
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B29D5048C7CF11F1A8FCD6275611F970.roa
File: B29D5048C7CF11F1A8FCD6275611F970.roa (raw, json)
Hash identifier: qcVyIBpl4c7bLLWje3dCA8s8z9cneUJejkJN++Axj+c=
Subject key identifier: 9E:3A:29:EB:F2:34:99:0E:DB:4D:4F:05:9F:9C:35:CE:BF:6E:47:97
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6F76
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B29D5048C7CF11F1A8FCD6275611F970.roa
Signing time: Wed 14 Oct 2026 13:06:42 +0000
ROA not before: Wed 14 Oct 2026 13:06:42 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 131375
IP address blocks: 103.16.0.0/22 maxlen: 24
2001:df5:bb00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28534 (0x6f76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 14 13:06:42 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6acf7e62-0209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:b4:92:2c:9a:c9:0b:33:9c:1a:7e:8a:dc:
0e:3d:f5:88:7a:6a:73:e4:b1:5c:45:b3:b5:aa:ee:
41:d3:5f:5f:dd:5c:01:e6:81:d6:8b:f0:05:67:13:
ae:ad:79:08:e6:53:a6:67:66:ec:48:42:e0:23:94:
1a:13:96:9e:e9:a0:a4:7d:29:64:b5:bd:2e:9a:a1:
9f:a1:be:8a:1d:2a:aa:c6:40:ee:82:53:3e:bd:20:
eb:6b:ea:5c:16:f8:5a:49:53:58:de:de:11:79:a9:
74:b9:c0:b7:f4:e5:70:6b:93:f1:2f:3a:c1:aa:e3:
10:53:e2:bd:7f:84:7e:42:8c:bf:04:e2:e8:ca:7c:
62:4b:4b:10:a8:f0:32:b4:a0:27:42:79:9f:1f:2d:
eb:68:ee:6d:ee:a9:ce:ab:37:9a:0b:f3:c4:19:b7:
ef:69:c7:7a:d9:4c:fb:21:25:10:e6:36:1b:25:e2:
10:82:8b:3e:d4:d0:6c:d3:2c:e1:2b:e2:e1:5a:72:
de:03:f1:bd:be:40:0d:c1:07:db:19:8c:f1:40:dd:
e4:c9:9e:fe:0b:e6:a7:75:74:a4:14:ea:9d:d8:ee:
39:07:45:d0:82:8a:1f:ac:ca:2a:de:0d:d3:ec:aa:
35:20:3a:df:84:84:d6:ab:7b:26:54:ef:60:97:53:
4a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3A:29:EB:F2:34:99:0E:DB:4D:4F:05:9F:9C:35:CE:BF:6E:47:97
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B29D5048C7CF11F1A8FCD6275611F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.16.0.0/22
IPv6:
2001:df5:bb00::/48
Signature Algorithm: sha256WithRSAEncryption
b7:f0:c8:65:20:44:09:4b:92:41:9d:57:71:44:1b:a5:72:91:
6c:e1:5e:80:d7:99:86:c1:38:73:ac:63:bb:2a:c2:cd:fb:ee:
c7:c1:01:61:47:58:44:7b:40:54:85:1d:57:e7:09:cb:20:30:
b9:30:78:d3:e7:1f:01:ca:4c:6d:4e:50:12:74:43:5a:7e:fc:
88:18:17:7b:a1:84:26:35:46:b5:e5:06:83:77:50:65:91:18:
6f:37:a4:2c:86:c6:a9:88:4f:17:78:01:93:5a:73:2f:68:82:
9a:15:b8:d7:39:ce:3f:18:11:34:be:5b:fd:2f:fd:a2:20:63:
74:91:ee:22:9d:20:d6:47:eb:87:76:47:b8:64:6a:21:5a:06:
4b:f9:fe:d5:a7:20:4b:6c:62:35:94:c9:35:b2:fe:b1:e3:8d:
a6:35:4c:eb:72:fa:46:dd:77:92:b4:92:a1:a0:59:74:cf:f6:
3a:3f:21:b3:2e:d0:47:ef:08:36:ec:2c:91:23:ef:b1:8b:2c:
b1:af:90:bd:7f:17:a6:38:3b:02:b1:8e:d6:83:c1:e6:1d:03:
d7:94:b8:12:87:52:cc:de:35:d8:38:db:22:20:54:19:99:15:
33:e7:a8:22:38:9e:83:9c:59:e5:c9:e3:f8:eb:5b:4f:71:c0:
65:a8:d8:a5
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICb3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYxMDE0MTMwNjQyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWNmN2U2Mi0wMjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtm60kiyayQsznBp+itwOPfWIempz5LFcRbO1qu5B019f3VwB5oHWi/AFZxOu
rXkI5lOmZ2bsSELgI5QaE5ae6aCkfSlktb0umqGfob6KHSqqxkDuglM+vSDra+pc
FvhaSVNY3t4Real0ucC39OVwa5PxLzrBquMQU+K9f4R+Qoy/BOLoynxiS0sQqPAy
tKAnQnmfHy3raO5t7qnOqzeaC/PEGbfvacd62Uz7ISUQ5jYbJeIQgos+1NBs0yzh
K+LhWnLeA/G9vkANwQfbGYzxQN3kyZ7+C+andXSkFOqd2O45B0XQgoofrMoq3g3T
7Ko1IDrfhITWq3smVO9gl1NKEwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFJ46Kevy
NJkO201PBZ+cNc6/bkeXMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQjI5RDUwNDhD
N0NGMTFGMUE4RkNENjI3NTYxMUY5NzAucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQCZxAAMA8EAgACMAkDBwAgAQ31uwAwDQYJKoZIhvcNAQELBQADggEB
ALfwyGUgRAlLkkGdV3FEG6VykWzhXoDXmYbBOHOsY7sqws377sfBAWFHWER7QFSF
HVfnCcsgMLkweNPnHwHKTG1OUBJ0Q1p+/IgYF3uhhCY1RrXlBoN3UGWRGG83pCyG
xqmITxd4AZNacy9ogpoVuNc5zj8YETS+W/0v/aIgY3SR7iKdINZH64d2R7hkaiFa
Bkv5/tWnIEtsYjWUyTWy/rHjjaY1TOty+kbdd5K0kqGgWXTP9jo/IbMu0EfvCDbs
LJEj77GLLLGvkL1/F6Y4OwKxjtaDweYdA9eUuBKHUszeNdg42yIgVBmZFTPnqCI4
noOcWeXJ4/jrW09xwGWo2KU=
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:56:34 2026 by rpki-client