
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/F164038CBBE211ED8685DC61C4F9AE02.roa
File: F164038CBBE211ED8685DC61C4F9AE02.roa (raw, json)
Hash identifier: tT9i1DbRbJsGaFhFIKWc3hF5z1oqGKKoTGSshBbumJ8=
Subject key identifier: 15:87:9D:F9:45:E6:58:19:EF:0F:25:80:04:C8:C7:0B:68:EF:4F:D2
Certificate issuer: /CN=A91BB5D3/serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
Certificate serial: 06CE
Authority key identifier: 05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/F164038CBBE211ED8685DC61C4F9AE02.roa
Signing time: Thu 02 Apr 2026 22:28:56 +0000
ROA not before: Thu 02 Apr 2026 22:28:56 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 54415
IP address blocks: 103.99.169.0/24 maxlen: 24
103.99.170.0/24 maxlen: 24
103.99.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl
rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1742 (0x6ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB5D3, serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
Validity
Not Before: Apr 2 22:28:56 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69ceeda8-39ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:26:db:61:cc:ce:3a:ed:9c:12:25:37:94:df:
c6:f6:c5:7b:1f:72:fa:43:82:63:96:eb:63:2d:17:
23:5c:91:bb:66:26:12:40:07:d0:c7:6d:e5:4f:cc:
db:f3:16:a2:22:92:aa:24:d3:c0:07:bf:3b:65:d4:
d4:15:28:97:68:26:c0:0c:a3:aa:ff:d9:00:a5:ec:
7c:b4:d0:cb:fe:82:85:3b:b8:74:aa:b8:5b:91:6b:
32:0c:0f:f9:3a:87:aa:eb:95:ad:4b:06:8b:5b:8e:
4c:c8:52:d3:79:97:d5:54:69:1a:00:98:df:cf:f1:
23:75:91:d7:14:fe:26:af:15:ae:97:50:30:3b:2a:
58:f4:6d:44:55:6e:4f:8e:43:bf:f0:3b:02:fd:60:
cb:77:b9:9a:37:4d:8f:9b:74:55:82:cf:cf:b7:25:
be:3d:e3:ec:3b:9a:3d:0a:df:38:ef:7d:12:7c:54:
ee:78:2b:4d:31:55:b3:3f:03:c1:42:0a:c7:2d:22:
69:fd:73:be:60:8b:2b:90:19:77:5b:31:f7:ec:3e:
60:7f:15:4b:d2:2c:39:a4:fb:4f:e3:69:24:2c:b8:
d3:14:ae:2d:ea:3d:60:c0:6b:31:a5:8c:ae:fd:63:
17:a8:c6:82:97:f1:2e:63:cb:d9:99:d5:0e:40:00:
93:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:87:9D:F9:45:E6:58:19:EF:0F:25:80:04:C8:C7:0B:68:EF:4F:D2
X509v3 Authority Key Identifier:
keyid:05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/F164038CBBE211ED8685DC61C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.99.169.0-103.99.171.255
Signature Algorithm: sha256WithRSAEncryption
43:4d:04:f2:3a:51:5f:7c:b7:b7:9e:0e:19:ee:c9:f2:c9:58:
b0:47:b4:c7:b4:34:d8:7f:96:02:cd:cc:1b:99:75:99:04:64:
b1:88:a2:5c:9c:ab:ca:d0:3c:5d:08:c9:d4:39:13:3d:e8:24:
d7:29:33:32:58:c6:ac:11:9d:b0:37:4f:82:ea:e2:3d:be:c7:
de:a0:12:17:f9:e1:13:7c:81:b6:0b:1c:cb:51:00:85:2a:b9:
32:a5:57:1d:c4:fa:5e:3d:89:be:2d:fc:35:54:c2:6f:d8:c6:
db:ba:b8:f3:d4:ba:d1:c6:ec:97:43:b1:b4:f9:49:16:11:4a:
aa:e7:9f:9b:df:6f:f1:ee:fa:af:e7:7a:12:6b:1d:c5:98:0e:
c3:4e:ee:54:57:24:47:23:3d:a3:db:38:da:c7:05:10:32:b2:
ea:67:35:08:33:2f:d5:58:76:41:b0:11:80:e5:7f:79:7b:a3:
37:da:d7:ca:55:ed:21:88:58:ab:16:7c:4c:9a:cd:e2:71:c3:
c7:d4:b2:a3:e3:7d:f5:ea:47:4a:80:05:66:27:58:db:d9:51:
db:ba:67:53:9f:8c:f2:56:40:64:6d:94:ae:2f:71:6e:60:59:
e2:21:f6:ac:d2:97:9a:f7:5f:d5:75:74:27:7e:3d:6f:99:18:
92:b0:b8:29
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgICBs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI1RDMxMTAvBgNVBAUTKDA1QzMyRjVENkZEOTU2N0NCNzAwMDVCMUQ3NEE0MUE4
NUI1QkU3MTIwHhcNMjYwNDAyMjIyODU2WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNlZWRhOC0zOWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsSbbYczOOu2cEiU3lN/G9sV7H3L6Q4JjlutjLRcjXJG7ZiYSQAfQx23lT8zb
8xaiIpKqJNPAB787ZdTUFSiXaCbADKOq/9kApex8tNDL/oKFO7h0qrhbkWsyDA/5
Ooeq65WtSwaLW45MyFLTeZfVVGkaAJjfz/EjdZHXFP4mrxWul1AwOypY9G1EVW5P
jkO/8DsC/WDLd7maN02Pm3RVgs/PtyW+PePsO5o9Ct84730SfFTueCtNMVWzPwPB
QgrHLSJp/XO+YIsrkBl3WzH37D5gfxVL0iw5pPtP42kkLLjTFK4t6j1gwGsxpYyu
/WMXqMaCl/EuY8vZmdUOQACTawIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFBWHnflF
5lgZ7w8lgATIxwto70/SMB8GA1UdIwQYMBaAFAXDL11v2VZ8twAFsddKQahbW+cS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjVEMy82Q0E5RDY5MEEx
QTgxMUVCODMyMTRDNzRDNEY5QUUwMi9CY012WFdfWlZueTNBQVd4MTBwQnFGdGI1
eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JjTXZYV19aVm55M0FBV3gxMHBCcUZ0YjV4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkI1RDMvNkNBOUQ2OTBBMUE4MTFFQjgzMjE0Qzc0QzRGOUFFMDIvRjE2NDAzOENC
QkUyMTFFRDg2ODVEQzYxQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU
BAIAATAOMAwDBABnY6kDBAJnY6gwDQYJKoZIhvcNAQELBQADggEBAENNBPI6UV98
t7eeDhnuyfLJWLBHtMe0NNh/lgLNzBuZdZkEZLGIolycq8rQPF0IydQ5Ez3oJNcp
MzJYxqwRnbA3T4Lq4j2+x96gEhf54RN8gbYLHMtRAIUquTKlVx3E+l49ib4t/DVU
wm/Yxtu6uPPUutHG7JdDsbT5SRYRSqrnn5vfb/Hu+q/nehJrHcWYDsNO7lRXJEcj
PaPbONrHBRAysupnNQgzL9VYdkGwEYDlf3l7ozfa18pV7SGIWKsWfEyazeJxw8fU
sqPjffXqR0qABWYnWNvZUdu6Z1OfjPJWQGRtlK4vcW5gWeIh9qzSl5r3X9V1dCd+
PW+ZGJKwuCk=
-----END CERTIFICATE-----
Generated at Mon Apr 6 12:44:50 2026 by rpki-client