
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C97B91A2D3E311F0AD18C835C4F9AE02.roa
File: C97B91A2D3E311F0AD18C835C4F9AE02.roa (raw, json)
Hash identifier: E6Rd1RBebqTmFn6kkzMI3mAe6IgjzNAkTyBI7Pf/5/s=
Subject key identifier: 8A:EC:B6:B9:45:50:7B:5D:48:C0:78:16:B0:E3:2C:17:8F:6D:5A:28
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6F55
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C97B91A2D3E311F0AD18C835C4F9AE02.roa
Signing time: Sun 04 Oct 2026 14:06:36 +0000
ROA not before: Sun 04 Oct 2026 14:06:36 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 152933
IP address blocks: 103.165.144.0/23 maxlen: 23
103.165.144.0/24 maxlen: 24
103.165.145.0/24 maxlen: 24
2001:df3:ee40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28501 (0x6f55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 4 14:06:36 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6ac25d6c-8151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:a4:5b:95:60:0b:c8:cf:36:1e:7c:a1:bf:
63:0a:b8:79:b4:f3:57:02:2c:68:bf:a5:26:f7:2d:
85:f1:07:f0:f8:63:ea:03:61:81:8f:be:99:52:dd:
d5:9e:98:b6:81:96:4e:a8:21:c3:52:47:7e:d5:37:
a0:7b:15:a3:c5:68:bb:89:91:58:59:8d:6e:ec:3c:
10:fa:49:a1:10:ce:e5:b0:27:bc:0b:78:45:5b:86:
92:cf:94:10:48:ae:e1:10:36:09:f9:2c:16:3a:56:
d7:4f:78:37:6e:4a:c7:9e:a6:03:29:43:b2:80:fb:
d9:01:10:a6:f5:65:85:f9:6e:e1:03:4a:a3:ad:e6:
37:17:f8:b0:38:f5:6e:13:c3:4e:bd:b4:15:6c:7d:
d1:4f:5c:e9:80:2a:93:2a:49:84:30:0d:4f:37:1d:
10:2d:4c:32:d6:46:5b:83:9d:51:2e:da:6c:57:ef:
4a:a0:2c:2c:67:1d:d3:c8:62:df:94:9c:40:d4:df:
a7:05:4b:00:ac:ee:55:4d:79:99:d8:f7:a3:b4:f0:
7a:46:e6:85:48:f0:1c:3d:ef:d9:d1:cb:35:78:13:
32:b5:e1:09:69:0b:30:fc:2a:e8:dd:0f:9e:93:3e:
64:bf:05:cc:7e:1c:8f:e1:b4:9c:fc:41:bc:dc:70:
e1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EC:B6:B9:45:50:7B:5D:48:C0:78:16:B0:E3:2C:17:8F:6D:5A:28
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C97B91A2D3E311F0AD18C835C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.165.144.0/23
IPv6:
2001:df3:ee40::/48
Signature Algorithm: sha256WithRSAEncryption
41:46:da:ba:bb:b2:3b:40:db:c0:1b:39:a8:8a:6e:50:90:e2:
ed:e9:d9:05:7f:d6:a7:6f:21:58:a4:01:43:31:f2:53:46:37:
da:67:af:67:54:02:db:25:c7:7f:e9:89:5f:7d:a1:21:76:64:
c3:6e:d7:23:67:a8:91:eb:6d:45:4b:24:17:36:8d:f5:03:3c:
20:4c:35:54:78:1d:0a:6e:64:06:08:ef:8a:2c:30:60:80:79:
6c:e2:bf:72:c5:b7:c4:7b:e0:fb:2c:9d:a6:67:d4:f0:13:df:
7f:d5:de:15:27:4c:35:8e:2b:84:20:3c:d0:40:ee:27:ca:a4:
a7:42:0c:00:66:90:24:cb:b8:ed:9a:bf:d2:a6:68:65:99:2a:
bc:15:71:f8:04:1d:9a:fd:e4:9f:4a:22:cd:36:7f:d9:9b:4c:
2c:c7:e9:ef:15:11:e1:96:5e:b0:35:5d:a6:56:0c:80:ac:bf:
ca:c6:72:08:19:a6:83:c6:45:05:48:79:43:9a:a2:b5:3d:4a:
74:cc:12:55:0c:6f:77:6a:93:aa:4c:15:c0:d3:f0:90:e8:af:
e4:03:f6:b6:cf:5d:66:f7:58:37:e8:60:05:76:58:62:c1:3e:
55:3d:b4:67:4c:75:d9:f0:23:7e:1b:45:71:dd:60:d3:8d:0a:
48:75:c1:02
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICb1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYxMDA0MTQwNjM2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWMyNWQ2Yy04MTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw2OkW5VgC8jPNh58ob9jCrh5tPNXAixov6Um9y2F8Qfw+GPqA2GBj76ZUt3V
npi2gZZOqCHDUkd+1TegexWjxWi7iZFYWY1u7DwQ+kmhEM7lsCe8C3hFW4aSz5QQ
SK7hEDYJ+SwWOlbXT3g3bkrHnqYDKUOygPvZARCm9WWF+W7hA0qjreY3F/iwOPVu
E8NOvbQVbH3RT1zpgCqTKkmEMA1PNx0QLUwy1kZbg51RLtpsV+9KoCwsZx3TyGLf
lJxA1N+nBUsArO5VTXmZ2PejtPB6RuaFSPAcPe/Z0cs1eBMyteEJaQsw/Cro3Q+e
kz5kvwXMfhyP4bSc/EG83HDh6QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFIrstrlF
UHtdSMB4FrDjLBePbVooMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQzk3QjkxQTJE
M0UzMTFGMEFEMThDODM1QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ6WQMA8EAgACMAkDBwAgAQ3z7kAwDQYJKoZIhvcNAQELBQADggEB
AEFG2rq7sjtA28AbOaiKblCQ4u3p2QV/1qdvIVikAUMx8lNGN9pnr2dUAtslx3/p
iV99oSF2ZMNu1yNnqJHrbUVLJBc2jfUDPCBMNVR4HQpuZAYI74osMGCAeWziv3LF
t8R74PssnaZn1PAT33/V3hUnTDWOK4QgPNBA7ifKpKdCDABmkCTLuO2av9KmaGWZ
KrwVcfgEHZr95J9KIs02f9mbTCzH6e8VEeGWXrA1XaZWDICsv8rGcggZpoPGRQVI
eUOaorU9SnTMElUMb3dqk6pMFcDT8JDor+QD9rbPXWb3WDfoYAV2WGLBPlU9tGdM
ddnwI34bRXHdYNONCkh1wQI=
-----END CERTIFICATE-----
Generated at Sat Oct 24 20:42:50 2026 by rpki-client