
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/B69B54D43F4311F194710EE29D833773.roa
File: B69B54D43F4311F194710EE29D833773.roa (raw, json)
Hash identifier: IrlTrvW4nCk65/vfAs74/1SLq8xj6MgKVPmYM/ug71g=
Subject key identifier: 90:2A:47:25:E3:80:60:7D:BC:CE:67:2E:56:C4:BB:DC:F5:68:0C:5B
Certificate issuer: /CN=A91E3D4D/serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47
Certificate serial: 0707
Authority key identifier: DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/B69B54D43F4311F194710EE29D833773.roa
Signing time: Thu 23 Apr 2026 18:54:17 +0000
ROA not before: Thu 23 Apr 2026 18:54:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142050
IP address blocks: 103.165.186.0/23 maxlen: 23
103.165.186.0/24 maxlen: 24
2407:4d40::/32 maxlen: 32
2407:4d40::/48 maxlen: 48
2407:4d40:1::/48 maxlen: 48
2407:4d40:2::/48 maxlen: 48
2407:4d40:3::/48 maxlen: 48
2407:4d40:4::/48 maxlen: 48
2407:4d40:5::/48 maxlen: 48
2407:4d40:6::/48 maxlen: 48
2407:4d40:7::/48 maxlen: 48
2407:4d40:8::/48 maxlen: 48
2407:4d40:9::/48 maxlen: 48
2407:4d40:a::/48 maxlen: 48
2407:4d40:b::/48 maxlen: 48
2407:4d40:c::/48 maxlen: 48
2407:4d40:d::/48 maxlen: 48
2407:4d40:e::/48 maxlen: 48
2407:4d40:f::/48 maxlen: 48
2407:4d40:10::/48 maxlen: 48
2407:4d40:11::/48 maxlen: 48
2407:4d40:12::/48 maxlen: 48
2407:4d40:13::/48 maxlen: 48
2407:4d40:14::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl
rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:19:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1799 (0x707)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3D4D, serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47
Validity
Not Before: Apr 23 18:54:17 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69ea6ad9-6d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f4:ae:bc:e4:cc:b0:7d:a9:e0:3b:cc:d7:7e:
03:ea:de:71:cc:ac:f7:eb:ea:da:52:f3:28:7c:d4:
b9:a4:f6:4c:ba:e1:e7:3f:7b:88:41:c2:9b:7b:5a:
86:f9:7e:6f:cb:8d:24:ef:11:a1:90:3e:c0:d4:8d:
99:8b:33:6f:c0:3b:a3:29:18:57:43:f9:8d:b4:aa:
0e:b6:69:47:04:c3:b5:e5:ce:48:b1:4c:8a:93:05:
99:46:f2:c0:a0:3f:32:d3:82:ab:e8:f0:9a:25:6d:
f0:df:6e:89:00:dd:56:88:a2:a9:57:de:fe:bb:fe:
62:e8:bc:4b:c6:3a:a5:aa:1d:f5:55:96:77:67:5d:
4f:32:83:5d:02:56:b6:6f:02:a7:53:6a:77:1a:5f:
0c:87:73:36:94:02:b3:af:a4:d6:2c:ec:6c:2e:ba:
8f:c8:62:15:75:8f:5b:30:a3:e9:a2:e4:f1:6d:c1:
ef:5c:06:eb:2a:ff:32:b8:b0:1f:fd:ae:4d:1c:77:
4b:b9:19:50:0d:89:68:70:47:b3:a0:33:ab:02:ed:
f8:53:5e:58:90:1c:d0:70:f7:9a:ee:7e:8f:b0:2d:
58:e3:e4:6e:44:79:c9:44:c2:38:ff:ad:a4:5f:b4:
ed:72:4c:a0:38:6b:08:14:92:72:e3:8b:40:2a:7d:
2b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2A:47:25:E3:80:60:7D:BC:CE:67:2E:56:C4:BB:DC:F5:68:0C:5B
X509v3 Authority Key Identifier:
keyid:DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/B69B54D43F4311F194710EE29D833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.165.186.0/23
IPv6:
2407:4d40::/32
Signature Algorithm: sha256WithRSAEncryption
32:6a:f3:92:a4:fe:8c:b9:6c:af:92:cc:ba:2d:c8:d3:09:d9:
c2:95:a1:4e:1b:29:dc:07:95:b0:43:ae:f1:a0:71:49:02:b5:
68:b6:ec:13:70:b3:74:72:61:c5:bc:c1:40:9c:7a:e1:d4:92:
b4:79:ae:bc:03:5e:f0:58:bf:55:8e:e2:22:4c:50:81:94:e4:
8d:f5:8c:05:9a:66:79:8e:2b:f9:aa:42:93:31:08:ae:ea:19:
7d:7d:c2:30:6f:46:cd:04:96:e3:3e:19:fb:05:b6:35:84:f9:
c4:3f:ed:96:85:5c:4d:b0:39:e3:8d:9c:3e:7f:6a:c1:3b:87:
1d:31:44:ff:ff:5c:cc:55:7a:1e:23:1e:f3:c1:30:a0:7f:a1:
d2:6a:04:2e:32:9f:85:8f:2d:0a:f0:73:e3:0e:80:7b:33:0e:
1a:46:0d:ea:e4:e6:cf:f6:57:5b:61:bc:a3:28:ba:9e:25:64:
e2:18:a2:de:5c:83:ba:23:19:a9:21:ed:41:72:0e:cf:80:95:
89:8f:6f:e9:1b:fc:70:0e:ed:a6:d9:a4:7e:b2:10:54:d8:37:
7f:0a:c6:21:3a:7c:95:92:6d:de:fb:ca:c3:1b:a9:de:d5:3d:
d1:19:cd:05:fb:1b:04:61:e1:16:4a:c9:1e:d6:ea:3c:47:07:
26:e7:e6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:21 2026 by rpki-client