
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42823846037411EEB6D5D751C4F9AE02.roa
File: 42823846037411EEB6D5D751C4F9AE02.roa (raw, json)
Hash identifier: q1Bn8WUxq4a+2QAKNTZo0RllanLGFsjVSRncqUjv1MU=
Subject key identifier: E3:4E:4D:86:84:96:67:77:C1:1C:7C:51:07:77:B8:11:F7:70:23:1D
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6E2B
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42823846037411EEB6D5D751C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:27:45 +0000
ROA not before: Fri 02 Oct 2026 15:27:45 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 149105
IP address blocks: 103.145.2.0/23 maxlen: 24
103.188.80.0/23 maxlen: 24
220.158.134.0/23 maxlen: 24
2400:8160::/48 maxlen: 48
2405:73c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 10:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28203 (0x6e2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:27:45 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcd71-20ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:88:e3:2f:4a:ef:26:bf:99:a1:91:3e:5c:95:
26:50:99:8d:f2:c1:48:d7:08:d2:84:4e:51:1b:97:
6e:b5:d9:e4:b5:4d:d8:bd:92:36:98:1d:92:93:d1:
da:d3:20:21:5d:a9:3b:81:18:4b:40:9e:98:bf:d7:
e4:a4:e6:cb:4c:13:50:f7:ed:8e:7f:3a:da:b2:f6:
f0:bf:b7:a6:42:47:64:1a:2c:17:03:df:1f:bb:b7:
f5:a4:ad:54:62:06:d6:d0:29:b8:16:6b:96:e0:00:
c7:f1:b2:8a:e7:96:97:a8:42:bc:55:1c:ac:60:ee:
e2:a7:b1:05:70:8e:d4:87:38:bc:97:00:0d:ac:c5:
95:05:36:a5:02:87:76:62:5d:7b:1b:76:b7:75:9d:
ee:5d:85:ce:03:ba:66:f1:c9:a8:62:dd:ac:4d:ec:
f9:da:56:2c:d5:81:49:10:5c:7f:cc:98:28:fb:db:
3b:ce:05:9a:16:54:17:9d:e2:d1:bb:b3:74:4a:ad:
3d:27:28:78:cc:3f:54:d6:60:2b:e3:5a:5d:95:b5:
98:b0:74:95:ed:12:e0:9e:83:27:58:01:9a:ee:12:
01:0f:db:a9:0f:42:e9:95:9f:ad:7f:27:15:94:33:
57:db:ed:b4:d5:53:0f:eb:4d:54:f0:3b:5c:db:05:
48:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4E:4D:86:84:96:67:77:C1:1C:7C:51:07:77:B8:11:F7:70:23:1D
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42823846037411EEB6D5D751C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.145.2.0/23
103.188.80.0/23
220.158.134.0/23
IPv6:
2400:8160::/48
2405:73c0::/48
Signature Algorithm: sha256WithRSAEncryption
a2:d0:71:ec:58:60:af:34:8f:59:ed:2f:53:19:bd:15:87:61:
49:20:a5:5e:8b:49:54:78:6f:71:a2:ba:39:e4:9d:9f:c7:b8:
c5:4d:b7:bf:bf:b2:e2:25:ee:cf:4d:01:2b:37:56:a3:47:a2:
f9:b2:22:69:ea:0c:54:a0:c8:d1:d4:19:e4:8c:ce:c1:ba:a9:
2f:65:8e:d9:f0:18:7e:e3:78:7b:ba:0c:c0:91:fb:28:cd:50:
b3:02:74:ab:29:6e:8d:b5:79:a1:d9:08:ed:87:a6:00:b9:7a:
01:49:ed:a2:bb:88:16:87:a8:ec:4f:9d:9e:d9:54:d3:f0:bc:
a3:1e:d6:8f:9a:c2:d5:82:41:60:3c:f8:fb:e7:20:0c:4d:17:
4a:0a:84:ce:38:ff:b3:d4:be:3a:9a:01:7a:9d:e7:39:b2:26:
68:33:c9:de:4d:ce:39:ec:39:a2:dc:02:6a:7a:c4:aa:4f:dc:
66:f6:8f:2e:11:06:bc:eb:7c:da:14:34:5d:80:58:94:4d:58:
2c:36:9e:f8:6e:ae:d5:2f:81:87:80:7e:2a:c4:6f:aa:7c:eb:
2f:4e:eb:b3:19:82:3d:f0:21:f3:72:9d:0d:a3:71:0c:76:32:
b9:7f:2a:a8:cc:66:3d:12:b5:d4:de:08:c5:7f:16:5e:19:a1:
af:b3:c1:78
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgICbiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYxMDAyMTUyNzQ1WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2Q3MS0yMGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArIjjL0rvJr+ZoZE+XJUmUJmN8sFI1wjShE5RG5dutdnktU3YvZI2mB2Sk9Ha
0yAhXak7gRhLQJ6Yv9fkpObLTBNQ9+2Ofzrasvbwv7emQkdkGiwXA98fu7f1pK1U
YgbW0Cm4FmuW4ADH8bKK55aXqEK8VRysYO7ip7EFcI7Uhzi8lwANrMWVBTalAod2
Yl17G3a3dZ3uXYXOA7pm8cmoYt2sTez52lYs1YFJEFx/zJgo+9s7zgWaFlQXneLR
u7N0Sq09Jyh4zD9U1mAr41pdlbWYsHSV7RLgnoMnWAGa7hIBD9upD0LplZ+tfycV
lDNX2+201VMP601U8Dtc2wVI5wIDAQABo4IChjCCAoIwHQYDVR0OBBYEFONOTYaE
lmd3wRx8UQd3uBH3cCMdMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNDI4MjM4NDYw
Mzc0MTFFRUI2RDVENzUxQzRGOUFFMDIucm9hMEUGCCsGAQUFBwEHAQH/BDYwNDAY
BAIAATASAwQBZ5ECAwQBZ7xQAwQB3J6GMBgEAgACMBIDBwAkAIFgAAADBwAkBXPA
AAAwDQYJKoZIhvcNAQELBQADggEBAKLQcexYYK80j1ntL1MZvRWHYUkgpV6LSVR4
b3GiujnknZ/HuMVNt7+/suIl7s9NASs3VqNHovmyImnqDFSgyNHUGeSMzsG6qS9l
jtnwGH7jeHu6DMCR+yjNULMCdKspbo21eaHZCO2HpgC5egFJ7aK7iBaHqOxPnZ7Z
VNPwvKMe1o+awtWCQWA8+PvnIAxNF0oKhM44/7PUvjqaAXqd5zmyJmgzyd5Nzjns
OaLcAmp6xKpP3Gb2jy4RBrzrfNoUNF2AWJRNWCw2nvhurtUvgYeAfirEb6p86y9O
67MZgj3wIfNynQ2jcQx2Mrl/KqjMZj0StdTeCMV/Fl4Zoa+zwXg=
-----END CERTIFICATE-----
Generated at Sat Oct 24 12:27:09 2026 by rpki-client