
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FF720066912211EF9222B024C4F9AE02.roa
File: FF720066912211EF9222B024C4F9AE02.roa (raw, json)
Hash identifier: AwEfTh/Cw8DyeRZQI2lYOrPGoJmlEkUf2RUSknbJsXk=
Subject key identifier: AC:25:1C:D3:ED:3E:3D:6E:1D:1B:9A:B5:76:98:4E:A6:41:BA:77:67
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6F30
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FF720066912211EF9222B024C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:37:04 +0000
ROA not before: Fri 02 Oct 2026 15:37:04 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 56153
IP address blocks: 103.97.124.0/24 maxlen: 24
103.97.125.0/24 maxlen: 24
103.97.126.0/24 maxlen: 24
103.97.127.0/24 maxlen: 24
103.255.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 10:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28464 (0x6f30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:37:04 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcfa0-514c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:22:8f:f0:eb:2e:91:1a:28:bd:cb:72:f4:
f0:75:82:f6:9c:21:1c:a0:53:1b:18:68:ce:65:5e:
fb:45:3b:07:f3:bf:a1:ed:22:52:46:3d:0a:ae:f1:
3d:2d:29:98:b4:01:fd:55:6e:a9:d8:41:5d:63:db:
da:3e:d0:05:d5:4d:17:95:5c:e9:b1:33:d4:bc:f2:
8e:9a:33:b4:82:f3:9a:48:b0:54:e5:7b:66:68:37:
e2:24:5d:1f:69:0b:63:22:99:d3:d0:e4:34:8e:25:
cc:6b:da:34:19:8d:f7:ef:40:52:7e:28:1c:0d:a8:
c2:a5:27:40:4e:46:5e:63:16:0d:e0:9c:3f:72:a6:
0b:31:cf:23:2f:29:a1:48:86:56:24:6a:57:96:55:
17:19:89:27:ac:f9:cb:1a:45:fa:cf:51:f3:af:33:
b7:45:94:9e:64:3d:84:76:ef:d1:c6:54:31:cf:ac:
fa:9e:85:d9:de:7b:53:5a:0d:d6:96:49:e2:8d:24:
17:57:c5:ec:8e:00:90:6e:1b:15:91:b9:a7:5c:28:
ac:71:1c:0a:31:58:96:9a:2c:a3:c1:94:fd:4a:b6:
45:75:1e:21:34:7e:54:18:26:7e:ce:85:3a:14:e6:
5f:42:02:58:f0:7f:71:3d:82:f2:76:7d:b9:b7:ff:
42:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:25:1C:D3:ED:3E:3D:6E:1D:1B:9A:B5:76:98:4E:A6:41:BA:77:67
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FF720066912211EF9222B024C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.97.124.0/22
103.255.238.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:72:2e:9a:fb:c3:67:f0:ac:11:3f:b0:fd:a5:81:87:bd:ab:
e1:b6:93:fc:e2:95:6a:2c:8c:e5:86:04:64:be:70:a8:70:75:
0e:93:2c:ac:38:4c:a1:49:10:31:10:91:8c:5f:3d:a0:be:11:
06:59:e4:f2:02:9c:46:a2:62:98:43:bb:dc:3e:45:33:1c:3a:
1d:46:8c:72:a2:db:86:f9:0e:03:f2:eb:70:fa:c8:38:8f:e8:
72:9e:0a:ba:97:96:b1:74:99:d3:7c:43:69:76:aa:56:9e:23:
ad:53:e2:ef:59:6d:2a:05:0e:51:40:3b:50:90:08:ea:02:b2:
7e:f9:a0:64:6a:ce:59:4a:21:83:be:84:e3:70:f3:02:b0:93:
87:57:98:63:81:a9:f6:a9:8a:91:5c:ad:ca:b1:d1:31:6b:b2:
f6:3a:d1:f3:54:02:c2:c7:ef:2a:89:3c:08:7b:fb:94:dd:94:
95:51:c3:2d:52:e3:41:ed:4c:1f:98:e2:4c:18:4b:45:4e:be:
79:f3:ba:a9:db:f6:4f:fe:62:ff:54:23:fd:b1:96:22:84:33:
99:a3:a7:44:bc:7f:2f:de:e0:58:98:65:4a:c0:13:9b:26:cb:
b2:8d:ee:a3:cf:64:9e:1e:84:57:48:d8:4a:53:45:b0:e2:45:
84:8a:9f:33
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICbzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYxMDAyMTUzNzA0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2ZhMC01MTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuVgij/DrLpEaKL3LcvTwdYL2nCEcoFMbGGjOZV77RTsH87+h7SJSRj0KrvE9
LSmYtAH9VW6p2EFdY9vaPtAF1U0XlVzpsTPUvPKOmjO0gvOaSLBU5XtmaDfiJF0f
aQtjIpnT0OQ0jiXMa9o0GY3370BSfigcDajCpSdATkZeYxYN4Jw/cqYLMc8jLymh
SIZWJGpXllUXGYknrPnLGkX6z1HzrzO3RZSeZD2Edu/RxlQxz6z6noXZ3ntTWg3W
lknijSQXV8XsjgCQbhsVkbmnXCiscRwKMViWmiyjwZT9SrZFdR4hNH5UGCZ+zoU6
FOZfQgJY8H9xPYLydn25t/9CYQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFKwlHNPt
Pj1uHRuatXaYTqZBundnMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRkY3MjAwNjY5
MTIyMTFFRjkyMjJCMDI0QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCZ2F8AwQAZ//uMA0GCSqGSIb3DQEBCwUAA4IBAQANci6a+8Nn8KwR
P7D9pYGHvavhtpP84pVqLIzlhgRkvnCocHUOkyysOEyhSRAxEJGMXz2gvhEGWeTy
ApxGomKYQ7vcPkUzHDodRoxyotuG+Q4D8utw+sg4j+hyngq6l5axdJnTfENpdqpW
niOtU+LvWW0qBQ5RQDtQkAjqArJ++aBkas5ZSiGDvoTjcPMCsJOHV5hjgan2qYqR
XK3KsdExa7L2OtHzVALCx+8qiTwIe/uU3ZSVUcMtUuNB7UwfmOJMGEtFTr5587qp
2/ZP/mL/VCP9sZYihDOZo6dEvH8v3uBYmGVKwBObJsuyje6jz2SeHoRXSNhKU0Ww
4kWEip8z
-----END CERTIFICATE-----
Generated at Sat Oct 24 12:27:09 2026 by rpki-client