
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B4E29646F57D11EEABCBB83BC4F9AE02.roa
File: B4E29646F57D11EEABCBB83BC4F9AE02.roa (raw, json)
Hash identifier: kDk0+F/Fxb95qd6TfLn+Rc87L7Y5ul22ORmA64VBngw=
Subject key identifier: 92:49:DA:AB:7C:38:C7:01:2F:69:5E:FC:4B:58:60:0A:92:63:75:0D
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6DE6
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B4E29646F57D11EEABCBB83BC4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:25:39 +0000
ROA not before: Fri 02 Oct 2026 15:25:39 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 135998
IP address blocks: 103.146.20.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28134 (0x6de6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:25:39 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfccf3-da17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:74:ba:54:3a:19:d9:a2:c4:6a:b0:19:d3:20:
2d:cd:b0:9f:d6:9e:c0:ce:50:fd:6b:65:bc:c0:d2:
92:11:7d:93:59:92:3a:b9:6f:f1:67:1e:ba:f6:49:
6e:6d:6d:7c:a8:0a:a2:72:a6:59:a1:58:ab:0c:84:
d2:69:da:39:87:7e:ab:d5:75:29:5b:23:e9:64:39:
77:b6:6c:72:49:0c:5a:b3:20:ab:9a:2f:87:69:f4:
d0:b0:00:62:3f:4a:f9:e7:09:ab:d3:69:d8:e0:86:
b4:be:a3:f8:b1:e8:c5:a3:af:4e:c6:3a:66:22:9d:
f3:bb:64:4d:8c:d9:c5:7e:6d:93:6e:38:56:24:0c:
3d:d7:13:61:8e:c2:cf:d1:c2:7b:9a:df:cd:5e:ed:
db:d6:6e:25:89:7f:b2:cf:1d:84:e8:74:c1:a5:78:
55:5a:7d:71:b3:b8:c8:d6:28:e5:36:75:d0:6b:56:
83:75:54:c2:e3:f7:93:17:8b:ef:9f:d5:1c:8f:5c:
50:a8:79:20:85:21:4f:5c:38:44:e8:90:9a:95:32:
52:29:7b:51:7a:2e:c3:4f:92:53:8c:ba:79:a9:16:
44:f5:f1:a8:a1:6c:cc:38:90:47:5d:cb:d2:88:a2:
47:d6:f2:a5:98:88:88:2a:81:ef:f3:03:9a:d7:91:
84:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:49:DA:AB:7C:38:C7:01:2F:69:5E:FC:4B:58:60:0A:92:63:75:0D
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B4E29646F57D11EEABCBB83BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.146.20.0/23
Signature Algorithm: sha256WithRSAEncryption
98:3f:11:fa:f5:5b:24:0e:0c:aa:66:8a:26:e1:43:33:c7:41:
f1:41:8f:c0:b1:02:da:08:26:95:68:77:d1:43:bc:54:bf:8c:
16:e7:fb:03:2d:5c:64:d6:bf:b6:61:78:61:5f:2d:cf:33:e4:
f7:82:f4:0c:69:01:28:29:4e:c8:0f:d2:b2:95:93:e9:2f:9a:
fe:e7:d0:5e:19:e2:91:91:f7:4f:57:78:1e:b0:e7:69:79:9b:
d7:ea:bf:20:92:78:86:63:de:43:aa:ed:16:1d:82:27:a9:eb:
c2:62:ec:d9:ea:f8:11:34:63:f9:26:31:30:74:a1:40:80:28:
1f:b1:a4:2f:bd:46:ec:c4:ad:aa:a2:c3:ea:22:a6:04:53:54:
9d:3d:7a:95:5f:73:d7:2d:81:4b:81:4f:a7:5c:67:b9:fe:1f:
87:df:1e:f4:f1:b1:c8:a3:46:da:ad:d2:c9:17:65:dd:76:26:
47:ea:23:1a:34:0c:a6:53:ac:7e:e7:61:2b:6f:cb:64:92:7e:
d4:8d:3b:b7:ae:63:60:2d:2a:11:56:5e:ed:ed:d3:15:32:a2:
ea:0c:b4:61:29:73:5f:b6:71:f4:2f:bc:0b:63:30:8f:19:2f:
d0:ee:5a:13:10:95:94:f2:3f:42:95:21:9a:82:37:52:c7:48:
ab:2a:d2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:05:57 2026 by rpki-client