
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/23237036280611ED8BEBC536C4F9AE02.roa
File: 23237036280611ED8BEBC536C4F9AE02.roa (raw, json)
Hash identifier: xDEPl7RduULpadP3YArVbKnyazVhC3hCWYJc7Cj/h/E=
Subject key identifier: 4E:B9:85:B5:1E:1C:45:B0:E0:28:14:79:C6:36:3D:60:E1:C7:92:28
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 5DF0
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/23237036280611ED8BEBC536C4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:16:04 +0000
ROA not before: Thu 28 Aug 2025 14:53:28 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 135945
IP address blocks: 103.116.100.0/24 maxlen: 24
103.116.101.0/24 maxlen: 24
103.116.102.0/24 maxlen: 24
103.116.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24048 (0x5df0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:53:28 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a60c24-9383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d9:d2:aa:68:d8:ee:8e:ff:00:49:f0:f4:1b:
ea:6e:0a:08:74:0f:09:ee:d9:b1:c1:f0:22:96:cf:
59:a5:6b:4b:2f:d0:81:0b:25:56:3c:86:aa:d4:54:
07:24:16:47:e6:5e:fa:01:12:e1:e8:cb:53:82:13:
6b:8a:0c:8b:b0:06:0c:e2:98:b3:a3:09:00:50:f7:
c3:7d:c5:4f:df:17:da:59:ea:a2:a1:0f:a3:6c:1b:
72:72:7f:c3:ac:92:e1:0d:78:e1:bd:1d:ec:76:9e:
d9:12:6b:be:bc:b1:ad:61:9c:80:42:1e:76:81:64:
32:7f:0b:a7:8e:49:d6:d9:5e:34:4b:51:06:4f:82:
a4:71:bd:c1:67:ac:4e:91:2a:c0:84:9c:21:98:a8:
26:9e:2f:78:b7:7b:e9:a0:8a:47:47:92:72:91:6e:
f0:11:96:a4:62:5d:fe:eb:4a:17:e8:52:24:91:10:
db:c9:72:f2:f4:75:e8:76:b9:44:07:fb:44:1a:69:
90:ae:f2:b9:dd:75:44:33:5d:be:a4:4a:62:ba:5e:
cf:08:fe:c9:2c:76:03:a8:f4:6c:b3:46:87:39:cc:
a7:62:a9:a7:13:57:0f:10:f7:16:18:7d:42:e4:04:
b3:5b:54:96:96:24:4b:4d:32:1d:c5:3f:20:16:33:
63:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B9:85:B5:1E:1C:45:B0:E0:28:14:79:C6:36:3D:60:E1:C7:92:28
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/23237036280611ED8BEBC536C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.116.100.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:9f:93:5b:20:2e:06:c2:85:5b:c3:c7:2f:f9:24:cd:b8:f3:
5e:dd:ae:92:40:e5:9d:2c:a3:cd:7c:9d:cb:43:77:fc:17:4e:
86:c2:b7:91:ac:39:83:15:73:ac:6e:16:b5:14:7e:b3:f1:75:
7f:a8:d5:f7:03:f1:c3:2f:82:d3:95:1d:fd:1c:85:5a:5c:ad:
1f:eb:f5:bd:cb:47:03:e4:6a:4a:e9:35:95:b3:a0:01:94:35:
a1:b1:7e:02:89:3a:17:2e:fb:bb:c0:dd:97:1f:74:aa:22:42:
df:04:38:5b:ac:03:8f:c4:69:c3:b2:c1:e8:b3:aa:37:da:8e:
79:ce:83:94:cb:92:e4:e5:39:8e:c0:01:50:82:82:58:d0:35:
e9:60:fc:6a:48:0d:17:a2:4e:c7:63:e1:cc:28:1d:95:9c:77:
1f:72:ad:68:6d:24:7c:b8:d8:9e:4f:11:60:63:c4:30:47:b0:
ee:22:c5:0f:23:2e:83:8b:c5:3b:70:e5:4d:a6:7f:e8:ee:50:
bf:5b:0a:2a:74:30:ea:a1:94:4c:7e:d5:7a:5e:af:5f:6f:8c:
26:42:48:3f:16:48:cd:34:32:cc:94:9d:c6:ca:d4:33:db:05:
78:83:46:ba:53:61:0d:3c:63:2c:8b:91:ce:f6:9a:5c:69:5d:
24:81:b7:3b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICXfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwODI4MTQ1MzI4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MGMyNC05MzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwdnSqmjY7o7/AEnw9BvqbgoIdA8J7tmxwfAils9ZpWtLL9CBCyVWPIaq1FQH
JBZH5l76ARLh6MtTghNrigyLsAYM4pizowkAUPfDfcVP3xfaWeqioQ+jbBtycn/D
rJLhDXjhvR3sdp7ZEmu+vLGtYZyAQh52gWQyfwunjknW2V40S1EGT4Kkcb3BZ6xO
kSrAhJwhmKgmni94t3vpoIpHR5JykW7wEZakYl3+60oX6FIkkRDbyXLy9HXodrlE
B/tEGmmQrvK53XVEM12+pEpiul7PCP7JLHYDqPRss0aHOcynYqmnE1cPEPcWGH1C
5ASzW1SWliRLTTIdxT8gFjNjAQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFE65hbUe
HEWw4CgUecY2PWDhx5IoMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMjMyMzcwMzYy
ODA2MTFFRDhCRUJDNTM2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ3RkMA0GCSqGSIb3DQEBCwUAA4IBAQBKn5NbIC4GwoVbw8cv+STN
uPNe3a6SQOWdLKPNfJ3LQ3f8F06GwreRrDmDFXOsbha1FH6z8XV/qNX3A/HDL4LT
lR39HIVaXK0f6/W9y0cD5GpK6TWVs6ABlDWhsX4CiToXLvu7wN2XH3SqIkLfBDhb
rAOPxGnDssHos6o32o55zoOUy5Lk5TmOwAFQgoJY0DXpYPxqSA0Xok7HY+HMKB2V
nHcfcq1obSR8uNieTxFgY8QwR7DuIsUPIy6Di8U7cOVNpn/o7lC/WwoqdDDqoZRM
ftV6Xq9fb4wmQkg/FkjNNDLMlJ3GytQz2wV4g0a6U2ENPGMsi5HO9ppcaV0kgbc7
-----END CERTIFICATE-----
Generated at Sat Mar 7 22:47:36 2026 by rpki-client