
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/43A61E9E4D5311EEAC075D5AC4F9AE02.roa
File: 43A61E9E4D5311EEAC075D5AC4F9AE02.roa (raw, json)
Hash identifier: cWniwu5W8qZSg2yFphmNR7a6xN12X/MO8vEJ0nz8HVw=
Subject key identifier: AD:A5:55:86:49:BC:60:12:23:98:C8:B7:DF:EF:DB:0F:D8:A2:B7:6F
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 5E78
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/43A61E9E4D5311EEAC075D5AC4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:18:22 +0000
ROA not before: Thu 28 Aug 2025 14:55:28 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 150872
IP address blocks: 103.249.158.0/24 maxlen: 24
2401:2220::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24184 (0x5e78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:55:28 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a60cae-2ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b3:74:20:c3:30:9f:c6:ed:75:40:ff:a1:24:
37:12:fd:d6:52:f8:8d:a1:10:6f:df:c0:e1:e9:03:
45:ea:65:ff:83:e8:e4:90:9c:92:81:4e:64:c8:c4:
64:03:47:b6:95:0f:b1:a6:a7:86:8b:79:d3:cd:3e:
5f:09:a5:ce:2c:42:7a:3e:c5:02:a2:2a:c4:4a:e4:
8d:a4:b8:7d:3a:86:fa:94:e9:df:96:3d:e1:2d:20:
61:dd:28:50:c8:58:ef:43:cc:ae:48:d8:b7:a7:4a:
b6:d2:d7:ab:3d:0b:1c:7b:66:58:3b:c1:c6:c1:7b:
3b:09:b5:57:7b:55:06:16:a0:db:98:b4:88:f2:cb:
e3:33:fd:df:c6:2e:be:27:bb:81:8e:ab:cb:6a:9f:
1b:6e:6a:dc:32:2d:a1:8e:77:75:9d:af:c1:73:98:
12:a8:c4:82:c5:fc:10:e8:86:3a:cc:6f:f4:b3:2e:
5b:00:44:a9:92:ff:95:a8:90:6c:cd:d6:2b:ad:3b:
59:b6:4b:7e:c8:34:b0:8a:69:69:af:8b:39:66:39:
ae:2e:74:a7:75:86:57:32:9e:93:ee:c6:90:f8:0f:
e0:ca:0b:7e:2d:e4:78:f3:1b:a2:49:2f:cc:0e:11:
4a:9e:4b:8e:02:88:1f:38:16:df:f2:3b:27:23:ab:
a2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A5:55:86:49:BC:60:12:23:98:C8:B7:DF:EF:DB:0F:D8:A2:B7:6F
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/43A61E9E4D5311EEAC075D5AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.249.158.0/24
IPv6:
2401:2220::/48
Signature Algorithm: sha256WithRSAEncryption
9b:c2:80:43:97:be:77:3b:58:69:61:4b:ff:39:67:71:17:d9:
ef:34:95:38:76:63:21:81:d0:ad:a7:81:86:b0:f1:8e:54:bc:
20:de:91:20:eb:ff:92:68:04:4f:8b:05:bd:db:71:d9:1f:53:
d9:a5:01:45:5a:c4:5b:bf:4d:40:60:6a:ff:e3:4f:44:f2:b2:
95:95:8c:bc:fd:e8:28:9a:9e:17:e8:ff:a4:b2:0e:30:3a:60:
4f:7f:3a:bb:1e:34:44:40:b3:0a:4a:d8:47:33:fc:b3:fd:e6:
5b:eb:71:f4:77:61:e2:35:32:e5:87:6d:b7:fd:39:91:57:8d:
85:d3:34:29:46:6c:bc:4c:d8:46:59:c8:87:96:d8:08:de:5d:
0a:87:ab:88:84:d7:92:0e:ac:e7:55:a6:a6:bb:b5:87:e3:52:
88:32:bd:a2:ef:2b:f0:f2:4d:8c:75:c8:44:32:ea:5c:fc:e5:
45:35:70:be:57:a2:d5:ac:1b:4e:df:bd:7c:94:72:ff:7a:76:
01:20:d8:db:a7:ad:2f:ff:c3:2f:bb:0f:c4:f5:4f:00:6a:c5:
ae:70:fc:47:81:7c:c9:35:ea:29:57:53:1b:b7:ac:6f:f9:51:
b8:d9:00:b0:32:73:1f:5c:0d:8c:9e:10:b9:41:8f:dd:8f:50:
28:e5:95:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:47:44 2026 by rpki-client