
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6F9ACE76CE7211EBAF46B61AC4F9AE02.roa
File: 6F9ACE76CE7211EBAF46B61AC4F9AE02.roa (raw, json)
Hash identifier: mYcX8Mou9RkMoZH6tAQ0rBX8I2qYZv51Ux4N/qA8EJA=
Subject key identifier: 2B:FD:57:03:F6:9B:98:80:D8:B2:0B:64:5A:F6:0C:1F:F4:09:CC:69
Certificate issuer: /CN=A91F6C39/serialNumber=EA26D323831CDA1A384E91E0FE3891DB0CEB2EC8
Certificate serial: 063C
Authority key identifier: EA:26:D3:23:83:1C:DA:1A:38:4E:91:E0:FE:38:91:DB:0C:EB:2E:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6F9ACE76CE7211EBAF46B61AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:51:18 +0000
ROA not before: Tue 01 Jul 2025 00:02:55 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 142134
IP address blocks: 103.166.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl
rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1596 (0x63c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6C39, serialNumber=EA26D323831CDA1A384E91E0FE3891DB0CEB2EC8
Validity
Not Before: Jul 1 00:02:55 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a40c16-a702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e3:c5:74:5c:52:cc:f5:82:33:36:22:e2:4c:
a5:61:df:d8:d8:26:fe:3f:9e:20:c0:c5:f7:94:27:
3c:cb:78:af:1e:30:7c:67:65:cc:8f:22:a2:15:be:
00:42:54:75:0f:3a:26:06:eb:67:44:13:58:44:dc:
b8:6c:f2:9c:38:ba:bc:3c:12:48:26:25:60:63:47:
7b:c2:e1:95:63:5c:e8:c6:53:f3:d8:91:92:0d:d8:
72:7d:24:c5:1e:62:44:62:33:ce:fe:77:fe:5d:90:
c4:3d:52:37:b9:08:a3:3a:16:d4:96:b5:75:5d:f7:
6a:38:b8:2c:69:8c:b4:af:b6:fd:75:3d:98:22:af:
ef:bb:72:d6:dc:e0:af:74:24:e1:75:51:25:0c:8b:
5b:ac:4c:0f:22:d5:8e:5e:da:fe:02:ab:ea:2f:45:
29:c3:76:a5:7f:06:0e:f4:a8:c4:e8:20:62:97:63:
79:23:5a:80:60:cb:e0:a5:78:68:ed:6b:8c:0f:ad:
de:ec:14:0e:b6:89:24:1b:15:48:01:13:9e:a8:08:
44:90:fc:56:69:68:57:3e:8f:8c:cb:8e:ca:1e:72:
88:fd:c1:4b:58:9f:86:13:83:c7:ea:db:67:f2:fc:
2c:62:36:0b:2a:f0:de:3f:58:da:19:01:9c:0c:6d:
4a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FD:57:03:F6:9B:98:80:D8:B2:0B:64:5A:F6:0C:1F:F4:09:CC:69
X509v3 Authority Key Identifier:
keyid:EA:26:D3:23:83:1C:DA:1A:38:4E:91:E0:FE:38:91:DB:0C:EB:2E:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6F9ACE76CE7211EBAF46B61AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.166.186.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:e0:e2:da:00:6d:3e:0a:7d:40:0d:e1:0a:6f:0c:05:2a:cb:
33:07:68:55:99:b3:f2:5f:70:0d:3a:73:08:c8:ce:32:1d:e0:
8c:37:ad:7b:5c:f1:94:45:b7:74:26:46:aa:66:03:5c:2a:82:
13:c2:f2:b5:f8:7e:49:4d:bc:8b:4d:77:01:ce:c7:9e:c4:c9:
1c:74:7c:b7:d8:74:7d:7c:84:c3:e1:fc:f6:c5:d0:2e:a6:57:
0f:d8:2b:02:3b:d8:cf:13:a8:29:85:f2:c2:d3:3c:b3:35:4f:
77:49:d4:da:1d:52:60:a3:58:78:c1:d0:85:8a:f7:7c:e2:e9:
15:49:12:ba:62:7d:da:23:24:23:93:b5:c4:7c:60:f0:12:83:
0a:5b:eb:bd:14:93:4d:67:fe:93:4c:5e:17:4c:88:33:9d:e1:
86:f9:16:fd:2f:e8:4a:46:d5:40:8e:90:4a:a6:51:2c:b5:5d:
be:bf:dc:5b:9e:fe:30:0e:a3:1f:8e:43:c8:21:d3:1c:f2:d5:
e2:83:f0:57:a7:80:da:6a:fa:82:7a:25:ed:e4:72:a8:91:11:
83:f3:07:82:18:99:de:fa:96:c7:1a:3c:47:a9:b4:af:9f:75:
58:01:46:df:db:bd:ca:b4:ee:c4:40:91:82:45:42:15:07:af:
e6:de:95:00
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjZDMzkxMTAvBgNVBAUTKEVBMjZEMzIzODMxQ0RBMUEzODRFOTFFMEZFMzg5MURC
MENFQjJFQzgwHhcNMjUwNzAxMDAwMjU1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MGMxNi1hNzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm+PFdFxSzPWCMzYi4kylYd/Y2Cb+P54gwMX3lCc8y3ivHjB8Z2XMjyKiFb4A
QlR1DzomButnRBNYRNy4bPKcOLq8PBJIJiVgY0d7wuGVY1zoxlPz2JGSDdhyfSTF
HmJEYjPO/nf+XZDEPVI3uQijOhbUlrV1XfdqOLgsaYy0r7b9dT2YIq/vu3LW3OCv
dCThdVElDItbrEwPItWOXtr+AqvqL0Upw3alfwYO9KjE6CBil2N5I1qAYMvgpXho
7WuMD63e7BQOtokkGxVIAROeqAhEkPxWaWhXPo+My47KHnKI/cFLWJ+GE4PH6ttn
8vwsYjYLKvDeP1jaGQGcDG1KQQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCv9VwP2
m5iA2LILZFr2DB/0CcxpMB8GA1UdIwQYMBaAFOom0yODHNoaOE6R4P44kdsM6y7I
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkMzOS83QkYwRjI3NENF
NzAxMUVCQTdFMDlCMUFDNEY5QUUwMi82aWJUSTRNYzJobzRUcEhnX2ppUjJ3enJM
c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZpYlRJNE1jMmhvNFRwSGdfamlSMnd6ckxzZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjZDMzkvN0JGMEYyNzRDRTcwMTFFQkE3RTA5QjFBQzRGOUFFMDIvNkY5QUNFNzZD
RTcyMTFFQkFGNDZCNjFBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ6a6MA0GCSqGSIb3DQEBCwUAA4IBAQAd4OLaAG0+Cn1ADeEKbwwF
KsszB2hVmbPyX3ANOnMIyM4yHeCMN617XPGURbd0JkaqZgNcKoITwvK1+H5JTbyL
TXcBzseexMkcdHy32HR9fITD4fz2xdAuplcP2CsCO9jPE6gphfLC0zyzNU93SdTa
HVJgo1h4wdCFivd84ukVSRK6Yn3aIyQjk7XEfGDwEoMKW+u9FJNNZ/6TTF4XTIgz
neGG+Rb9L+hKRtVAjpBKplEstV2+v9xbnv4wDqMfjkPIIdMc8tXig/BXp4DaavqC
eiXt5HKokRGD8weCGJne+pbHGjxHqbSvn3VYAUbf273KtO7EQJGCRUIVB6/m3pUA
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:26:42 2026 by rpki-client