
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E90FF22E6B0411EDAA478D5EC4F9AE02.roa
File: E90FF22E6B0411EDAA478D5EC4F9AE02.roa (raw, json)
Hash identifier: RQCj/3bVq5L4xJsMkRRbTfX7WmNfh6t4N8p8SSaaQJs=
Subject key identifier: 2B:54:43:8D:61:53:84:BB:20:00:1E:91:30:8F:5E:80:03:36:C6:24
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 5E57
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E90FF22E6B0411EDAA478D5EC4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:17:47 +0000
ROA not before: Thu 28 Aug 2025 14:54:58 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 149150
IP address blocks: 103.38.244.0/23 maxlen: 24
2400:c160::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24151 (0x5e57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:54:58 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a60c8b-615a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:55:7d:ec:e4:99:81:ad:24:59:e6:ee:16:8a:
e7:61:49:d5:ef:c0:93:0a:06:97:58:6f:9d:0f:15:
56:97:8d:95:67:8d:47:8f:b2:7f:69:24:b1:78:3a:
32:59:fb:12:46:4b:fd:d3:76:25:34:a2:ec:d0:cc:
38:27:6c:a0:de:4b:b4:06:fe:7a:57:9c:1e:56:50:
f9:be:c9:51:67:40:66:4d:be:f7:af:7b:14:53:e8:
dc:19:2b:cd:6a:cd:9e:44:2d:f8:6b:15:45:86:8d:
8b:c4:3e:63:ad:80:10:1e:20:14:f7:e8:86:10:31:
32:64:5a:2f:66:36:52:11:3b:21:9b:ae:25:b3:07:
bc:22:ce:c5:96:dd:db:05:ff:62:4c:87:e2:8f:2f:
87:45:c9:f4:39:60:d9:ad:6e:57:cc:15:cb:95:44:
67:fe:9b:a4:13:ad:5e:63:fc:ca:67:d1:8b:88:19:
a1:7b:d5:86:ee:ae:06:70:08:69:c0:b0:ab:12:7e:
15:38:58:b1:d2:57:53:d5:1d:48:6c:31:5a:c6:41:
eb:3d:db:27:2b:85:50:fa:6c:f3:eb:05:91:d7:aa:
bd:5e:c8:67:64:59:9c:4c:c1:03:56:39:9b:0b:62:
09:ea:19:4c:81:0e:51:ca:cb:c5:b8:2a:cb:34:9c:
14:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:54:43:8D:61:53:84:BB:20:00:1E:91:30:8F:5E:80:03:36:C6:24
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E90FF22E6B0411EDAA478D5EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.38.244.0/23
IPv6:
2400:c160::/48
Signature Algorithm: sha256WithRSAEncryption
6f:17:5e:83:aa:61:3b:d1:ce:8d:a0:02:44:34:9b:4e:0c:67:
00:0e:15:64:9e:a5:99:33:09:03:34:c5:13:f5:e5:70:bf:9a:
8c:9d:4c:56:41:9d:28:b3:7f:91:59:87:db:a7:29:89:0d:c5:
6d:04:e1:8b:ae:07:0d:77:51:0c:ba:3b:44:b2:e5:28:b6:e2:
8b:15:6d:5e:fc:8f:b3:db:d6:81:e8:ec:d3:64:3b:9b:1c:d4:
e4:ab:e5:ec:4b:86:33:22:bf:b0:98:86:dc:76:39:b7:80:9c:
a3:71:6c:2a:00:75:ec:7d:4f:39:a9:ca:8f:f9:c4:37:15:b8:
95:2f:6b:6a:5b:be:3e:ae:b2:c6:6a:59:31:61:13:4e:26:76:
00:27:3a:dc:74:85:9e:50:3d:35:78:89:01:8d:e4:93:bf:6b:
30:4e:e3:02:10:81:c6:a3:dc:4a:25:a4:c8:79:68:41:ab:8b:
c1:10:8b:74:c9:a5:a7:2d:d5:da:44:07:ed:5e:0e:08:ec:ba:
a2:8a:af:d1:f2:f6:a2:fe:a4:eb:c6:8c:5b:38:c3:a0:60:a9:
45:c6:54:b7:4c:7e:ef:61:bf:ad:74:da:3f:64:52:e4:33:dd:
be:52:93:35:9c:fa:9a:5a:03:01:e3:4d:7d:f1:8e:44:58:d2:
e1:17:e6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:47:07 2026 by rpki-client