ea:d2:3a:e4:34:85:8b:87:b9:49:
5e:2c:27:f6:19:40:7d:a6:87:51:93:fb:2d:2c:8e:
b1:d7:6f:ef:e1:66:c6:ae:aa:8f:be:74:e1:5b:89:
cf:3d:0a:90:cc:c9:7b:46:84:3d:3a:b0:79:12:e8:
3b:f0:5b:88:85:41:44:03:ea:90:1e:1d:4a:67:61:
65:cb:c3:ee:65:9f:4e:db:56:bc:c4:2a:11:ae:bb:
0e:0f:cc:49:24:e6:20:e9:20:7d:1f:c3:86:d6:ad:
76:a5:9a:19:17:74:92:cd:78:2d:80:19:f8:f1:b3:
70:68:8e:81:eb:66:c0:b1:d1:f5:05:73:9e:08:f1:
e3:10:c5:d7:e6:61:ba:f0:bd:fd:6e:4d:b8:84:18:
22:3f:ce:46:b3:f3:62:f1:4e:62:3a:25:b0:4d:df:
6b:16:30:2c:6e:27:50:50:90:59:1c:18:93:ca:25:
71:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6A:D9:11:C0:D8:43:A4:44:F7:F2:95:DF:6B:3A:05:77:8E:A2:8F
X509v3 Authority Key Identifier:
keyid:1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/6AA36A7E564D11EB8B387024C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.161.182.0/23
Signature Algorithm: sha256WithRSAEncryption
18:5a:3f:6e:c5:c6:01:f9:c9:d8:fb:15:3e:23:8e:2e:e6:0e:
51:e3:18:9c:19:4c:0d:58:4f:12:e6:cc:21:21:af:0e:20:64:
77:86:f8:44:77:cb:96:ad:58:59:fc:46:39:2c:75:6a:51:fb:
36:47:55:14:06:d6:8a:74:7d:c5:4f:3b:4b:dd:a3:3e:41:6d:
74:0a:b2:e1:b3:83:9a:c7:4a:e3:87:c7:73:13:cd:7e:e6:7e:
bf:cb:23:ec:68:6c:88:dc:c5:92:b3:e4:e0:ef:ff:e0:6a:fd:
40:58:2e:01:99:ed:8c:62:38:e4:1d:97:a7:8a:e0:cf:0a:2d:
93:db:33:84:e6:f6:43:7e:6e:17:8e:15:ad:6b:46:09:05:10:
ef:17:f6:ee:87:fb:04:6b:e0:f6:fd:2c:2f:b3:e5:59:5e:b0:
a2:6b:04:93:cc:e3:39:e8:f7:ce:b0:5d:22:87:a3:96:44:c5:
9d:e7:d9:a2:21:47:bd:01:ea:58:59:0b:bf:b9:14:67:27:ba:
80:8a:35:f4:bd:e8:c9:ee:c5:c9:04:fa:ff:a4:79:3e:1a:1a:
c3:96:c3:c0:f5:a8:57:be:0b:04:7c:22:e1:f2:5f:3d:d2:ed:
f6:44:da:a6:fe:2c:d7:ce:c1:15:1b:67:a0:ec:70:1e:b4:3c:
a2:10:42:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:06:42 2026 by rpki-client