
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/456D4CD41E0111ED858FE624C4F9AE02.roa
File: 456D4CD41E0111ED858FE624C4F9AE02.roa (raw, json)
Hash identifier: VHIH5b31Y721cRlcKfa5ppFOnblw16oK4BFMTYtIOJM=
Subject key identifier: 90:EC:5B:6B:CC:58:6D:54:0C:2F:2A:D4:8E:D8:67:CD:3B:CB:4A:DD
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6DB7
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/456D4CD41E0111ED858FE624C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:24:11 +0000
ROA not before: Fri 02 Oct 2026 15:24:10 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 135916
IP address blocks: 103.94.16.0/24 maxlen: 24
103.94.17.0/24 maxlen: 24
103.94.18.0/24 maxlen: 24
103.94.19.0/24 maxlen: 24
202.47.87.0/24 maxlen: 24
202.56.57.0/24 maxlen: 24
202.94.82.0/24 maxlen: 24
203.8.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28087 (0x6db7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:24:10 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcc9a-a27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:92:4e:be:87:b0:76:c8:18:a0:bc:fc:5e:85:
15:5b:0a:06:7d:a4:b5:16:14:3e:7b:54:03:46:94:
79:b1:60:63:19:a0:dd:7b:ee:14:e5:4f:8b:a3:7f:
95:94:75:c4:52:f7:15:67:89:31:f4:46:2f:c2:90:
38:88:da:73:6b:79:57:27:85:ef:f9:b2:70:a0:3b:
a8:28:78:7f:56:57:a7:ad:ef:e3:73:f5:f4:e5:c1:
d5:fe:76:28:10:97:32:e9:34:e0:be:48:6d:29:21:
08:29:55:41:3e:1d:67:c0:87:70:3f:eb:65:f6:06:
2c:db:e4:b1:53:9a:b0:b3:74:18:5f:23:89:66:30:
79:79:2a:6c:45:56:44:e7:c3:fc:c0:66:41:1f:0d:
c2:55:43:84:c3:3e:3d:ac:11:03:fd:c5:7f:99:5a:
08:b2:e0:03:f1:81:ff:9f:74:df:67:40:c8:9b:18:
2c:91:f4:1a:d7:84:c5:43:8b:ca:47:4e:db:ae:09:
c7:0a:b2:37:b6:e8:0c:36:95:02:f0:f9:e6:40:0b:
38:40:83:c8:13:43:fe:e2:e1:48:f7:02:e0:43:b6:
9e:09:7a:bf:21:ba:f4:06:f4:b4:36:52:f2:8f:c5:
de:18:cf:11:a1:35:ea:21:93:75:dd:05:67:04:76:
02:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EC:5B:6B:CC:58:6D:54:0C:2F:2A:D4:8E:D8:67:CD:3B:CB:4A:DD
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/456D4CD41E0111ED858FE624C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.94.16.0/22
202.47.87.0/24
202.56.57.0/24
202.94.82.0/24
203.8.172.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:4c:d2:f2:10:99:80:3d:42:aa:86:0c:04:bb:01:b9:f8:4b:
6c:e1:b5:16:15:20:e6:82:68:e4:97:17:ca:31:cf:a9:59:8a:
1d:0e:20:72:a9:38:76:d4:54:c8:51:9d:72:4d:e6:85:20:9c:
a4:7b:a6:51:5b:b9:e6:fd:68:73:e0:f8:55:3d:5e:df:53:7a:
29:52:4f:64:e1:61:2a:b1:e5:46:11:e6:a7:5f:a0:6d:87:5a:
c1:68:b0:87:69:32:c4:30:b2:ba:9e:d6:c5:97:af:c6:ff:a0:
69:ca:a0:8a:cd:a2:58:5c:10:ce:f0:3c:3a:62:95:91:74:17:
d1:02:61:fd:21:14:4c:25:c1:a3:4e:d7:cb:98:e1:7c:01:ff:
5e:29:c1:a4:d4:07:a8:4f:68:e9:32:d7:68:05:08:da:f8:cc:
49:96:10:be:b3:6e:2c:1d:d5:47:81:bf:57:4b:43:ef:95:42:
fc:eb:a0:cf:bb:32:ce:d9:06:7d:32:0c:11:42:d6:9a:05:4b:
31:e2:3c:d2:85:1e:c9:85:7f:cb:ad:c8:99:1f:ea:f5:12:f3:
15:b6:44:10:37:26:e9:23:25:23:27:a0:41:38:f0:6c:85:35:
b8:ff:74:c2:c2:93:2e:96:cc:df:ea:ad:3b:a6:dd:1b:f4:c0:
cf:71:5b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:01:06 2026 by rpki-client