
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/11328E82645511EBAE4A4633C4F9AE02.roa
File: 11328E82645511EBAE4A4633C4F9AE02.roa (raw, json)
Hash identifier: CwtpD5SrkNUASFRZ1Rxs4UubmcWUkIc2SHd9sVV4JjI=
Subject key identifier: 28:48:FA:3D:C6:8B:B5:E5:85:E2:07:C2:E4:2E:67:99:A2:49:1E:E8
Certificate issuer: /CN=A91FDB80/serialNumber=8D668AFD3E03E70B8449881FA350131BACAC4856
Certificate serial: 0756
Authority key identifier: 8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/11328E82645511EBAE4A4633C4F9AE02.roa
Signing time: Tue 24 Mar 2026 21:28:55 +0000
ROA not before: Tue 24 Mar 2026 21:28:55 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 141689
IP address blocks: 103.162.6.0/24 maxlen: 24
103.165.242.0/24 maxlen: 24
2001:df5:dc80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.crl
rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 21:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1878 (0x756)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDB80, serialNumber=8D668AFD3E03E70B8449881FA350131BACAC4856
Validity
Not Before: Mar 24 21:28:55 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69c30217-2d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:68:1a:98:ae:c0:28:98:a7:14:6e:f1:a8:0d:
6c:ae:98:21:77:42:90:fc:f2:7a:91:99:3e:53:41:
a8:95:bd:42:8c:94:ac:c0:21:80:b8:58:00:d4:4d:
0d:dc:58:c7:cd:15:d3:b8:5b:bb:73:b3:a2:6b:a2:
16:c5:40:2e:8e:23:3f:1f:60:91:4d:a6:3f:09:6a:
f5:86:79:62:bd:db:41:bb:53:a6:08:80:c5:8a:65:
e2:9f:ae:74:e6:97:ee:2d:26:46:78:66:ea:0b:92:
b1:cb:e0:59:62:13:0b:11:67:cb:e4:42:f3:12:28:
e3:02:ca:cf:c0:ef:b6:62:73:47:d2:2a:c7:cc:ce:
7b:66:bd:fb:97:57:24:a3:19:e1:d5:c1:eb:86:b1:
a0:4f:67:a9:9a:45:9d:18:9a:73:51:7d:75:91:1a:
65:d5:8d:42:ca:c1:c1:9f:d3:ec:c4:fe:49:6a:89:
1d:73:f3:93:ba:9d:01:c5:65:80:ce:d2:e7:0c:dc:
68:5a:34:45:07:05:93:90:a0:e5:c6:cc:ca:4c:4e:
25:61:38:07:cf:51:f6:89:34:6e:09:c5:85:60:a1:
10:2e:f3:a4:93:bc:8a:0f:30:24:2e:70:a3:a4:c0:
45:a9:c5:8e:b7:ee:80:e3:83:af:d6:2d:f9:48:9d:
87:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:48:FA:3D:C6:8B:B5:E5:85:E2:07:C2:E4:2E:67:99:A2:49:1E:E8
X509v3 Authority Key Identifier:
keyid:8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/11328E82645511EBAE4A4633C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.162.6.0/24
103.165.242.0/24
IPv6:
2001:df5:dc80::/48
Signature Algorithm: sha256WithRSAEncryption
6c:22:ac:99:c5:e0:fc:b5:d9:1c:44:5e:b1:89:b9:53:51:ea:
69:dd:32:21:41:96:c1:2f:89:da:c7:55:f3:33:91:25:89:22:
2a:35:b0:a6:6c:76:be:36:b4:36:90:65:5f:d0:e0:6b:91:b4:
02:8e:f4:44:53:a2:f1:aa:f3:96:5e:f3:6f:bf:0e:2b:07:78:
90:52:7b:53:57:f2:ac:9f:e2:ba:7b:ab:c0:4c:21:87:fd:4e:
31:4e:a5:36:c3:1c:76:7d:c0:f5:d7:43:7a:bb:fb:f2:7a:29:
4d:e0:c3:b0:c6:7a:61:e5:b4:ef:d8:b8:e2:10:ab:ac:a0:e7:
58:90:07:8a:1b:98:ef:27:ca:5a:6b:90:8b:91:86:2d:39:8e:
e6:a1:6c:7a:c7:f8:8a:0a:4f:1a:4f:81:28:3f:82:f3:f8:d2:
03:32:2a:67:6b:c7:02:ff:a7:4f:12:26:0c:98:0c:35:1e:35:
1f:8d:e9:b3:f9:1c:87:d5:ee:c9:10:9f:1e:b4:bf:de:bf:6a:
e5:c6:42:0c:d8:f8:a4:cc:d8:2e:1a:c3:c2:e9:62:d9:bd:f0:
65:30:57:99:64:13:b6:fb:8f:a3:bc:2b:23:1c:cf:0b:3e:ef:
9d:62:38:52:fb:3f:bc:ea:48:c4:42:6d:55:0b:b1:4f:25:dd:
3d:54:24:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:13:14 2026 by rpki-client