
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D4841CBA4EB111F1BBCE57DBC7833773.roa
File: D4841CBA4EB111F1BBCE57DBC7833773.roa (raw, json)
Hash identifier: xhQRXUb7y7jw5w2IpeleYJXNQ7KVJ59xHQlRLqI7XfA=
Subject key identifier: E5:13:78:10:94:E7:C8:4C:82:04:61:98:B0:CC:C3:E8:07:43:47:7B
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6DA5
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D4841CBA4EB111F1BBCE57DBC7833773.roa
Signing time: Fri 02 Oct 2026 15:23:35 +0000
ROA not before: Fri 02 Oct 2026 15:23:35 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 131436
IP address blocks: 103.57.112.0/22 maxlen: 24
2001:df1:1f40::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 10:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28069 (0x6da5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:23:35 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcc77-c8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:67:32:f1:89:85:15:2a:95:f8:a9:fd:3e:94:
5b:b1:65:26:70:7c:f1:e7:8b:2f:58:e2:30:20:2b:
30:e6:92:de:ee:7d:ea:01:91:0c:7c:ce:b8:83:ab:
24:7f:b4:3a:49:01:a7:6b:2d:2c:af:6e:30:66:e8:
51:a0:5c:69:cd:5f:52:81:ab:ab:2c:b1:8d:e5:2e:
4b:55:c1:c1:c5:b0:2e:2b:0d:71:26:1a:e4:53:47:
51:ea:d0:fe:0c:d9:5d:00:30:d5:33:b0:e6:5e:20:
0c:a5:c0:78:52:30:2d:7e:c7:00:41:e8:8b:66:a6:
3f:d2:3e:4a:23:39:c4:9a:25:89:e5:2a:2a:8e:1c:
4f:3d:2f:03:cf:cb:f5:c0:96:ef:49:0f:f3:45:56:
f3:c3:c6:bd:d3:6e:7f:47:f8:c7:f6:16:f4:4d:e6:
12:3a:30:7a:5a:a9:40:7e:20:05:03:7d:4e:25:f3:
48:b5:01:2d:a7:aa:e9:04:80:75:3f:e4:d1:21:73:
ad:7d:88:c1:c4:1e:70:cf:74:08:e4:af:5a:8c:35:
78:c8:b9:e8:42:f7:e7:07:f9:92:ef:69:8c:98:47:
c5:38:e5:bd:0b:e7:1c:e2:03:0b:fb:d4:96:25:ea:
db:e9:c3:65:b2:5d:c0:c2:70:e3:9c:c0:d7:7c:86:
6d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:13:78:10:94:E7:C8:4C:82:04:61:98:B0:CC:C3:E8:07:43:47:7B
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D4841CBA4EB111F1BBCE57DBC7833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.57.112.0/22
IPv6:
2001:df1:1f40::/47
Signature Algorithm: sha256WithRSAEncryption
67:6d:99:5c:a0:fe:cb:03:ab:dc:b0:e0:cd:50:f7:80:5d:98:
33:73:4d:d9:fe:22:d2:2d:f4:66:03:f6:d2:ca:b5:43:e5:fc:
f6:f8:c3:20:76:d8:92:18:4e:14:66:ee:35:90:e6:71:6e:14:
bd:db:8c:c3:87:20:d8:e0:17:c1:fc:09:4e:ff:e5:71:91:94:
1c:b6:10:9f:23:17:65:63:9e:4d:c6:b0:ef:b5:78:ee:e0:b5:
04:a2:7f:cc:14:47:9c:69:63:21:ca:2e:8b:cb:be:7c:4b:7c:
1b:8e:40:48:69:26:dd:6d:78:21:dd:9e:9f:ed:8c:44:73:79:
e2:82:21:4c:fd:17:a7:0a:21:33:5e:f1:2f:95:96:b4:38:77:
03:14:9c:47:39:29:45:2b:e7:c7:a7:b4:91:93:5c:95:38:67:
66:b0:e1:c6:45:dd:aa:80:89:20:bb:41:e0:ef:4c:41:f8:5a:
76:ed:dc:dc:a9:98:36:5b:b6:53:61:92:00:15:5d:35:b7:eb:
ac:5f:19:3f:25:99:82:7c:2d:5a:97:b8:ad:cf:20:04:96:18:
96:62:69:fc:bf:97:38:37:93:57:35:f6:51:66:6a:42:a5:74:
37:ec:32:fe:4c:d9:63:06:dd:f9:fc:48:cb:bd:d3:d3:42:7d:
87:a7:f0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:19:39 2026 by rpki-client