
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/6A7A4C9A3E1711F1A511DF78B0833773.roa
File: 6A7A4C9A3E1711F1A511DF78B0833773.roa (raw, json)
Hash identifier: HR3Bw4cs3A87KRfcRVJWreHgQBXYrEw5cctSabHCe08=
Subject key identifier: B0:88:20:AF:30:1B:92:8C:9A:14:1E:CF:28:20:5A:77:B0:E4:70:2B
Certificate issuer: /CN=A91F9119/serialNumber=9CB6E64AC745829AA3C15407B3E402B206A1AF19
Certificate serial: 03
Authority key identifier: 9C:B6:E6:4A:C7:45:82:9A:A3:C1:54:07:B3:E4:02:B2:06:A1:AF:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/6A7A4C9A3E1711F1A511DF78B0833773.roa
Signing time: Wed 22 Apr 2026 06:49:32 +0000
ROA not before: Wed 22 Apr 2026 06:49:32 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 13335
IP address blocks: 43.230.112.0/24 maxlen: 24
43.230.113.0/24 maxlen: 24
43.230.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.crl
rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 09:17:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9119, serialNumber=9CB6E64AC745829AA3C15407B3E402B206A1AF19
Validity
Not Before: Apr 22 06:49:32 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69e86f7c-8a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8b:77:a1:21:c4:06:77:31:d4:9d:2b:fc:5d:
92:7b:a5:f9:bb:9c:31:03:63:56:d8:d1:69:82:b9:
ef:2f:fd:aa:c2:98:e3:a1:02:c3:26:f1:ee:de:11:
44:b0:18:ef:b1:b8:38:b2:00:5a:23:b8:51:4a:c2:
60:0d:41:61:5f:58:4c:8e:a0:e9:64:a8:66:bc:c9:
bd:2e:22:b1:ef:e1:82:6b:64:f2:ff:e4:f4:46:76:
e0:26:db:1d:34:b4:f1:0a:57:56:c4:eb:d6:5c:3b:
8f:e7:5f:be:be:1b:70:20:b3:69:20:fa:fb:f6:5d:
29:0b:d1:17:e6:a7:e3:31:0a:42:f1:1f:a3:f0:54:
b0:dd:b7:69:41:8d:9c:c2:3f:f7:c9:11:bc:93:82:
07:05:7c:c6:f1:03:6c:76:b3:fc:59:14:ff:1f:ff:
ce:07:12:11:fe:3a:cf:fc:7f:ec:db:62:ed:fe:f0:
2b:00:ef:64:f5:e3:39:22:d9:3a:58:c9:48:9d:56:
6a:30:4c:6e:c1:88:b5:ae:3e:04:ac:43:ee:4e:15:
7d:dd:67:03:11:c6:c8:85:36:11:c0:59:b3:fb:71:
a7:14:9e:85:39:0a:ea:b4:b2:aa:a9:77:37:13:af:
91:a4:ae:fb:ad:eb:eb:98:5b:4a:df:42:19:18:2e:
6c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:88:20:AF:30:1B:92:8C:9A:14:1E:CF:28:20:5A:77:B0:E4:70:2B
X509v3 Authority Key Identifier:
keyid:9C:B6:E6:4A:C7:45:82:9A:A3:C1:54:07:B3:E4:02:B2:06:A1:AF:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/6A7A4C9A3E1711F1A511DF78B0833773.roa
sbgp-ipAddrBlock: critical
IPv4:
43.230.112.0-43.230.114.255
Signature Algorithm: sha256WithRSAEncryption
74:56:ba:35:2b:a2:71:c4:db:49:59:2e:bd:d2:43:87:8b:c8:
d7:4b:98:08:1b:5a:26:30:35:8e:a2:7b:79:57:29:28:ac:a0:
e0:a4:f8:df:22:81:33:37:a9:73:35:07:6c:3a:f4:d6:08:1a:
b7:dd:9a:c6:bb:8a:35:17:ce:ea:96:ec:24:34:31:dd:f8:60:
92:1f:c0:a1:a1:09:3a:d7:d3:0e:78:ea:fe:35:1b:a3:63:54:
10:2d:0a:81:36:79:60:bf:e2:9c:e0:c9:a7:53:ee:71:8d:c1:
c5:4e:58:74:ad:24:e4:07:d9:28:54:80:c8:a9:b8:44:6c:d5:
9c:9d:f4:e2:0b:e1:89:86:04:a7:0d:74:27:26:cb:45:a6:03:
4b:e5:72:da:2a:b0:ee:63:5c:bb:99:2f:51:db:f6:37:f4:59:
00:a4:9c:e4:30:42:f4:4c:21:bc:b4:3d:9b:d4:2f:11:73:2e:
e4:fa:6e:86:84:95:27:2f:c1:2c:bc:7c:36:1b:f8:cd:ed:11:
e2:78:a3:94:76:17:59:ca:32:93:c9:ec:34:5a:5c:84:cf:7f:
8c:df:2c:23:8e:9c:60:96:de:05:19:73:68:b2:53:aa:da:ee:
e7:a4:b8:09:f3:f3:fb:54:bd:11:58:b6:52:2c:44:8f:88:6f:
02:fb:ba:38
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
OTExOTExMC8GA1UEBRMoOUNCNkU2NEFDNzQ1ODI5QUEzQzE1NDA3QjNFNDAyQjIw
NkExQUYxOTAeFw0yNjA0MjIwNjQ5MzJaFw0yNzA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5ZTg2ZjdjLThhNWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCHi3ehIcQGdzHUnSv8XZJ7pfm7nDEDY1bY0WmCue8v/arCmOOhAsMm8e7eEUSw
GO+xuDiyAFojuFFKwmANQWFfWEyOoOlkqGa8yb0uIrHv4YJrZPL/5PRGduAm2x00
tPEKV1bE69ZcO4/nX76+G3Ags2kg+vv2XSkL0Rfmp+MxCkLxH6PwVLDdt2lBjZzC
P/fJEbyTggcFfMbxA2x2s/xZFP8f/84HEhH+Os/8f+zbYu3+8CsA72T14zki2TpY
yUidVmowTG7BiLWuPgSsQ+5OFX3dZwMRxsiFNhHAWbP7cacUnoU5Cuq0sqqpdzcT
r5Gkrvut6+uYW0rfQhkYLmz7AgMBAAGjggJoMIICZDAdBgNVHQ4EFgQUsIggrzAb
koyaFB7PKCBad7DkcCswHwYDVR0jBBgwFoAUnLbmSsdFgpqjwVQHs+QCsgahrxkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5MTE5L0UzMUNGOUNBM0Uw
RjExRjE5QkY4MjNBQ0FBODMzNzczL25MYm1Tc2RGZ3BxandWUUhzLVFDc2dhaHJ4
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbkxibVNzZEZncHFqd1ZRSHMtUUNzZ2FocnhrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OTExOS9FMzFDRjlDQTNFMEYxMUYxOUJGODIzQUNBQTgzMzc3My82QTdBNEM5QTNF
MTcxMUYxQTUxMURGNzhCMDgzMzc3My5yb2EwJwYIKwYBBQUHAQcBAf8EGDAWMBQE
AgABMA4wDAMEBCvmcAMEACvmcjANBgkqhkiG9w0BAQsFAAOCAQEAdFa6NSuiccTb
SVkuvdJDh4vI10uYCBtaJjA1jqJ7eVcpKKyg4KT43yKBMzepczUHbDr01ggat92a
xruKNRfO6pbsJDQx3fhgkh/AoaEJOtfTDnjq/jUbo2NUEC0KgTZ5YL/inODJp1Pu
cY3BxU5YdK0k5AfZKFSAyKm4RGzVnJ304gvhiYYEpw10JybLRaYDS+Vy2iqw7mNc
u5kvUdv2N/RZAKSc5DBC9EwhvLQ9m9QvEXMu5PpuhoSVJy/BLLx8Nhv4ze0R4nij
lHYXWcoyk8nsNFpchM9/jN8sI46cYJbeBRlzaLJTqtru56S4CfPz+1S9EVi2UixE
j4hvAvu6OA==
-----END CERTIFICATE-----
Generated at Wed May 13 09:17:54 2026 by rpki-client