
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/108CCEAE7F6A11F0A3280286C4F9AE02.roa
File: 108CCEAE7F6A11F0A3280286C4F9AE02.roa (raw, json)
Hash identifier: DSL54ToIz7qDjkGNpJ04I+OYArDzgZbmKw8aTtTAFhc=
Subject key identifier: 7B:68:AA:D2:75:86:44:EA:5F:75:39:A2:E7:1D:09:99:31:BD:D5:19
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6D9B
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/108CCEAE7F6A11F0A3280286C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:23:14 +0000
ROA not before: Fri 02 Oct 2026 15:23:14 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 131418
IP address blocks: 45.119.243.0/24 maxlen: 24
103.239.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 10:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28059 (0x6d9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:23:14 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcc62-fa53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:20:1d:8d:a1:1c:bc:7b:5f:83:36:b9:e7:ee:
2d:b5:45:ce:0d:0f:4a:0f:e6:51:04:18:cc:9d:64:
fb:56:c1:09:ca:57:d2:b1:e2:a4:b9:2f:bc:a2:d3:
6d:91:ba:0c:57:d8:61:1c:75:cd:27:79:b7:ff:be:
2b:f8:60:0c:1b:4b:5c:a7:61:bd:9e:dd:80:69:bd:
f4:5a:37:91:2f:45:53:1c:48:1c:82:8e:53:92:5c:
4a:a3:6c:2a:83:89:ea:4e:61:47:df:d8:6a:bd:cc:
f1:75:17:f5:39:c1:f8:eb:71:c5:af:a8:6d:06:1d:
c7:c7:2b:75:d5:68:aa:99:fb:cc:d5:f3:0d:f8:96:
b3:9c:83:c4:34:fb:53:a0:96:37:dd:1d:ac:ab:32:
6c:98:8f:0d:22:04:88:1f:de:5a:f2:e1:33:59:f1:
01:e6:2a:6c:b0:19:8f:7e:c6:ce:b5:fe:c4:3c:94:
e5:59:db:41:00:96:28:0f:7b:fc:27:b0:80:79:f3:
01:56:3a:b5:29:98:ef:85:9d:20:ca:3c:2d:83:06:
24:e5:a2:90:55:be:3a:e3:2e:8e:d7:fd:1a:49:4d:
65:d4:b1:13:52:d9:c7:5c:87:08:a7:95:ec:ef:d3:
92:45:e9:13:a9:31:c0:f1:7a:2f:97:41:31:d8:69:
9a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:68:AA:D2:75:86:44:EA:5F:75:39:A2:E7:1D:09:99:31:BD:D5:19
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/108CCEAE7F6A11F0A3280286C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.119.243.0/24
103.239.120.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:e3:9b:ab:e7:1f:b2:0a:65:b1:de:82:99:29:e5:71:be:61:
95:07:8c:20:72:cf:78:48:cf:8b:4a:a7:9e:5c:23:50:a3:b2:
c8:b8:5f:46:ef:09:dd:5e:3c:29:c8:2c:95:5a:94:ea:ec:c6:
76:86:bf:fb:86:01:78:80:d6:6a:89:03:48:b1:bb:99:25:25:
41:5a:bd:89:e9:96:f2:13:e2:62:97:cc:17:0a:5f:37:90:fd:
04:3a:0b:8e:8b:d5:77:0b:9f:b2:5e:66:a8:a8:c6:74:b6:33:
3e:2c:4b:ed:13:2f:24:1d:00:c2:43:55:8d:2e:49:ce:1f:b0:
84:68:fd:fe:d9:39:41:93:e3:3d:ea:7e:82:8f:3a:41:82:94:
b7:a1:a6:b6:cb:10:50:76:51:b2:f7:69:2e:30:18:c0:ec:a9:
f0:92:2b:24:91:53:79:ee:02:94:1e:54:2b:d4:c5:84:f8:f3:
c4:68:5f:69:8d:b4:ed:ca:99:45:e6:90:2f:86:cf:b6:e2:db:
ed:72:ee:a9:da:28:2f:3b:f1:7c:a5:7a:87:13:94:1b:cd:1f:
ae:f7:1e:dc:c4:f1:e3:7f:0b:39:9c:2e:b5:22:3c:87:a2:08:
4a:66:e5:f2:f3:f4:89:f5:40:69:de:ee:e9:86:1b:35:8c:64:
47:9e:e4:a3
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICbZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYxMDAyMTUyMzE0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2M2Mi1mYTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqiAdjaEcvHtfgza55+4ttUXODQ9KD+ZRBBjMnWT7VsEJylfSseKkuS+8otNt
kboMV9hhHHXNJ3m3/74r+GAMG0tcp2G9nt2Aab30WjeRL0VTHEgcgo5TklxKo2wq
g4nqTmFH39hqvczxdRf1OcH463HFr6htBh3Hxyt11WiqmfvM1fMN+JaznIPENPtT
oJY33R2sqzJsmI8NIgSIH95a8uEzWfEB5ipssBmPfsbOtf7EPJTlWdtBAJYoD3v8
J7CAefMBVjq1KZjvhZ0gyjwtgwYk5aKQVb464y6O1/0aSU1l1LETUtnHXIcIp5Xs
79OSRekTqTHA8Xovl0Ex2GmaxQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFHtoqtJ1
hkTqX3U5oucdCZkxvdUZMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMTA4Q0NFQUU3
RjZBMTFGMEEzMjgwMjg2QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQALXfzAwQCZ+94MA0GCSqGSIb3DQEBCwUAA4IBAQB/45ur5x+yCmWx
3oKZKeVxvmGVB4wgcs94SM+LSqeeXCNQo7LIuF9G7wndXjwpyCyVWpTq7MZ2hr/7
hgF4gNZqiQNIsbuZJSVBWr2J6ZbyE+Jil8wXCl83kP0EOguOi9V3C5+yXmaoqMZ0
tjM+LEvtEy8kHQDCQ1WNLknOH7CEaP3+2TlBk+M96n6CjzpBgpS3oaa2yxBQdlGy
92kuMBjA7KnwkiskkVN57gKUHlQr1MWE+PPEaF9pjbTtyplF5pAvhs+24tvtcu6p
2igvO/F8pXqHE5QbzR+u9x7cxPHjfws5nC61IjyHoghKZuXy8/SJ9UBp3u7phhs1
jGRHnuSj
-----END CERTIFICATE-----
Generated at Sat Oct 24 18:45:11 2026 by rpki-client