
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A0D5F1C6C7C911ED8A387F39C4F9AE02.roa
File: A0D5F1C6C7C911ED8A387F39C4F9AE02.roa (raw, json)
Hash identifier: GxXmxVjyaot8D052b60H+LBpF4q+LQFXhdYb+hAl358=
Subject key identifier: EF:56:31:2B:2F:6B:83:94:8D:9A:27:BA:03:76:32:D4:E1:C7:05:D7
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6E4A
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A0D5F1C6C7C911ED8A387F39C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:28:49 +0000
ROA not before: Fri 02 Oct 2026 15:28:49 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 149160
IP address blocks: 103.60.240.0/23 maxlen: 23
2001:df1:bf40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28234 (0x6e4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:28:49 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcdb1-fe55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:69:df:b8:88:33:27:15:b3:1c:a7:46:1d:f8:
00:b6:d8:fc:13:5e:50:81:7a:19:49:88:93:6c:60:
aa:ce:31:fd:0f:9c:5b:8c:e2:a0:c1:54:14:de:97:
7f:e0:e5:5d:e6:66:cd:00:27:dc:d4:64:48:37:a9:
ce:6d:70:bc:53:88:49:de:d4:86:a0:fa:61:0a:c7:
cb:7b:4e:c0:eb:ea:80:4d:c9:93:6a:11:92:bb:2a:
ed:09:2f:fd:49:02:82:13:a9:12:b1:d7:51:a3:ff:
98:53:dd:2b:6a:33:a8:58:c3:31:ad:46:a8:ed:d7:
35:60:0e:c6:03:59:79:63:b0:97:92:80:21:50:8e:
b8:d3:d5:20:10:3b:03:c5:66:6a:98:2b:08:9e:1d:
9a:e4:19:b8:4e:cd:80:e0:8c:89:2b:c9:72:14:18:
e2:d4:58:1c:a2:34:87:96:6d:0b:22:0e:36:cb:c8:
98:37:88:03:fc:07:72:a5:26:0d:9f:d7:07:79:10:
71:df:bb:f9:35:66:99:b0:17:e4:8a:a3:5c:ca:5a:
0a:b0:7f:0f:4b:3d:66:ca:5a:9f:27:37:87:25:ce:
4b:15:ca:a0:c7:2f:57:68:da:57:23:af:f2:a4:2e:
d4:bb:e3:10:6f:bb:99:a4:9e:98:d8:7b:9a:47:4d:
ad:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:56:31:2B:2F:6B:83:94:8D:9A:27:BA:03:76:32:D4:E1:C7:05:D7
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A0D5F1C6C7C911ED8A387F39C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.60.240.0/23
IPv6:
2001:df1:bf40::/48
Signature Algorithm: sha256WithRSAEncryption
ac:5b:79:1b:7b:45:eb:d7:ed:52:7c:f7:27:44:16:cf:fd:16:
57:80:14:46:c9:69:21:8e:3b:fc:45:77:cb:6d:08:23:23:2e:
f2:ec:6b:8c:2f:cc:4b:79:1e:13:3b:93:e1:0c:ab:f7:18:6b:
02:03:26:ff:2b:de:e6:37:40:d3:9b:dc:09:3c:d8:b8:66:8d:
7c:17:1e:31:83:60:7b:d8:2b:1d:80:1d:9c:6c:40:57:5a:86:
9c:21:d0:e8:a0:44:95:09:44:fe:b2:54:d9:92:92:88:a7:58:
72:1e:6a:af:41:5a:d7:9e:bb:c4:70:58:73:14:37:c5:03:8e:
98:e0:a8:71:66:87:13:68:8f:8e:7d:99:9a:fd:e0:cc:44:bb:
b7:7e:d6:9c:08:1c:ae:db:2c:35:75:3d:5a:54:1b:24:1a:2a:
86:66:2a:07:e0:ef:e4:30:4c:68:b4:57:8e:53:1f:2c:5e:bb:
6e:df:5b:b4:46:78:35:84:f1:eb:d6:27:d0:b9:be:28:57:1f:
44:b4:a5:9b:4c:50:d1:3b:1c:e0:67:66:7d:55:9c:7a:d2:40:
42:f3:a0:08:20:c5:27:fe:3d:2b:38:36:6f:6f:a7:7c:8f:c0:
40:98:fd:f6:de:8f:76:2d:7d:ba:d5:8c:d9:4d:60:75:50:36:
80:bc:30:4c
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICbkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYxMDAyMTUyODQ5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2RiMS1mZTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2mnfuIgzJxWzHKdGHfgAttj8E15QgXoZSYiTbGCqzjH9D5xbjOKgwVQU3pd/
4OVd5mbNACfc1GRIN6nObXC8U4hJ3tSGoPphCsfLe07A6+qATcmTahGSuyrtCS/9
SQKCE6kSsddRo/+YU90rajOoWMMxrUao7dc1YA7GA1l5Y7CXkoAhUI6409UgEDsD
xWZqmCsInh2a5Bm4Ts2A4IyJK8lyFBji1FgcojSHlm0LIg42y8iYN4gD/AdypSYN
n9cHeRBx37v5NWaZsBfkiqNcyloKsH8PSz1mylqfJzeHJc5LFcqgxy9XaNpXI6/y
pC7Uu+MQb7uZpJ6Y2HuaR02t1wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFO9WMSsv
a4OUjZonugN2MtThxwXXMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQTBENUYxQzZD
N0M5MTFFRDhBMzg3RjM5QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZzzwMA8EAgACMAkDBwAgAQ3xv0AwDQYJKoZIhvcNAQELBQADggEB
AKxbeRt7RevX7VJ89ydEFs/9FleAFEbJaSGOO/xFd8ttCCMjLvLsa4wvzEt5HhM7
k+EMq/cYawIDJv8r3uY3QNOb3Ak82LhmjXwXHjGDYHvYKx2AHZxsQFdahpwh0Oig
RJUJRP6yVNmSkoinWHIeaq9BWteeu8RwWHMUN8UDjpjgqHFmhxNoj459mZr94MxE
u7d+1pwIHK7bLDV1PVpUGyQaKoZmKgfg7+QwTGi0V45THyxeu27fW7RGeDWE8evW
J9C5vihXH0S0pZtMUNE7HOBnZn1VnHrSQELzoAggxSf+PSs4Nm9vp3yPwECY/fbe
j3YtfbrVjNlNYHVQNoC8MEw=
-----END CERTIFICATE-----
Generated at Sat Oct 24 20:47:14 2026 by rpki-client