
$ rpki-client -vvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/A576C5087C3311F1890EBC415EA30FBC.roa
File: A576C5087C3311F1890EBC415EA30FBC.roa (raw, json)
Hash identifier: OOm/rpCNOVEzbs5MbTS+KE9MkYUOeHrbZ+HUs/7R0Ao=
Subject key identifier: 00:1B:72:E3:FC:2F:C5:F5:83:F2:A1:96:89:46:89:0E:61:1D:1B:9A
Certificate issuer: /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
Certificate serial: 08D2
Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/A576C5087C3311F1890EBC415EA30FBC.roa
Signing time: Sun 02 Aug 2026 21:40:45 +0000
ROA not before: Sun 02 Aug 2026 21:40:45 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 17408
IP address blocks: 103.3.28.0/24 maxlen: 24
103.3.29.0/24 maxlen: 24
103.3.30.0/24 maxlen: 24
103.3.31.0/24 maxlen: 24
103.37.236.0/24 maxlen: 24
103.37.237.0/24 maxlen: 24
103.37.238.0/24 maxlen: 24
103.37.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl
rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2258 (0x8d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91941E9, serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
Validity
Not Before: Aug 2 21:40:45 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a6fb95d-84d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e8:c8:be:61:e7:6a:f4:93:ea:42:30:3a:60:
6a:20:58:5b:15:d9:13:4a:bd:e4:e3:83:b0:a7:6c:
74:d9:95:4b:47:5f:e0:bf:a4:7f:6b:3e:cc:d1:8a:
37:cd:66:9e:1e:28:74:4b:0b:27:b8:80:d9:5a:63:
1f:3d:2e:fe:78:dd:ef:17:14:ca:a7:e9:0b:06:ba:
0c:81:b2:93:ee:23:68:67:09:18:06:58:3d:d7:f6:
93:06:b0:63:87:52:bb:30:7c:f6:ab:1e:cb:2e:2d:
7f:1f:49:85:4f:c5:86:b3:8a:ce:7b:76:8c:18:dc:
3b:1e:f6:88:d6:0b:16:d4:a3:70:92:93:3b:8d:95:
09:3a:0a:9c:1e:d5:9c:c6:85:2c:00:7b:61:d8:52:
bf:6e:d0:5a:b3:74:d0:8c:71:86:4a:7e:07:f9:2f:
b6:f3:fe:99:af:e4:3f:3c:b4:7f:b6:7c:d0:55:2e:
a2:49:5e:b8:38:de:32:2d:61:ca:32:d3:17:1f:0d:
0e:71:a5:1d:5b:2a:e9:ca:43:7a:61:73:13:de:50:
65:75:3b:f7:74:ad:72:e7:9a:11:3f:fa:19:d4:a9:
0d:65:15:c9:29:8a:47:90:2f:94:ab:87:40:a6:67:
98:08:f4:4e:72:dd:39:37:ee:3f:7b:db:56:b8:8c:
36:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1B:72:E3:FC:2F:C5:F5:83:F2:A1:96:89:46:89:0E:61:1D:1B:9A
X509v3 Authority Key Identifier:
keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/A576C5087C3311F1890EBC415EA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.3.28.0/22
103.37.236.0/22
Signature Algorithm: sha256WithRSAEncryption
91:6e:01:31:d6:9b:95:f0:0a:c4:11:93:23:9e:40:0d:c4:b9:
d9:d7:66:44:0e:6a:b8:a0:48:c0:5e:f5:0a:a8:6e:de:a6:f9:
8c:60:46:59:58:27:76:cc:ac:56:5d:c1:82:77:0d:79:8d:8f:
4b:96:4b:2c:38:ef:6d:bd:63:65:99:e2:6a:92:b1:03:35:01:
e6:3d:b7:b8:83:f6:89:e1:d6:0f:65:c0:c6:0f:b5:70:a8:19:
19:44:75:66:72:05:b8:10:1c:fc:8e:ca:68:9f:a7:98:96:83:
d3:08:89:9a:3f:73:9b:88:5b:9a:27:c8:ce:9e:35:17:72:52:
0f:3d:fa:40:fc:7e:0b:a1:ab:e1:f5:48:2a:35:d3:4d:92:ff:
26:90:be:61:bf:4f:87:ef:84:35:43:b8:9d:25:05:d0:de:c5:
7c:6b:74:ac:83:18:3b:11:5d:84:9c:6a:97:01:19:7c:2d:fe:
fc:1d:6c:25:19:14:87:9d:a8:35:ab:76:d3:37:1d:91:09:76:
7e:c2:31:3e:e1:6e:e2:a1:1b:ad:12:6e:66:c4:e5:2a:6c:b5:
bb:06:5d:05:b2:49:60:06:45:97:8f:25:97:4a:fe:c6:f2:3d:
ff:68:be:48:b2:2a:cb:1a:bd:f3:9f:c6:58:70:14:73:6f:5e:
99:41:9b:96
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICCNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTQxRTkxMTAvBgNVBAUTKDA1QUQzRTRBQTE5NjFCQTdFQ0JFMDI5MzU3MjVDMjVD
RDI2QkQ2QkMwHhcNMjYwODAyMjE0MDQ1WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZmYjk1ZC04NGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqOjIvmHnavST6kIwOmBqIFhbFdkTSr3k44Owp2x02ZVLR1/gv6R/az7M0Yo3
zWaeHih0SwsnuIDZWmMfPS7+eN3vFxTKp+kLBroMgbKT7iNoZwkYBlg91/aTBrBj
h1K7MHz2qx7LLi1/H0mFT8WGs4rOe3aMGNw7HvaI1gsW1KNwkpM7jZUJOgqcHtWc
xoUsAHth2FK/btBas3TQjHGGSn4H+S+28/6Zr+Q/PLR/tnzQVS6iSV64ON4yLWHK
MtMXHw0OcaUdWyrpykN6YXMT3lBldTv3dK1y55oRP/oZ1KkNZRXJKYpHkC+Uq4dA
pmeYCPROct05N+4/e9tWuIw2hwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFAAbcuP8
L8X1g/KhlolGiQ5hHRuaMB8GA1UdIwQYMBaAFAWtPkqhlhun7L4Ck1clwlzSa9a8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDFFOS9EQUQ4RkI4MDA3
OTAxMUVCQkI5OEMwNzZDNEY5QUUwMi9CYTAtU3FHV0c2ZnN2Z0tUVnlYQ1hOSnIx
cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JhMC1TcUdXRzZmc3ZnS1RWeVhDWE5KcjFydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTQxRTkvREFEOEZCODAwNzkwMTFFQkJCOThDMDc2QzRGOUFFMDIvQTU3NkM1MDg3
QzMzMTFGMTg5MEVCQzQxNUVBMzBGQkMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCZwMcAwQCZyXsMA0GCSqGSIb3DQEBCwUAA4IBAQCRbgEx1puV8ArE
EZMjnkANxLnZ12ZEDmq4oEjAXvUKqG7epvmMYEZZWCd2zKxWXcGCdw15jY9Llkss
OO9tvWNlmeJqkrEDNQHmPbe4g/aJ4dYPZcDGD7VwqBkZRHVmcgW4EBz8jspon6eY
loPTCImaP3ObiFuaJ8jOnjUXclIPPfpA/H4Loavh9UgqNdNNkv8mkL5hv0+H74Q1
Q7idJQXQ3sV8a3Ssgxg7EV2EnGqXARl8Lf78HWwlGRSHnag1q3bTNx2RCXZ+wjE+
4W7ioRutEm5mxOUqbLW7Bl0FsklgBkWXjyWXSv7G8j3/aL5IsirLGr3zn8ZYcBRz
b16ZQZuW
-----END CERTIFICATE-----
Generated at Wed Aug 19 15:59:53 2026 by rpki-client