
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BED3A706C47B11ECB544A26DC4F9AE02.roa
File: BED3A706C47B11ECB544A26DC4F9AE02.roa (raw, json)
Hash identifier: hAm6mB3UYvZwsDv8mfOmqh+jCB8ZJspMW43M+VuSBSE=
Subject key identifier: 00:F4:B4:DD:FE:A5:06:A8:ED:E1:D5:BC:AB:8B:E4:D0:D7:83:88:D4
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6D8B
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BED3A706C47B11ECB544A26DC4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:22:41 +0000
ROA not before: Fri 02 Oct 2026 15:22:41 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 131396
IP address blocks: 103.144.84.0/23 maxlen: 24
103.253.88.0/23 maxlen: 24
103.253.90.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28043 (0x6d8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:22:41 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcc40-25ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:03:0f:1c:6e:1d:68:33:56:1e:d6:cb:b3:
db:0d:af:ef:9f:4f:a2:93:b6:c3:11:91:db:2b:d6:
43:6f:37:3c:63:d2:9d:f3:0c:48:2b:85:4c:36:5c:
28:34:88:b0:1b:e8:2f:8d:0b:27:30:09:cb:75:a1:
8f:f8:4b:ad:72:8e:ad:81:f6:ef:55:9c:da:47:d2:
dd:b8:02:37:93:1a:e1:8d:6f:b1:5c:65:74:6b:73:
13:af:2c:7a:f1:de:da:6e:63:a7:a9:ce:b4:cd:06:
e6:08:85:bc:ef:d7:8b:c2:d0:7a:8d:39:10:ac:ad:
7a:d2:7a:42:66:24:c9:c8:67:81:9e:63:9c:4f:0f:
fc:bc:28:fd:55:4a:d7:f2:05:80:2f:94:6d:fc:45:
7c:99:82:eb:9c:fc:09:cf:29:4f:9d:63:e6:32:7f:
d4:37:5b:f1:cc:b3:51:1e:f0:2a:01:ba:2b:c5:d6:
0a:c1:be:40:f7:63:d3:5c:a7:b4:b2:8e:15:2c:cc:
f0:f5:fd:45:0c:da:37:7f:75:6d:c2:70:ed:97:b5:
19:de:29:16:3b:16:89:39:e8:c2:56:8c:9b:7d:a4:
85:43:7c:30:7a:e0:c7:bb:66:3c:aa:ac:ad:44:b3:
05:af:45:b0:ab:df:2d:6c:fd:34:98:6f:ee:fb:47:
fc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F4:B4:DD:FE:A5:06:A8:ED:E1:D5:BC:AB:8B:E4:D0:D7:83:88:D4
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BED3A706C47B11ECB544A26DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.144.84.0/23
103.253.88.0/22
Signature Algorithm: sha256WithRSAEncryption
10:88:ef:0d:1f:51:de:f6:48:58:68:e6:d5:5a:04:2b:57:23:
7c:34:2d:20:77:d8:e6:b7:96:15:34:51:62:69:8d:42:f9:1c:
e7:2f:be:54:b2:53:01:a7:0c:65:c9:75:3b:f9:67:45:b5:e1:
d0:45:ef:b5:be:11:db:25:43:c6:28:64:91:72:40:7b:51:06:
f9:52:af:25:01:e5:e0:3a:ba:25:63:17:04:cb:48:e6:a0:f3:
1d:85:2a:d9:78:97:48:23:9b:f9:e8:48:fc:b4:b5:27:71:59:
a2:35:76:68:ed:e5:f3:94:42:56:b8:6b:8f:ab:46:b9:45:d4:
dc:b0:06:07:ea:10:35:86:15:f0:82:43:2a:e9:91:39:98:58:
82:57:58:16:d9:e4:2b:4f:32:f3:28:da:ef:16:43:70:8b:03:
18:a9:79:b8:6f:d4:ec:3d:fe:c3:49:23:b9:ec:08:c4:39:08:
1e:97:65:92:d5:1f:b8:9a:8d:54:24:2c:62:bf:fe:a2:f9:76:
2f:1b:f6:71:95:5b:57:67:a8:61:b2:66:f9:b2:d8:05:71:de:
06:56:b8:39:b9:03:0b:46:7b:b2:d1:0f:e0:52:85:a4:a4:08:
bc:80:99:f3:52:38:45:61:2f:bc:4f:ab:c9:fd:08:27:ba:11:
e4:a0:d8:97
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICbYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYxMDAyMTUyMjQxWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2M0MC0yNWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuqkDDxxuHWgzVh7Wy7PbDa/vn0+ik7bDEZHbK9ZDbzc8Y9Kd8wxIK4VMNlwo
NIiwG+gvjQsnMAnLdaGP+Eutco6tgfbvVZzaR9LduAI3kxrhjW+xXGV0a3MTryx6
8d7abmOnqc60zQbmCIW879eLwtB6jTkQrK160npCZiTJyGeBnmOcTw/8vCj9VUrX
8gWAL5Rt/EV8mYLrnPwJzylPnWPmMn/UN1vxzLNRHvAqAborxdYKwb5A92PTXKe0
so4VLMzw9f1FDNo3f3VtwnDtl7UZ3ikWOxaJOejCVoybfaSFQ3wweuDHu2Y8qqyt
RLMFr0Wwq98tbP00mG/u+0f8owIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFAD0tN3+
pQao7eHVvKuL5NDXg4jUMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQkVEM0E3MDZD
NDdCMTFFQ0I1NDRBMjZEQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQBZ5BUAwQCZ/1YMA0GCSqGSIb3DQEBCwUAA4IBAQAQiO8NH1He9khY
aObVWgQrVyN8NC0gd9jmt5YVNFFiaY1C+RznL75UslMBpwxlyXU7+WdFteHQRe+1
vhHbJUPGKGSRckB7UQb5Uq8lAeXgOrolYxcEy0jmoPMdhSrZeJdII5v56Ej8tLUn
cVmiNXZo7eXzlEJWuGuPq0a5RdTcsAYH6hA1hhXwgkMq6ZE5mFiCV1gW2eQrTzLz
KNrvFkNwiwMYqXm4b9TsPf7DSSO57AjEOQgel2WS1R+4mo1UJCxiv/6i+XYvG/Zx
lVtXZ6hhsmb5stgFcd4GVrg5uQMLRnuy0Q/gUoWkpAi8gJnzUjhFYS+8T6vJ/Qgn
uhHkoNiX
-----END CERTIFICATE-----
Generated at Sat Oct 24 23:36:00 2026 by rpki-client