
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/6208BAD4499611E8B421BE5CC4F9AE02.roa
File: 6208BAD4499611E8B421BE5CC4F9AE02.roa (raw, json)
Hash identifier: M1ZUrzl+jKIMD6ElMH+tXNtg61CpYpjge7sFvol2TsM=
Subject key identifier: 6F:1A:8E:1D:FC:5B:69:24:3F:9D:FE:30:64:1C:E2:19:13:9C:AA:37
Certificate issuer: /CN=A91E2695/serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464
Certificate serial: 1608
Authority key identifier: F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/6208BAD4499611E8B421BE5CC4F9AE02.roa
Signing time: Sun 28 Jun 2026 17:20:04 +0000
ROA not before: Sun 28 Jun 2026 17:20:04 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 136558
IP address blocks: 103.92.208.0/24 maxlen: 24
103.101.53.0/24 maxlen: 24
103.101.54.0/23 maxlen: 23
103.101.54.0/24 maxlen: 24
103.101.55.0/24 maxlen: 24
2405:65c0::/32 maxlen: 32
2405:65c0::/36 maxlen: 36
2405:65c0:1000::/36 maxlen: 36
2405:65c0:2000::/36 maxlen: 36
2405:65c0:3000::/36 maxlen: 36
2405:65c0:4000::/36 maxlen: 36
2405:65c0:5000::/36 maxlen: 36
2405:65c0:6000::/36 maxlen: 36
2405:65c0:7000::/36 maxlen: 36
2405:65c0:8000::/36 maxlen: 36
2405:65c0:9000::/36 maxlen: 36
2405:65c0:a000::/36 maxlen: 36
2405:65c0:b000::/36 maxlen: 36
2405:65c0:c000::/36 maxlen: 36
2405:65c0:d000::/36 maxlen: 36
2405:65c0:e000::/36 maxlen: 36
2405:65c0:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl
rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 16:52:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5640 (0x1608)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2695, serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464
Validity
Not Before: Jun 28 17:20:04 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a4157c4-061e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:9c:83:8e:24:b0:74:3b:98:3f:ef:fb:ae:
02:ed:c4:01:01:69:5d:aa:f6:3e:22:f2:f3:db:e3:
2e:3f:1b:47:77:d6:f0:ad:ee:1a:2d:6a:8c:c1:25:
9d:3a:13:20:25:8e:3f:92:d3:cd:b5:ee:fa:6c:a1:
b4:79:0c:79:68:0b:da:e9:fa:05:08:8c:c3:85:fe:
e3:77:65:7e:9e:9d:dd:0d:de:b1:20:34:8c:bb:91:
e7:5e:f8:5f:08:50:d4:13:f8:19:5f:c9:a4:92:53:
bd:7e:b0:95:ca:a9:c8:4b:85:ca:ae:53:7a:8e:97:
63:78:0a:69:28:2c:e5:b5:ad:1f:02:04:e1:da:42:
c3:37:96:43:a0:44:fe:cb:f2:c8:e2:24:90:b3:8e:
64:8a:39:08:2e:a3:a4:e0:27:66:fa:f3:63:0e:15:
35:c1:ee:ba:66:b6:a4:07:6a:8b:95:84:67:01:01:
89:b0:65:25:01:a8:fb:92:cb:06:01:e6:ad:81:b8:
9a:a9:03:a3:32:48:cc:55:58:16:b2:b5:ba:92:cb:
0f:1c:2b:e6:a3:a5:b1:64:51:6e:37:e5:59:36:4e:
1e:3c:c2:70:0f:61:3a:45:07:20:f2:e8:e7:b2:25:
94:36:46:fc:da:30:2c:6c:e7:72:04:b4:2a:25:3b:
5a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1A:8E:1D:FC:5B:69:24:3F:9D:FE:30:64:1C:E2:19:13:9C:AA:37
X509v3 Authority Key Identifier:
keyid:F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/6208BAD4499611E8B421BE5CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.92.208.0/24
103.101.53.0-103.101.55.255
IPv6:
2405:65c0::/32
Signature Algorithm: sha256WithRSAEncryption
82:89:76:84:06:a0:22:a2:54:87:d2:0c:f0:f7:14:0d:f1:dd:
0b:ec:3d:d8:69:c5:c7:6e:d9:b1:ec:d8:de:8d:24:3f:16:94:
4b:ab:80:3d:f2:48:99:42:e7:ce:e0:20:54:ce:99:a1:2a:e6:
1e:e6:b6:c7:7e:f6:0a:ad:f0:da:2c:f2:b3:55:85:eb:b2:ea:
0b:5f:c8:14:3a:dd:5b:b5:8e:5d:ad:17:4e:06:c5:09:b8:20:
4d:b6:be:8c:af:a6:60:59:cd:3a:92:6e:3e:a2:8f:36:a5:df:
44:45:86:6a:70:a9:7b:91:9d:d7:9d:65:bb:2d:d5:4d:c2:82:
7e:07:cd:9d:66:7d:6b:d8:0d:0f:59:83:a6:e9:40:fb:75:f9:
fa:05:ac:b9:69:31:59:26:e5:95:44:ca:bb:b0:e3:3a:56:02:
08:56:2b:c5:1f:5b:82:10:e0:e9:b1:4c:c4:af:38:58:b2:3d:
ca:6b:cc:56:01:5f:b6:ae:27:f5:d4:df:a8:dc:ad:8d:bb:2a:
58:d7:a1:5d:86:a4:89:f4:95:bc:a3:16:55:39:d8:3f:e1:4c:
16:91:d1:8c:f7:05:fb:1b:9d:97:b3:e8:ba:f0:0e:e4:49:b9:
2a:4f:7b:eb:69:cd:f3:77:26:95:cd:a2:d6:a0:77:53:f7:be:
9c:61:17:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:31:25 2026 by rpki-client