
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/655A393E89DB11EEA4226580C4F9AE02.roa
File: 655A393E89DB11EEA4226580C4F9AE02.roa (raw, json)
Hash identifier: IriFdqWDMPJy2bRiHEzcFEaK7QW31MMdYvzbOxoOR2c=
Subject key identifier: A2:BB:42:48:DA:E8:57:CF:DE:FB:65:46:E2:A5:60:04:67:69:19:07
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 5DEC
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/655A393E89DB11EEA4226580C4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:16:00 +0000
ROA not before: Thu 28 Aug 2025 14:53:24 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 135938
IP address blocks: 103.111.244.0/22 maxlen: 24
2001:df4:9500::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24044 (0x5dec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:53:24 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a60c20-40ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6f:4f:d0:7f:84:7a:95:d6:e4:e8:52:fb:5f:
48:27:c2:33:15:ae:5e:e6:66:aa:ad:6f:0b:d7:fe:
a1:d4:5a:37:f9:27:6d:87:69:44:7e:63:d4:72:d7:
77:47:fd:5c:f7:08:41:08:34:e3:43:8e:58:4f:65:
33:2c:c6:0e:cb:f1:49:9b:b3:e3:78:f5:99:d1:5c:
f0:38:70:3e:fb:e5:42:f2:4b:ad:b4:3a:36:40:85:
73:5e:f2:a9:67:08:42:3c:60:52:8d:93:73:f1:65:
50:85:98:de:bd:76:c6:14:10:bb:12:b1:6d:94:70:
34:a1:0d:c4:1e:98:07:f8:70:5d:e4:12:55:30:0d:
91:9a:50:e8:c5:8b:ed:15:ab:00:ca:e0:66:6e:09:
2a:aa:e6:45:f0:fa:92:c6:73:b8:72:a4:4c:1a:14:
65:ee:09:79:e9:df:14:7c:3a:dc:5f:e2:04:01:a2:
d9:ed:d0:45:9c:7f:e0:ae:3a:e1:d6:45:18:40:0a:
7e:8b:bc:92:1f:6c:0d:73:7d:23:05:fc:b0:7f:6c:
e3:dc:c9:82:3e:96:06:6b:d4:01:11:7e:46:95:87:
01:53:f9:24:72:e2:24:33:4e:fc:7c:f8:57:16:b7:
06:dc:33:55:21:96:d4:05:03:59:b2:07:78:fa:ad:
bb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BB:42:48:DA:E8:57:CF:DE:FB:65:46:E2:A5:60:04:67:69:19:07
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/655A393E89DB11EEA4226580C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.111.244.0/22
IPv6:
2001:df4:9500::/48
Signature Algorithm: sha256WithRSAEncryption
13:f7:3e:e2:2f:59:1c:ae:cb:8a:9d:4c:4e:53:50:67:d2:27:
cf:65:77:d2:8c:b5:b0:c9:92:28:79:ea:54:a2:d2:fe:0b:6d:
40:88:dd:12:82:8e:56:73:be:3d:47:3b:60:52:86:0c:30:3b:
54:3c:d4:27:43:0b:ed:f8:58:f2:aa:a9:ab:da:77:34:b9:97:
a4:4b:de:a6:17:7e:39:6b:be:af:1b:91:a4:b4:9c:3d:25:0a:
1a:17:1e:b1:5b:93:43:1e:0d:f1:a0:b1:9e:fd:ef:5e:14:7e:
dd:7d:fa:ee:07:15:bd:e8:b3:bf:5d:8e:70:2f:cc:62:b3:33:
35:3e:52:97:8c:40:e0:91:4d:b6:0c:a6:36:27:85:23:88:69:
cb:75:63:d1:d9:00:4a:6b:da:79:8c:24:de:24:c9:4c:04:9c:
06:15:b5:52:74:cf:76:b9:ae:91:24:d1:50:2e:fa:df:99:e4:
67:81:f6:6e:6f:f8:b8:73:57:38:f1:a4:48:ce:b6:04:8a:66:
f1:87:fe:56:58:f5:d6:7a:92:6c:58:51:c5:26:be:10:49:db:
d7:ab:20:81:e6:a3:25:e4:bc:50:03:9e:7d:f7:f5:8f:9b:73:
db:fb:c6:43:f8:66:4f:ec:8b:1d:50:f8:e3:8d:97:7b:dd:3b:
a8:81:3c:b0
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICXewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwODI4MTQ1MzI0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MGMyMC00MGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtm9P0H+EepXW5OhS+19IJ8IzFa5e5maqrW8L1/6h1Fo3+Sdth2lEfmPUctd3
R/1c9whBCDTjQ45YT2UzLMYOy/FJm7PjePWZ0VzwOHA+++VC8kuttDo2QIVzXvKp
ZwhCPGBSjZNz8WVQhZjevXbGFBC7ErFtlHA0oQ3EHpgH+HBd5BJVMA2RmlDoxYvt
FasAyuBmbgkqquZF8PqSxnO4cqRMGhRl7gl56d8UfDrcX+IEAaLZ7dBFnH/grjrh
1kUYQAp+i7ySH2wNc30jBfywf2zj3MmCPpYGa9QBEX5GlYcBU/kkcuIkM078fPhX
FrcG3DNVIZbUBQNZsgd4+q27SQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFKK7Qkja
6FfP3vtlRuKlYARnaRkHMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNjU1QTM5M0U4
OURCMTFFRUE0MjI2NTgwQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQCZ2/0MA8EAgACMAkDBwAgAQ30lQAwDQYJKoZIhvcNAQELBQADggEB
ABP3PuIvWRyuy4qdTE5TUGfSJ89ld9KMtbDJkih56lSi0v4LbUCI3RKCjlZzvj1H
O2BShgwwO1Q81CdDC+34WPKqqavadzS5l6RL3qYXfjlrvq8bkaS0nD0lChoXHrFb
k0MeDfGgsZ79714Uft19+u4HFb3os79djnAvzGKzMzU+UpeMQOCRTbYMpjYnhSOI
act1Y9HZAEpr2nmMJN4kyUwEnAYVtVJ0z3a5rpEk0VAu+t+Z5GeB9m5v+LhzVzjx
pEjOtgSKZvGH/lZY9dZ6kmxYUcUmvhBJ29erIIHmoyXkvFADnn339Y+bc9v7xkP4
Zk/six1Q+OONl3vdO6iBPLA=
-----END CERTIFICATE-----
Generated at Sat Mar 7 22:44:08 2026 by rpki-client