
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C43B8148BF0611EC889EE54DC4F9AE02.roa
File: C43B8148BF0611EC889EE54DC4F9AE02.roa (raw, json)
Hash identifier: vj9LeBIGcY4mSiHJsBgT+roVPaTsSP9RQrPZMpZZJxU=
Subject key identifier: 51:99:F2:8D:57:F6:42:03:F7:B4:A6:41:E5:18:E1:AB:59:62:89:40
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 5DFD
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C43B8148BF0611EC889EE54DC4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:16:18 +0000
ROA not before: Thu 28 Aug 2025 14:53:40 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 135969
IP address blocks: 103.137.186.0/24 maxlen: 24
103.137.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24061 (0x5dfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:53:40 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a60c31-6e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:59:e6:d3:10:3c:96:84:e1:75:70:bb:f4:f7:
24:2d:c7:54:23:eb:af:d7:68:93:a4:6b:d1:34:d0:
c2:32:36:73:4b:6e:65:1f:05:0e:8e:45:02:83:0e:
f8:90:39:b2:ba:be:99:6a:e3:65:1e:30:7c:40:ab:
19:c0:ab:09:8f:10:97:73:13:ee:98:0a:1a:f4:65:
d8:7e:97:6f:18:ad:2e:f8:7d:b8:f7:15:85:d0:cf:
cb:0f:50:d2:7b:7f:95:32:e7:32:91:dc:99:c4:43:
c0:74:db:aa:eb:66:56:14:67:57:64:18:fd:14:82:
0c:2d:94:64:1d:da:53:45:20:91:ec:cb:ae:9f:6c:
f6:aa:95:df:da:c6:ff:3f:82:76:38:ad:68:4b:3e:
b7:99:f0:45:b8:60:02:c5:3a:e3:7e:14:68:72:70:
76:c8:6e:cd:8c:e8:b3:8a:7d:8b:ef:bb:34:52:9d:
b8:a3:84:3d:93:9b:04:f5:f5:4a:e3:05:d5:e9:60:
4c:0c:4a:8c:1d:41:ba:98:7e:61:c9:fa:d6:f4:71:
74:5d:5c:5f:a9:e0:db:16:d4:1a:b7:b8:21:29:cd:
ed:42:0a:20:c0:7d:94:71:37:ca:dc:61:d0:38:80:
9c:32:59:2d:97:a8:a0:e1:bf:65:de:c7:07:3c:94:
f3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:99:F2:8D:57:F6:42:03:F7:B4:A6:41:E5:18:E1:AB:59:62:89:40
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C43B8148BF0611EC889EE54DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.137.186.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:9a:d7:55:bb:c3:ea:86:8b:81:32:a3:0e:03:32:12:a8:ed:
a0:2b:b1:8e:56:16:26:cb:65:84:2f:b4:3c:5b:67:9b:eb:c1:
9b:c3:33:10:bd:72:52:9a:6b:85:02:e9:8b:f7:ed:62:d8:2d:
8c:05:ed:7d:ed:13:f9:9b:aa:b5:c6:b2:80:14:d1:df:18:9e:
c8:f2:28:ba:59:f9:57:33:1a:30:93:53:71:e4:39:72:52:1c:
4b:43:ea:8c:7c:27:59:fb:57:74:3d:13:12:89:64:dc:78:1b:
d3:29:6a:6e:58:8f:70:e8:0c:3d:68:db:2a:a9:ab:67:f6:ff:
24:14:07:8b:56:98:10:9d:a7:40:85:86:93:aa:55:17:e4:98:
58:35:58:a5:4f:30:cd:69:44:75:54:29:55:40:b3:c4:2d:bf:
2d:a1:f3:17:64:f5:08:cf:c1:13:7d:3c:b0:ac:35:73:69:41:
7c:7a:93:ae:36:23:53:fc:f8:e2:a0:78:56:0d:03:37:0e:fc:
42:ea:ec:ae:86:72:fb:fe:2d:94:20:25:71:0c:1e:d3:d0:03:
41:da:a9:60:e1:d8:d1:ff:9d:39:ac:05:65:cc:b2:c4:32:01:
65:db:57:91:a1:c7:75:33:31:ca:03:65:60:b8:9c:bf:a6:af:
80:57:90:29
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICXf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwODI4MTQ1MzQwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MGMzMS02ZThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtFnm0xA8loThdXC79PckLcdUI+uv12iTpGvRNNDCMjZzS25lHwUOjkUCgw74
kDmyur6ZauNlHjB8QKsZwKsJjxCXcxPumAoa9GXYfpdvGK0u+H249xWF0M/LD1DS
e3+VMucykdyZxEPAdNuq62ZWFGdXZBj9FIIMLZRkHdpTRSCR7Muun2z2qpXf2sb/
P4J2OK1oSz63mfBFuGACxTrjfhRocnB2yG7NjOizin2L77s0Up24o4Q9k5sE9fVK
4wXV6WBMDEqMHUG6mH5hyfrW9HF0XVxfqeDbFtQat7ghKc3tQgogwH2UcTfK3GHQ
OICcMlktl6ig4b9l3scHPJTzGwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFGZ8o1X
9kID97SmQeUY4atZYolAMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQzQzQjgxNDhC
RjA2MTFFQzg4OUVFNTREQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ4m6MA0GCSqGSIb3DQEBCwUAA4IBAQCpmtdVu8PqhouBMqMOAzIS
qO2gK7GOVhYmy2WEL7Q8W2eb68GbwzMQvXJSmmuFAumL9+1i2C2MBe197RP5m6q1
xrKAFNHfGJ7I8ii6WflXMxowk1Nx5DlyUhxLQ+qMfCdZ+1d0PRMSiWTceBvTKWpu
WI9w6Aw9aNsqqatn9v8kFAeLVpgQnadAhYaTqlUX5JhYNVilTzDNaUR1VClVQLPE
Lb8tofMXZPUIz8ETfTywrDVzaUF8epOuNiNT/PjioHhWDQM3DvxC6uyuhnL7/i2U
ICVxDB7T0ANB2qlg4djR/505rAVlzLLEMgFl21eRocd1MzHKA2VguJy/pq+AV5Ap
-----END CERTIFICATE-----
Generated at Sat Mar 7 22:43:49 2026 by rpki-client