
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/69B6C14A9DF611ED8D51D272C4F9AE02.roa
File: 69B6C14A9DF611ED8D51D272C4F9AE02.roa (raw, json)
Hash identifier: 6qNNz/jU6Jc8rG9yGhVLuObMTM5ias6oQqU63sjwttY=
Subject key identifier: 4A:2A:EB:0F:68:D3:BF:61:F4:A7:E9:D4:4E:35:DA:7B:4F:44:FB:6A
Certificate issuer: /CN=A91DDDED/serialNumber=F749F76F92A16D2A871437F72C86D0D05DE29AD5
Certificate serial: 0249
Authority key identifier: F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/69B6C14A9DF611ED8D51D272C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:08:51 +0000
ROA not before: Tue 03 Feb 2026 02:21:55 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 150735
IP address blocks: 103.76.154.0/23 maxlen: 23
103.76.154.0/24 maxlen: 24
103.76.155.0/24 maxlen: 24
2001:df1:e0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.crl
rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:43:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 585 (0x249)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDDED, serialNumber=F749F76F92A16D2A871437F72C86D0D05DE29AD5
Validity
Not Before: Feb 3 02:21:55 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a41033-d1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:31:8e:95:e7:58:b3:e4:48:57:bf:77:e9:bd:
7d:32:33:f9:a9:d0:9e:61:f2:81:df:de:07:6d:36:
e5:bb:a3:41:2e:95:d4:24:b3:d5:5d:50:a1:64:5d:
9b:37:32:2e:65:22:a4:2e:2e:db:44:46:73:9b:0d:
e0:d0:7f:8b:df:42:b0:bc:99:12:d5:55:91:89:ed:
5d:5d:06:19:19:c9:1f:a0:c4:fd:c5:92:39:04:e4:
75:1f:36:50:df:0e:d0:fb:60:7c:73:06:97:19:48:
07:b6:08:6b:83:b5:ab:b5:1d:73:5a:9d:aa:c8:f5:
ae:73:8f:8c:3d:9c:85:6c:3e:fd:7e:c1:66:3e:05:
f1:ea:05:ce:38:46:ca:f6:4d:56:2a:07:f8:e2:2f:
49:87:43:1f:f9:71:65:8d:1c:06:10:4d:7a:56:15:
70:c7:a5:97:b3:0b:b7:09:5a:e5:d8:ea:f4:ee:6e:
27:b8:03:91:ef:1e:d0:c7:8d:30:25:1f:4c:a2:cc:
d8:4a:b1:0d:ae:7e:7c:6f:bc:bb:35:57:1f:21:9b:
c0:de:59:1e:50:e2:6f:a6:70:ef:00:f7:75:0a:38:
7c:8e:8e:31:65:8f:bf:62:ad:4d:8a:0f:57:53:7b:
5e:02:f8:db:f0:51:70:e4:74:27:1e:b9:ba:73:47:
94:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2A:EB:0F:68:D3:BF:61:F4:A7:E9:D4:4E:35:DA:7B:4F:44:FB:6A
X509v3 Authority Key Identifier:
keyid:F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/69B6C14A9DF611ED8D51D272C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.76.154.0/23
IPv6:
2001:df1:e0c0::/48
Signature Algorithm: sha256WithRSAEncryption
ae:71:de:73:46:96:70:28:75:a9:49:bd:68:a2:71:d0:89:09:
21:07:77:47:e0:7b:ce:74:80:b0:be:10:e3:c7:b8:9e:00:29:
a5:46:94:20:83:9e:19:a2:2b:cd:60:6f:86:fb:81:ac:4f:f7:
60:08:7b:a6:40:87:44:f0:37:00:cb:48:e7:86:a0:f1:ff:73:
e6:15:c7:a8:b9:16:b7:4c:b5:15:89:3d:8a:3f:d1:fc:10:05:
a0:ee:ce:37:4f:af:bf:0d:5b:69:ec:1c:1e:8a:8f:23:42:56:
a1:91:bd:43:3b:28:4b:b2:1c:5d:53:3f:11:a3:be:8d:26:e2:
0b:9a:51:16:5f:bc:c2:e3:0a:b2:eb:15:8c:e7:ea:bf:ec:c8:
1c:2f:a4:5d:8b:c9:83:d0:4a:87:d1:9e:af:45:ef:6d:51:8b:
3b:60:18:5b:94:e4:ba:87:23:53:0a:6f:59:a1:cf:69:80:f4:
a8:f7:50:12:d2:d2:95:9d:a9:57:b2:5b:42:ce:81:e7:c3:c8:
89:ad:69:c6:ab:6a:1d:ab:b4:e5:c0:85:e4:04:d2:fa:c8:7e:
26:22:ba:34:2f:b9:1b:cf:49:5d:05:8e:2e:69:83:58:10:76:
7f:d0:72:5f:d9:4f:39:3d:81:fc:8c:52:cf:e1:0b:31:d5:40:
fb:74:b5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:21:18 2026 by rpki-client