
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3D2D8EBE7F6D11F082A05934C4F9AE02.roa
File: 3D2D8EBE7F6D11F082A05934C4F9AE02.roa (raw, json)
Hash identifier: 2qAZ84UUcJjh4RIfpjLfrw4TKwNT2QzFxXBlpCl14gM=
Subject key identifier: 1D:03:52:AA:C0:7C:65:46:C2:97:F5:8C:0B:98:94:40:09:B9:BB:CE
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6EB9
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3D2D8EBE7F6D11F082A05934C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:32:53 +0000
ROA not before: Fri 02 Oct 2026 15:32:53 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 153413
IP address blocks: 103.159.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28345 (0x6eb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:32:53 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcea5-ced5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ed:3f:30:17:cc:ef:57:b6:96:01:d9:12:60:
57:ed:be:89:c3:88:7a:80:f4:72:64:af:51:6c:90:
30:c5:d1:16:13:1a:2c:7a:be:c7:df:ff:54:63:73:
65:d5:30:b4:d7:9f:62:82:97:55:5a:33:af:62:82:
a9:c8:89:5e:5d:71:10:e8:50:c7:1c:9d:27:5b:18:
12:d1:6f:60:5b:ac:b0:70:cf:42:5c:03:72:ef:35:
95:85:d7:90:8f:de:86:49:e8:ea:0e:be:a2:38:c9:
7f:fe:00:1d:bb:f8:44:49:c4:d9:14:ef:7f:14:2b:
9a:74:49:e4:a6:b8:5f:35:0c:c1:9a:18:13:5d:98:
70:cc:37:45:19:b0:0a:d6:5b:13:9a:8e:c0:14:8b:
0c:49:ee:da:7a:35:b3:81:7c:e1:ef:df:4d:8e:cc:
9e:10:ea:f0:d5:9b:19:ce:af:44:46:54:7d:d9:3a:
9b:18:b5:fb:0c:03:56:c6:3e:28:7b:a2:c0:6a:47:
1c:2e:ef:ee:40:09:ac:0c:f4:22:45:6e:a4:29:22:
05:22:9e:11:b2:fc:96:6c:6e:09:ea:90:0c:57:e3:
fd:2b:d5:76:f8:42:5f:ce:26:7b:f8:bc:c0:32:48:
ee:f7:02:6d:ee:ed:84:30:b8:e5:b1:a7:fd:af:b2:
51:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:03:52:AA:C0:7C:65:46:C2:97:F5:8C:0B:98:94:40:09:B9:BB:CE
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3D2D8EBE7F6D11F082A05934C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.159.54.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:4a:e5:35:2d:00:f8:36:df:4c:d3:6b:28:d0:c2:36:19:4f:
94:fa:d2:3f:96:fe:60:a5:fa:64:cd:90:94:0e:e3:7d:be:15:
9e:80:4e:18:e8:b9:e4:e9:ee:1b:9c:fe:75:7d:95:b4:f1:17:
aa:a6:70:09:e5:d1:17:ed:ce:a4:f8:bd:9a:c9:d1:3a:ed:5a:
71:30:cd:9e:24:36:5b:7b:c9:85:52:2f:2d:6a:24:88:be:54:
83:35:10:f7:32:ba:17:70:84:5f:b8:13:e6:f8:50:42:d8:2d:
b2:94:18:1d:d0:cd:23:31:1d:c6:1d:1f:32:cb:25:b5:7a:84:
00:a6:ec:fb:59:2b:8c:c4:6e:c8:2c:60:e6:63:ae:7c:50:58:
f7:2c:f8:a8:ad:03:fa:03:8a:3b:f0:b6:57:3a:ea:2b:24:53:
bb:9a:c1:25:22:22:83:77:96:dc:8b:c1:b5:78:8f:c7:40:99:
01:7e:00:42:32:f4:4b:ba:61:c6:6b:0f:ad:c0:e9:b5:2e:3b:
30:32:05:ed:70:4a:0d:55:09:97:cb:c2:65:e6:9b:23:cb:0e:
b4:45:9c:25:a7:3a:4a:47:18:d2:95:a5:bc:e7:80:d6:5a:c7:
29:df:98:70:58:75:96:cc:33:9a:88:a7:30:9a:4a:2f:94:fb:
ad:7e:b1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:43:54 2026 by rpki-client