
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1BA8BDD2D2A911EC9B0AC25DC4F9AE02.roa
File: 1BA8BDD2D2A911EC9B0AC25DC4F9AE02.roa (raw, json)
Hash identifier: iyY/y0LFTXKDM1eYeJ+4Enj0zCjw1RgkeuTV6CA2UV0=
Subject key identifier: 8C:E4:47:55:C3:09:97:02:28:93:83:0C:31:F9:A4:B2:D9:53:36:9C
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6E27
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1BA8BDD2D2A911EC9B0AC25DC4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:27:38 +0000
ROA not before: Fri 02 Oct 2026 15:27:38 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 149101
IP address blocks: 103.187.0.0/23 maxlen: 24
2400:77a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28199 (0x6e27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:27:38 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcd6a-4da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b8:b4:d4:83:38:74:d8:fd:32:3a:75:3a:b8:
9a:25:49:bb:d3:8b:7f:19:d0:7e:54:4d:43:d3:0f:
63:1d:81:07:68:e4:72:17:26:aa:5e:fb:41:e2:00:
f2:24:db:c6:6c:7e:b6:3b:74:63:ac:e7:3f:fc:c1:
9a:8b:f8:bf:4d:e7:00:ad:56:9d:8b:53:d1:21:5e:
f4:70:e1:48:70:1a:d5:17:00:dd:a7:3a:3d:f0:28:
eb:6c:06:ad:b7:83:ee:6d:18:0c:56:27:e6:4e:64:
ee:86:23:10:2f:eb:b8:ca:b6:99:0e:5c:96:02:b7:
c4:38:43:d7:8c:74:5a:4a:ab:c6:4f:02:53:74:25:
dc:03:74:a1:09:e1:0d:cc:eb:74:ac:3a:ed:12:e7:
c7:68:9b:16:77:02:84:7a:a3:f2:e0:4a:98:5e:c7:
1c:e9:e5:9b:cd:2a:fb:f1:97:33:c3:6e:37:ab:50:
9b:18:69:c6:24:69:9f:f3:df:77:5b:a2:29:5e:d3:
13:87:cc:08:34:49:63:1f:cf:ab:58:05:cf:1b:89:
2b:9d:c7:28:87:b8:d0:99:52:14:cf:a4:26:37:53:
d3:82:07:52:5f:5a:65:c6:a2:6e:b5:d0:d0:1b:2a:
e2:c3:48:53:93:f1:6e:05:de:80:a2:f9:9c:0c:bb:
28:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E4:47:55:C3:09:97:02:28:93:83:0C:31:F9:A4:B2:D9:53:36:9C
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1BA8BDD2D2A911EC9B0AC25DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.187.0.0/23
IPv6:
2400:77a0::/48
Signature Algorithm: sha256WithRSAEncryption
3f:71:51:61:89:ad:b0:5a:43:07:0b:63:d0:96:3f:56:b7:39:
60:8b:c4:a7:73:73:32:38:65:62:26:48:62:47:d2:e1:73:5f:
f7:1c:70:0f:68:fa:7e:b4:44:f5:cd:b4:b6:37:7b:f8:ed:2d:
e0:31:2e:4f:36:36:f4:3b:d9:77:27:ba:fb:36:86:76:13:a3:
9f:1b:f4:66:95:8a:5f:18:d9:bb:a9:a8:e4:a9:29:33:99:fd:
dd:fe:35:2c:15:a1:02:3f:e2:b5:6f:e5:c0:db:a0:8f:12:bb:
43:11:3e:df:f0:1f:72:04:96:93:a5:f8:77:b0:dd:57:04:10:
c3:d7:d7:18:2d:f2:82:69:69:19:44:b2:7a:d6:96:b9:03:b0:
ec:43:9f:b5:bf:21:f6:38:89:d0:60:8b:88:49:3f:e7:2f:3a:
29:b7:4c:9f:cf:82:d8:31:f1:56:ea:d9:58:9b:dc:36:fd:8d:
e9:33:4b:8a:98:95:d3:b7:9c:34:01:09:47:0d:5d:8c:2b:c7:
54:57:37:42:50:2e:8c:03:c0:59:af:04:66:8c:13:9b:4c:9f:
03:9f:5a:5e:5a:2d:4e:16:8b:d8:0a:d3:59:e4:c6:f7:ef:ca:
92:8e:73:be:7e:a6:f0:c7:62:00:fa:a7:f5:47:05:bd:6e:ff:
4d:0e:47:02
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICbicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYxMDAyMTUyNzM4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2Q2YS00ZGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp7i01IM4dNj9Mjp1OriaJUm704t/GdB+VE1D0w9jHYEHaORyFyaqXvtB4gDy
JNvGbH62O3RjrOc//MGai/i/TecArVadi1PRIV70cOFIcBrVFwDdpzo98CjrbAat
t4PubRgMVifmTmTuhiMQL+u4yraZDlyWArfEOEPXjHRaSqvGTwJTdCXcA3ShCeEN
zOt0rDrtEufHaJsWdwKEeqPy4EqYXscc6eWbzSr78Zczw243q1CbGGnGJGmf8993
W6IpXtMTh8wINEljH8+rWAXPG4krnccoh7jQmVIUz6QmN1PTggdSX1plxqJutdDQ
Gyriw0hTk/FuBd6AovmcDLsoYwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFIzkR1XD
CZcCKJODDDH5pLLZUzacMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMUJBOEJERDJE
MkE5MTFFQzlCMEFDMjVEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ7sAMA8EAgACMAkDBwAkAHegAAAwDQYJKoZIhvcNAQELBQADggEB
AD9xUWGJrbBaQwcLY9CWP1a3OWCLxKdzczI4ZWImSGJH0uFzX/cccA9o+n60RPXN
tLY3e/jtLeAxLk82NvQ72Xcnuvs2hnYTo58b9GaVil8Y2bupqOSpKTOZ/d3+NSwV
oQI/4rVv5cDboI8Su0MRPt/wH3IElpOl+Hew3VcEEMPX1xgt8oJpaRlEsnrWlrkD
sOxDn7W/IfY4idBgi4hJP+cvOim3TJ/Pgtgx8Vbq2Vib3Db9jekzS4qYldO3nDQB
CUcNXYwrx1RXN0JQLowDwFmvBGaME5tMnwOfWl5aLU4Wi9gK01nkxvfvypKOc75+
pvDHYgD6p/VHBb1u/00ORwI=
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:57:39 2026 by rpki-client