
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/127F1908BD1511F1860661804911F970.roa
File: 127F1908BD1511F1860661804911F970.roa (raw, json)
Hash identifier: x+vRQV8WEpB3oldU7bR52Tz3VssmUYt79rNlNFMR9Ek=
Subject key identifier: 50:AD:72:AF:35:26:51:95:67:DE:B6:0D:09:0A:BE:C5:C4:14:66:CB
Certificate issuer: /CN=A91C17A9/serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6
Certificate serial: 0658
Authority key identifier: 53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/127F1908BD1511F1860661804911F970.roa
Signing time: Wed 30 Sep 2026 21:22:43 +0000
ROA not before: Wed 30 Sep 2026 21:22:43 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 152605
IP address blocks: 103.167.162.0/24 maxlen: 24
103.167.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl
rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 22:36:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1624 (0x658)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C17A9, serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6
Validity
Not Before: Sep 30 21:22:43 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6abd7da3-bc0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:47:b6:e1:d7:43:b9:c6:08:a1:02:49:2b:40:
59:01:a9:cb:5e:ff:fa:9a:29:35:ef:7b:e0:91:d4:
88:f9:b6:f8:d9:53:92:36:eb:7c:1a:af:87:f4:fa:
69:d1:6d:ba:a0:0c:aa:4e:e9:fa:ce:f3:11:07:25:
b2:b5:ca:d6:d7:4f:1d:37:6b:6e:87:0c:17:21:1d:
bb:33:df:03:88:57:1b:0b:e2:8b:30:1e:1d:46:96:
d5:6e:71:04:3b:db:08:de:0a:90:c2:ac:89:75:fd:
43:9e:00:cd:d1:bf:6c:23:6d:3d:84:5e:76:86:b2:
10:80:37:f9:01:3c:09:3f:57:cc:e5:69:d3:8c:70:
f1:7c:7b:9b:50:5f:a5:6d:f9:a8:f3:73:5e:38:90:
73:59:7b:59:d6:db:c6:c1:0f:f7:f3:c8:e3:a7:b1:
5e:b1:ba:37:3c:43:24:4d:b5:1f:29:5f:a4:96:d9:
c8:bb:ea:63:93:10:4b:fa:42:28:b1:25:14:e1:fe:
4b:70:1a:09:18:fe:78:b5:83:3f:dc:4a:73:6d:e0:
db:6f:e9:56:a4:19:93:fd:8e:4e:14:b7:44:9d:11:
68:35:11:4b:3e:4f:75:0a:01:2e:64:d5:49:74:c1:
54:98:0b:1d:65:7d:5e:fc:21:4c:f2:35:fc:6a:c1:
12:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AD:72:AF:35:26:51:95:67:DE:B6:0D:09:0A:BE:C5:C4:14:66:CB
X509v3 Authority Key Identifier:
keyid:53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/127F1908BD1511F1860661804911F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.167.162.0/23
Signature Algorithm: sha256WithRSAEncryption
41:df:61:b4:6d:2c:74:46:58:b3:9c:bc:34:45:7d:b3:04:09:
1b:8d:09:8f:b1:e3:58:25:56:8d:09:a3:7f:0d:f2:ab:83:62:
2c:6b:18:61:1d:8d:fa:d6:0d:09:b3:32:13:c6:77:c6:71:a1:
1b:41:43:26:13:c9:f0:6e:e4:41:93:46:b3:77:1a:03:b4:28:
e8:54:f1:16:7e:bb:04:da:e7:ee:a0:24:2c:69:94:4f:64:30:
bb:26:3f:85:d1:d5:22:c8:f5:11:8d:03:1a:90:9f:f7:c8:c7:
10:98:9d:d3:3b:d2:bc:81:13:b7:67:f4:ea:d3:31:f4:1d:66:
c2:98:e8:02:ba:ac:d2:81:0d:fa:85:e0:4b:16:bf:fa:1e:67:
a6:4d:2a:af:9e:02:a2:5c:f5:70:7c:9a:37:c5:fd:fc:4c:ec:
4f:b3:40:a2:93:7c:70:b1:cf:6a:d5:aa:57:2f:3d:2e:2f:d1:
ce:fc:29:15:34:a0:bd:5b:fc:35:c6:95:00:87:5a:b2:7d:f7:
35:65:01:ba:d7:51:c9:9d:19:a6:8f:3f:fa:0c:32:7d:87:45:
06:9e:68:a4:cc:92:d4:e8:1b:c9:30:1a:06:3d:6d:75:07:57:
10:ab:2e:7a:cc:04:8f:a4:99:7a:aa:38:86:27:2b:e4:4d:30:
b0:e3:ab:1e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzE3QTkxMTAvBgNVBAUTKDUzOTRFNTdEMjg1Nzc3RkQ3NTE0MjhEMTVDQjBGQjJG
QzU5MkM3QTYwHhcNMjYwOTMwMjEyMjQzWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJkN2RhMy1iYzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtEe24ddDucYIoQJJK0BZAanLXv/6mik173vgkdSI+bb42VOSNut8Gq+H9Ppp
0W26oAyqTun6zvMRByWytcrW108dN2tuhwwXIR27M98DiFcbC+KLMB4dRpbVbnEE
O9sI3gqQwqyJdf1DngDN0b9sI209hF52hrIQgDf5ATwJP1fM5WnTjHDxfHubUF+l
bfmo83NeOJBzWXtZ1tvGwQ/388jjp7Fesbo3PEMkTbUfKV+kltnIu+pjkxBL+kIo
sSUU4f5LcBoJGP54tYM/3EpzbeDbb+lWpBmT/Y5OFLdEnRFoNRFLPk91CgEuZNVJ
dMFUmAsdZX1e/CFM8jX8asESJwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFCtcq81
JlGVZ962DQkKvsXEFGbLMB8GA1UdIwQYMBaAFFOU5X0oV3f9dRQo0Vyw+y/Fksem
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTdBOS81Rjg5RjZFQ0ZC
MzExMUVCOEZCRkE1NTlDNEY5QUUwMi9VNVRsZlNoWGRfMTFGQ2pSWExEN0w4V1N4
NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1U1VGxmU2hYZF8xMUZDalJYTEQ3TDhXU3g2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzE3QTkvNUY4OUY2RUNGQjMxMTFFQjhGQkZBNTU5QzRGOUFFMDIvMTI3RjE5MDhC
RDE1MTFGMTg2MDY2MTgwNDkxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ6eiMA0GCSqGSIb3DQEBCwUAA4IBAQBB32G0bSx0RliznLw0RX2z
BAkbjQmPseNYJVaNCaN/DfKrg2IsaxhhHY361g0JszITxnfGcaEbQUMmE8nwbuRB
k0azdxoDtCjoVPEWfrsE2ufuoCQsaZRPZDC7Jj+F0dUiyPURjQMakJ/3yMcQmJ3T
O9K8gRO3Z/Tq0zH0HWbCmOgCuqzSgQ36heBLFr/6HmemTSqvngKiXPVwfJo3xf38
TOxPs0Cik3xwsc9q1apXLz0uL9HO/CkVNKC9W/w1xpUAh1qyffc1ZQG611HJnRmm
jz/6DDJ9h0UGnmikzJLU6BvJMBoGPW11B1cQqy56zASPpJl6qjiGJyvkTTCw46se
-----END CERTIFICATE-----
Generated at Wed Oct 28 04:59:22 2026 by rpki-client