
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/C437B01282C211EBBB08B280C4F9AE02.roa
File: C437B01282C211EBBB08B280C4F9AE02.roa (raw, json)
Hash identifier: 046v9XMg9lf5o6jX/bP73MOZRaxH/aOuplfrO7+0Dx8=
Subject key identifier: CB:69:12:12:73:C2:02:D2:62:11:2E:EB:4E:70:31:4A:72:DD:69:05
Certificate issuer: /CN=A91790C3/serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD
Certificate serial: 0792
Authority key identifier: 54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/C437B01282C211EBBB08B280C4F9AE02.roa
Signing time: Wed 14 Oct 2026 22:42:34 +0000
ROA not before: Wed 14 Oct 2026 22:42:34 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 139700
IP address blocks: 103.143.185.0/24 maxlen: 24
103.168.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl
rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 21:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1938 (0x792)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91790C3, serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD
Validity
Not Before: Oct 14 22:42:34 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ad0055a-1489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:27:46:db:2a:e8:09:bd:e4:43:e4:ea:c7:0f:
2f:38:fc:b7:c2:ad:cc:b5:a3:e6:5c:41:94:53:18:
0b:98:3f:ab:ab:f1:a0:8f:1c:0e:37:33:a8:5d:92:
71:02:a6:6b:cb:6e:d9:5c:cb:75:66:be:54:ec:f7:
fa:bf:26:37:68:32:67:65:34:de:7c:ae:7c:0a:bd:
22:60:f2:eb:21:2d:90:83:9c:95:61:b0:51:9c:9a:
3c:b4:54:d4:fd:38:28:72:27:52:43:62:59:8f:73:
0f:f7:a3:62:04:d7:0b:fc:3e:a7:7b:42:18:ab:d3:
21:69:83:90:3d:9e:94:9a:36:f9:44:e0:ba:a8:f1:
7c:72:44:03:8b:0b:c8:9b:28:21:b5:a0:da:49:84:
ff:ef:d2:42:0b:88:a5:1c:95:8f:53:2a:b0:7f:fd:
0e:2d:a4:16:8d:d9:9f:79:a7:12:67:ed:89:39:11:
d4:4c:ca:43:df:09:ac:0b:b0:24:ac:72:54:00:5e:
8a:58:57:a4:5b:a2:1f:f0:2b:49:c7:c6:f1:dd:6e:
94:64:e3:f5:bb:03:e0:3a:e4:b9:75:72:58:b8:8d:
d2:8d:ab:65:10:5c:54:e1:31:fd:17:fa:1a:43:a2:
96:7b:be:09:0e:3e:1d:07:78:1d:83:cf:a4:22:0e:
0d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:69:12:12:73:C2:02:D2:62:11:2E:EB:4E:70:31:4A:72:DD:69:05
X509v3 Authority Key Identifier:
keyid:54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/C437B01282C211EBBB08B280C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.143.185.0/24
103.168.45.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:c3:70:d4:85:63:8a:93:91:23:b7:34:a9:8b:e9:6f:13:53:
50:67:f5:b3:e8:85:d0:54:01:0e:2f:b4:1c:6b:c4:ac:43:94:
51:b8:8c:53:34:3e:c4:e1:3f:a0:0e:9d:53:32:bb:e2:99:ed:
c1:91:7a:fc:a4:3d:2e:0e:f4:57:26:c0:bc:af:32:b6:01:02:
3a:76:e4:e0:9a:a3:f8:39:87:b2:3b:1e:79:f4:ff:34:17:b0:
9e:3b:47:ab:a3:65:9e:c9:05:29:a0:c5:9f:0e:f5:35:01:a9:
29:86:41:70:4a:50:af:91:4b:d8:24:50:e8:09:c3:23:d7:6e:
30:de:cd:10:44:46:2a:b7:c6:3c:a6:f6:68:d2:f4:8c:45:ad:
ca:ea:ec:2b:da:c8:f1:3c:f7:f5:6e:e2:51:70:df:5b:6c:ba:
1a:f8:d5:2a:72:f9:e4:f0:2d:73:b6:ea:86:1a:15:19:0d:4a:
82:21:df:6e:25:23:66:56:8c:1d:54:68:b3:95:34:df:21:8d:
42:c3:11:ee:e4:2a:d0:19:b2:d1:81:65:b2:c9:76:89:e4:bd:
d3:91:3d:2d:f8:0f:21:83:50:d9:43:52:3a:9f:b5:dd:70:86:
3b:ae:6e:3f:9c:65:e3:2a:e0:fb:59:d1:c9:29:b0:1e:fd:f7:
d4:bc:c7:2a
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICB5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzkwQzMxMTAvBgNVBAUTKDU0ODdCNjNGNDRENjkxRDQzNTY4OEFGRTNDOEFDMjdC
RkQ5MTEyQUQwHhcNMjYxMDE0MjI0MjM0WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWQwMDU1YS0xNDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkidG2yroCb3kQ+Tqxw8vOPy3wq3MtaPmXEGUUxgLmD+rq/GgjxwONzOoXZJx
AqZry27ZXMt1Zr5U7Pf6vyY3aDJnZTTefK58Cr0iYPLrIS2Qg5yVYbBRnJo8tFTU
/TgocidSQ2JZj3MP96NiBNcL/D6ne0IYq9MhaYOQPZ6Umjb5ROC6qPF8ckQDiwvI
myghtaDaSYT/79JCC4ilHJWPUyqwf/0OLaQWjdmfeacSZ+2JORHUTMpD3wmsC7Ak
rHJUAF6KWFekW6If8CtJx8bx3W6UZOP1uwPgOuS5dXJYuI3SjatlEFxU4TH9F/oa
Q6KWe74JDj4dB3gdg8+kIg4NlwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFMtpEhJz
wgLSYhEu605wMUpy3WkFMB8GA1UdIwQYMBaAFFSHtj9E1pHUNWiK/jyKwnv9kRKt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTBDMy84NTUzMDVFMjgy
QzAxMUVCQkFDRTJBN0JDNEY5QUUwMi9WSWUyUDBUV2tkUTFhSXItUElyQ2VfMlJF
cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZJZTJQMFRXa2RRMWFJci1QSXJDZV8yUkVxMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzkwQzMvODU1MzA1RTI4MkMwMTFFQkJBQ0UyQTdCQzRGOUFFMDIvQzQzN0IwMTI4
MkMyMTFFQkJCMDhCMjgwQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ4+5AwQAZ6gtMA0GCSqGSIb3DQEBCwUAA4IBAQClw3DUhWOKk5Ej
tzSpi+lvE1NQZ/Wz6IXQVAEOL7Qca8SsQ5RRuIxTND7E4T+gDp1TMrvime3BkXr8
pD0uDvRXJsC8rzK2AQI6duTgmqP4OYeyOx559P80F7CeO0ero2WeyQUpoMWfDvU1
AakphkFwSlCvkUvYJFDoCcMj124w3s0QREYqt8Y8pvZo0vSMRa3K6uwr2sjxPPf1
buJRcN9bbLoa+NUqcvnk8C1ztuqGGhUZDUqCId9uJSNmVowdVGizlTTfIY1CwxHu
5CrQGbLRgWWyyXaJ5L3TkT0t+A8hg1DZQ1I6n7XdcIY7rm4/nGXjKuD7WdHJKbAe
/ffUvMcq
-----END CERTIFICATE-----
Generated at Wed Oct 21 01:32:09 2026 by rpki-client