
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BBE72E68FE9B11EDB3E19575C4F9AE02.roa
File: BBE72E68FE9B11EDB3E19575C4F9AE02.roa (raw, json)
Hash identifier: 8HMOgmn/BOR7Mkaio7UC33JMwo3r/4njkqk2GyYHrUs=
Subject key identifier: DC:EA:0D:B2:4B:97:0D:C2:76:41:D8:6E:A0:1D:9C:59:9B:80:3B:3D
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 5DB0
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BBE72E68FE9B11EDB3E19575C4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:15:01 +0000
ROA not before: Thu 28 Aug 2025 14:52:28 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 131375
IP address blocks: 103.16.0.0/22 maxlen: 24
2001:df5:bb00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23984 (0x5db0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:52:28 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a60be4-663a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3e:8c:fa:7d:87:50:56:ff:32:e9:53:4e:c2:
c9:34:8b:74:7d:6e:ce:73:3f:77:46:9f:fa:1d:c0:
10:b9:5b:db:06:97:09:84:cf:af:e3:0f:cc:10:97:
55:77:e0:38:c7:4f:cd:ab:d9:d1:5f:eb:27:63:6d:
9f:2a:22:92:26:a6:da:89:9d:ec:38:95:6e:40:99:
99:45:ed:62:84:3b:a0:f7:3d:23:fd:40:95:8b:07:
bc:9e:9c:c4:6b:f1:98:75:57:0e:08:ef:f5:82:e4:
d8:fa:18:a3:0a:38:f9:1f:8f:c2:01:6f:f0:c6:3e:
d3:19:e3:40:14:c5:af:e5:1c:19:29:4a:21:ef:d5:
71:20:ac:02:64:81:0e:66:f3:69:fc:78:2d:13:6b:
30:61:82:f5:bf:a8:a4:91:3e:4e:0b:7b:57:15:17:
3e:2f:91:be:48:8b:3c:ee:b6:42:47:a7:ef:c9:c9:
7c:5f:67:9e:1e:85:00:8d:e3:7e:b6:d8:ca:da:29:
be:30:20:8c:99:ed:ff:bc:ef:39:d3:a2:9f:e0:05:
6f:7d:b5:36:44:7e:05:db:ec:72:14:42:a2:f7:c8:
cc:75:d6:c3:92:e1:71:6f:77:c0:85:e5:b3:e5:f1:
0a:bf:2b:0a:9c:9a:f9:17:d5:e9:4c:dd:50:5e:73:
b3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EA:0D:B2:4B:97:0D:C2:76:41:D8:6E:A0:1D:9C:59:9B:80:3B:3D
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BBE72E68FE9B11EDB3E19575C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.16.0.0/22
IPv6:
2001:df5:bb00::/48
Signature Algorithm: sha256WithRSAEncryption
b5:ab:a3:17:44:c1:5b:51:59:8d:b0:0f:31:32:f7:af:ce:03:
aa:0b:e6:f5:b0:45:8a:dd:8a:c2:fd:fb:85:07:0f:d0:ee:e8:
8c:24:d9:8e:c3:e9:61:2c:ae:77:b5:cd:eb:d7:3c:99:05:04:
42:6b:fc:cd:34:35:4b:19:94:d5:f5:7c:5c:5b:bb:22:f4:65:
b9:0c:ad:78:3b:4a:b5:32:59:7a:e1:1a:45:21:33:49:d2:51:
3d:e9:74:0d:2f:58:f8:bc:d5:1e:74:84:ad:4f:e7:20:42:b6:
a8:77:87:b8:c3:0a:af:10:ca:67:27:49:4a:ad:bf:b6:79:73:
a5:c8:c5:62:fd:18:75:db:93:ed:43:53:1f:aa:08:29:a8:a9:
1e:67:08:2e:b9:a7:c4:49:98:02:cc:40:85:4c:c9:d4:a5:33:
39:04:86:67:ff:0f:9b:b4:55:80:2d:5e:6d:d9:be:f3:5d:a1:
56:ef:c6:7c:34:1b:5c:a3:63:15:2d:48:25:32:c2:20:24:60:
ef:b4:b8:81:d2:e9:31:9d:4a:d4:48:aa:f1:40:6b:4c:a3:9d:
fb:d2:7f:e7:bf:25:aa:e6:c8:b1:64:cb:04:f5:23:a8:09:4d:
3c:49:22:41:ee:72:bc:5e:1f:ca:c3:44:26:4a:84:71:83:08:
05:9f:89:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:47:43 2026 by rpki-client