
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/261A4C3432B611EBBB18F11EC4F9AE02.roa
File: 261A4C3432B611EBBB18F11EC4F9AE02.roa (raw, json)
Hash identifier: u+6wnGx2BCNffz/w+UONTWtqIYdeVxC/HbLsF2PYqHg=
Subject key identifier: 56:1C:CE:35:CA:7C:DC:4F:25:E0:EB:0A:95:5A:A2:07:00:6E:02:DD
Certificate issuer: /CN=A91DBAF1/serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF
Certificate serial: 07F4
Authority key identifier: 63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/261A4C3432B611EBBB18F11EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:40:19 +0000
ROA not before: Sat 10 May 2025 21:39:50 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 139006
IP address blocks: 103.91.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl
rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:58:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2036 (0x7f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBAF1, serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF
Validity
Not Before: May 10 21:39:50 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a40983-0d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:00:4a:ee:94:ba:35:c5:ac:24:84:fb:a7:f5:
56:8a:53:36:3e:aa:0b:84:0c:6e:ec:05:78:67:aa:
77:bb:2a:96:3b:8f:42:7a:fc:b0:03:5e:61:d2:85:
2a:c4:b6:39:8b:2d:04:21:10:88:cd:5f:c2:59:5e:
27:de:a7:5b:8b:96:6d:e4:79:1c:69:32:79:8c:e8:
73:dc:51:a1:69:83:4f:59:30:a7:f7:95:14:2b:f5:
87:af:8c:93:27:af:be:99:e2:f6:31:33:6f:4c:5e:
b8:e9:f7:07:e1:ae:ce:84:09:dd:df:f0:f9:ae:b5:
c8:98:0a:a9:1f:f0:89:2a:29:3b:4f:1a:06:a9:31:
5b:ca:86:3c:a1:aa:8f:4f:c4:e8:dc:33:1d:72:bc:
87:32:da:9f:ff:e0:d7:ec:0e:3e:76:67:4d:12:9b:
70:60:61:3b:3a:13:89:c6:0b:9a:86:16:97:11:db:
85:5e:98:45:5f:30:98:75:4d:5f:86:70:50:13:72:
2d:de:40:93:ee:07:ba:69:72:2a:b3:36:b8:30:b0:
0d:ce:4c:25:51:82:09:ce:46:e3:80:3a:3b:97:1f:
55:97:19:0a:9c:4b:ed:9c:0e:67:d1:6e:ff:3b:b4:
05:59:4a:a9:91:48:f2:5e:8d:ab:1c:71:71:16:23:
8d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1C:CE:35:CA:7C:DC:4F:25:E0:EB:0A:95:5A:A2:07:00:6E:02:DD
X509v3 Authority Key Identifier:
keyid:63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/261A4C3432B611EBBB18F11EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.91.166.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:07:07:47:64:62:1b:d1:36:db:c0:58:61:f0:f3:a2:a8:16:
0e:78:17:6f:b2:57:df:be:d7:13:fa:23:96:1a:d8:b7:0f:60:
63:fd:d3:87:e2:49:d3:a3:8c:af:20:e0:24:47:50:6c:3d:5f:
bd:17:d0:0d:a0:2d:ee:52:de:fb:b5:24:ad:3a:66:10:34:cd:
4e:b9:8e:97:f1:12:70:7d:25:3a:74:fa:3a:61:29:b5:34:8c:
05:09:6b:bc:64:db:eb:09:53:69:1f:cb:ef:0a:80:3a:62:76:
b2:17:04:9a:30:40:9a:ab:77:17:a9:ae:6d:d5:ff:4b:39:4d:
f8:2a:53:18:5c:28:c8:53:99:0f:fa:20:aa:24:d6:11:86:f1:
33:fe:cd:da:21:23:9a:3d:e7:03:4d:90:5c:1c:0e:0d:2b:0e:
fb:7d:6f:f2:dd:eb:6c:c1:8a:e6:97:b3:a2:3d:79:9f:f6:4c:
58:3d:42:85:75:6e:64:f5:6b:0f:0a:3d:60:d1:ec:48:5b:73:
0d:12:f7:72:67:ab:e4:c2:cf:ab:34:e8:38:ab:96:27:8d:c2:
1e:a5:53:48:8e:37:6a:44:42:34:99:12:cd:79:e9:00:a7:1a:
0c:60:02:b6:c2:15:f7:a1:59:73:ed:a4:5d:84:2e:33:de:31:
24:83:fc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:54 2026 by rpki-client