
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8F3FB8286A2F11F1898CC5537847A888.roa
File: 8F3FB8286A2F11F1898CC5537847A888.roa (raw, json)
Hash identifier: 2brcgd+L1sjXvGuzzp2Groll/MAhGs8bYtoHE2jLPcE=
Subject key identifier: 3D:43:C7:58:A4:F7:ED:39:77:1F:95:42:39:3B:1D:0A:34:C0:10:85
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6CB4
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8F3FB8286A2F11F1898CC5537847A888.roa
Signing time: Wed 17 Jun 2026 09:33:12 +0000
ROA not before: Wed 17 Jun 2026 09:33:12 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 154706
IP address blocks: 103.125.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 04:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27828 (0x6cb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Jun 17 09:33:12 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a3269d8-3791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5c:be:2a:43:d3:a1:c3:98:d8:d2:ef:d3:27:
7f:84:04:cb:f8:28:73:b3:75:60:ee:f9:c5:51:8e:
d1:75:b0:22:15:27:96:50:17:49:12:ef:ed:88:0a:
67:bf:d3:4a:ac:8c:49:c9:10:eb:98:99:bc:b9:f7:
aa:9f:79:8f:62:9e:fd:9f:e6:bf:a6:fe:3a:66:47:
4d:02:bf:5c:80:a9:35:81:7c:18:28:bb:78:8a:9a:
c2:66:f5:47:00:ec:34:54:79:fa:e4:b1:7a:06:a8:
af:6f:c9:2e:a1:5c:00:29:6f:f4:bc:72:33:56:57:
34:3f:1c:65:c5:3d:05:a9:94:8f:df:8f:fd:51:17:
13:3b:cb:7c:a2:cb:e8:e5:15:0a:51:f8:f1:d7:d0:
01:24:4c:c7:41:0b:6a:67:23:9c:ae:66:ad:37:47:
1a:55:21:65:5e:fd:79:34:43:ee:b6:cd:48:90:8c:
18:b8:7b:94:88:f2:f0:3d:be:6b:fe:3f:2a:4a:95:
8f:75:62:4b:c2:48:65:90:ca:f4:e9:c2:c2:a4:99:
94:3e:49:ad:04:a1:d6:f0:7e:b4:5a:d3:61:10:5a:
51:ba:44:34:35:33:79:6f:99:c0:57:35:c7:4e:03:
47:d3:27:56:11:ba:cb:3c:f3:e5:57:68:0e:2e:67:
82:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:43:C7:58:A4:F7:ED:39:77:1F:95:42:39:3B:1D:0A:34:C0:10:85
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8F3FB8286A2F11F1898CC5537847A888.roa
sbgp-ipAddrBlock: critical
IPv4:
103.125.168.0/22
Signature Algorithm: sha256WithRSAEncryption
94:2c:2f:26:2f:f7:9d:fa:85:79:45:3d:2d:be:15:08:c0:05:
70:68:ad:e5:17:4c:9f:79:5d:e1:10:82:a3:15:6e:dd:06:80:
2f:00:30:24:a8:bf:aa:5b:47:a0:c8:ba:45:9d:ab:98:11:62:
37:b6:12:c3:29:5d:62:36:62:51:f5:00:98:aa:69:eb:a2:6d:
bc:f3:b3:3f:3a:81:bd:d0:a4:ae:f6:56:12:01:ff:9a:d2:b3:
ce:2c:1d:11:77:8c:f1:cf:47:d4:b0:73:78:9b:bd:14:06:db:
7c:4e:20:f0:95:8a:0b:6a:09:49:6c:2a:7b:f6:3f:b6:09:8b:
a8:8c:91:34:81:f4:71:9d:46:68:0b:b2:bd:30:33:4b:cd:0c:
00:ce:ed:c8:d5:37:1e:3b:0c:19:74:9d:80:ba:08:82:2c:84:
da:96:bd:84:db:62:3f:73:37:84:24:f2:5a:58:0f:00:61:a5:
c2:3f:0a:d7:ba:30:3d:a3:36:bc:04:ad:dc:99:07:4d:c8:38:
f3:13:57:9b:89:b5:39:08:40:8b:ac:bb:4f:6e:e8:b7:1b:ef:
d1:90:bf:47:0d:47:d9:35:b0:2d:20:f9:49:29:cf:2c:34:e4:
ab:05:8a:0f:b2:a1:e7:ac:f9:02:ee:9e:83:35:4f:b9:6e:63:
eb:be:22:8d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICbLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYwNjE3MDkzMzEyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTMyNjlkOC0zNzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo1y+KkPTocOY2NLv0yd/hATL+Chzs3Vg7vnFUY7RdbAiFSeWUBdJEu/tiApn
v9NKrIxJyRDrmJm8ufeqn3mPYp79n+a/pv46ZkdNAr9cgKk1gXwYKLt4iprCZvVH
AOw0VHn65LF6Bqivb8kuoVwAKW/0vHIzVlc0PxxlxT0FqZSP34/9URcTO8t8osvo
5RUKUfjx19ABJEzHQQtqZyOcrmatN0caVSFlXv15NEPuts1IkIwYuHuUiPLwPb5r
/j8qSpWPdWJLwkhlkMr06cLCpJmUPkmtBKHW8H60WtNhEFpRukQ0NTN5b5nAVzXH
TgNH0ydWEbrLPPPlV2gOLmeCqwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFD1Dx1ik
9+05dx+VQjk7HQo0wBCFMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvOEYzRkI4Mjg2
QTJGMTFGMTg5OENDNTUzNzg0N0E4ODgucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ32oMA0GCSqGSIb3DQEBCwUAA4IBAQCULC8mL/ed+oV5RT0tvhUI
wAVwaK3lF0yfeV3hEIKjFW7dBoAvADAkqL+qW0egyLpFnauYEWI3thLDKV1iNmJR
9QCYqmnrom2887M/OoG90KSu9lYSAf+a0rPOLB0Rd4zxz0fUsHN4m70UBtt8TiDw
lYoLaglJbCp79j+2CYuojJE0gfRxnUZoC7K9MDNLzQwAzu3I1TceOwwZdJ2AugiC
LITalr2E22I/czeEJPJaWA8AYaXCPwrXujA9oza8BK3cmQdNyDjzE1ebibU5CECL
rLtPbui3G+/RkL9HDUfZNbAtIPlJKc8sNOSrBYoPsqHnrPkC7p6DNU+5bmPrviKN
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:56:43 2026 by rpki-client