
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5A972DF423D711EF8BB38870C4F9AE02.roa
File: 5A972DF423D711EF8BB38870C4F9AE02.roa (raw, json)
Hash identifier: hj+TWh0QDpf/FFpufLftfKXkCpeBpx2/LyZmj8UIygE=
Subject key identifier: AB:26:90:81:14:7B:4B:55:D5:F3:7C:42:C2:7D:9A:78:F4:19:D7:5C
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6E33
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5A972DF423D711EF8BB38870C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:28:02 +0000
ROA not before: Fri 02 Oct 2026 15:28:01 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 149120
IP address blocks: 103.73.86.0/24 maxlen: 24
103.73.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28211 (0x6e33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:28:01 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcd81-4b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:ca:b8:97:02:9f:64:5a:f0:c8:4f:a4:0b:
d2:6a:96:4e:1f:16:28:00:bc:fc:44:83:99:89:91:
92:af:04:57:c3:e8:b6:7c:e6:78:60:b6:0d:e4:89:
1a:21:a4:69:2e:b1:ed:22:d7:0f:a6:b2:07:d9:b4:
27:af:1d:87:84:31:93:04:4a:81:e6:01:7e:a5:1d:
fb:bb:5b:86:0d:51:c8:6f:d6:fa:6b:d7:b2:65:7f:
54:6b:ac:a7:93:92:ff:f4:06:e8:ba:7a:9e:6a:3a:
65:eb:43:22:08:bb:04:a6:71:8a:19:3d:c7:3d:b9:
34:a1:98:a6:95:54:54:eb:7c:7f:ae:d6:e9:f4:1b:
da:df:1e:ab:cf:64:66:59:d4:e5:88:06:23:cb:d3:
e6:e6:e0:28:0c:e8:ca:c7:c9:54:4f:71:19:50:6b:
3c:ca:8f:a1:9c:b2:fc:f6:ed:b4:af:83:9c:8b:69:
b6:56:e6:d8:44:be:e6:34:06:1d:e3:e3:e6:c5:ef:
9a:96:75:67:f0:38:12:20:f8:cf:ed:4e:70:c6:fe:
fd:be:cf:f9:b6:a4:ab:79:44:b0:14:31:a0:87:88:
0f:06:e7:d4:c4:10:5a:7a:76:0b:67:f3:ad:f5:97:
19:2e:d7:0b:4c:d7:4f:b8:d6:4f:14:83:a8:d1:29:
30:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:26:90:81:14:7B:4B:55:D5:F3:7C:42:C2:7D:9A:78:F4:19:D7:5C
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5A972DF423D711EF8BB38870C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.73.86.0/23
Signature Algorithm: sha256WithRSAEncryption
20:4a:fd:d6:83:6f:85:73:a0:1e:bf:3e:58:d0:e5:c2:f6:61:
70:32:4c:5c:e5:3e:33:bd:0d:55:0d:4f:c5:fe:8c:a1:e4:31:
45:29:73:fd:1f:76:61:d7:5e:2b:0a:3e:15:67:52:1d:7b:61:
75:fb:8e:c0:71:18:c8:92:42:06:7f:7a:15:c8:6d:09:6f:3e:
93:a4:5a:98:97:9b:36:fe:a3:64:fc:1d:f1:ae:4e:0d:01:53:
65:b2:3e:83:c9:d4:9c:af:41:96:37:02:5d:d4:a4:64:e7:38:
19:b8:2e:01:71:b0:0d:c4:2e:10:06:04:49:e4:5a:88:73:81:
64:df:e2:04:91:32:a2:8c:d5:26:3d:aa:8e:15:76:c9:0d:18:
68:ec:7e:7c:8d:41:96:8f:1c:0f:51:df:60:08:22:a0:39:57:
20:8b:2c:48:eb:06:31:57:da:86:73:6f:2a:38:02:9b:c5:02:
a0:5c:f3:02:9d:c8:09:c7:62:f5:e9:86:79:7f:f2:de:8e:94:
1c:f9:de:15:d0:69:f6:a1:c1:90:c0:21:55:61:b5:23:f4:39:
f3:f7:d9:21:f3:da:6e:00:52:97:e0:87:79:71:91:ff:10:87:
6a:eb:59:9d:97:f1:3a:55:4c:5d:e8:b5:87:5e:65:c8:88:26:
77:66:06:d2
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICbjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYxMDAyMTUyODAxWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2Q4MS00YjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvrfKuJcCn2Ra8MhPpAvSapZOHxYoALz8RIOZiZGSrwRXw+i2fOZ4YLYN5Ika
IaRpLrHtItcPprIH2bQnrx2HhDGTBEqB5gF+pR37u1uGDVHIb9b6a9eyZX9Ua6yn
k5L/9Abounqeajpl60MiCLsEpnGKGT3HPbk0oZimlVRU63x/rtbp9Bva3x6rz2Rm
WdTliAYjy9Pm5uAoDOjKx8lUT3EZUGs8yo+hnLL89u20r4Oci2m2VubYRL7mNAYd
4+Pmxe+alnVn8DgSIPjP7U5wxv79vs/5tqSreUSwFDGgh4gPBufUxBBaenYLZ/Ot
9ZcZLtcLTNdPuNZPFIOo0SkwIQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKsmkIEU
e0tV1fN8QsJ9mnj0GddcMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNUE5NzJERjQy
M0Q3MTFFRjhCQjM4ODcwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ0lWMA0GCSqGSIb3DQEBCwUAA4IBAQAgSv3Wg2+Fc6Aevz5Y0OXC
9mFwMkxc5T4zvQ1VDU/F/oyh5DFFKXP9H3Zh114rCj4VZ1Ide2F1+47AcRjIkkIG
f3oVyG0Jbz6TpFqYl5s2/qNk/B3xrk4NAVNlsj6DydScr0GWNwJd1KRk5zgZuC4B
cbANxC4QBgRJ5FqIc4Fk3+IEkTKijNUmPaqOFXbJDRho7H58jUGWjxwPUd9gCCKg
OVcgiyxI6wYxV9qGc28qOAKbxQKgXPMCncgJx2L16YZ5f/LejpQc+d4V0Gn2ocGQ
wCFVYbUj9Dnz99kh89puAFKX4Id5cZH/EIdq61mdl/E6VUxd6LWHXmXIiCZ3ZgbS
-----END CERTIFICATE-----
Generated at Sun Oct 25 20:08:31 2026 by rpki-client