
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/E40FA6ECA53A11F185933D3A4611F970.roa
File: E40FA6ECA53A11F185933D3A4611F970.roa (raw, json)
Hash identifier: LgJkzUYDs/93oe3f1rx4Ur7cXfh8aWj0lMvFUfeP3jU=
Subject key identifier: 11:80:84:01:87:EB:8F:77:6B:2A:FA:38:AC:6E:DF:71:3C:9C:99:9B
Certificate issuer: /CN=A91C572B/serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94
Certificate serial: 0270
Authority key identifier: DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/E40FA6ECA53A11F185933D3A4611F970.roa
Signing time: Mon 31 Aug 2026 12:52:58 +0000
ROA not before: Mon 31 Aug 2026 12:52:58 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 137868
IP address blocks: 103.225.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl
rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 02:03:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 624 (0x270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C572B, serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94
Validity
Not Before: Aug 31 12:52:58 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a95792a-5c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d0:2c:cd:3c:c8:c9:14:d0:e2:dc:58:47:7b:
c3:01:cc:3b:69:d6:3a:26:76:c1:b9:98:70:f5:9b:
92:1b:a3:0c:a1:b6:96:e7:d3:08:c5:ae:87:9c:26:
6e:e4:cd:f6:87:28:eb:5e:6d:0f:a1:04:08:34:73:
70:2d:35:c4:26:b7:aa:04:e2:2a:ab:28:c8:79:1e:
c3:38:09:df:ca:09:f6:ae:6b:39:eb:88:f2:54:ee:
ec:99:df:79:77:7d:50:e1:38:5a:1c:91:5c:d9:fc:
6c:b4:1e:97:ee:b1:53:4e:b5:4a:2e:58:e8:6d:d2:
a2:4e:4b:5d:43:a8:8f:95:b2:51:30:92:68:1c:b5:
39:99:d4:00:48:32:4d:7c:7f:22:df:fb:f2:c1:81:
27:6c:cc:70:c1:d3:34:89:4d:bc:df:16:bf:44:67:
23:07:5c:dc:eb:86:8a:50:6b:4c:5a:77:b7:77:99:
87:72:d4:0f:ac:ae:7c:0b:48:18:b9:cb:90:95:d6:
f4:de:e8:a8:37:c3:73:22:89:ad:51:28:80:a7:4c:
ce:4e:70:8b:63:b7:d3:cd:dd:30:19:be:f9:59:d9:
42:f4:a1:15:41:08:da:b4:71:99:cf:aa:a6:95:f4:
7a:96:42:da:6a:f7:bd:17:b5:a2:b7:88:ed:66:11:
65:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:80:84:01:87:EB:8F:77:6B:2A:FA:38:AC:6E:DF:71:3C:9C:99:9B
X509v3 Authority Key Identifier:
keyid:DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/E40FA6ECA53A11F185933D3A4611F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.225.219.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:f3:ac:34:4e:ba:ff:45:38:e5:1d:4d:2b:43:9f:44:e3:8a:
6c:b0:99:9e:b2:ac:10:82:e0:79:fa:d5:e6:80:43:ef:8c:74:
d3:be:9f:49:94:f8:f6:db:80:82:8f:a1:c8:d7:3d:27:56:ce:
c8:3c:4a:38:82:55:45:cf:c1:ad:10:cc:66:b7:92:e6:91:4e:
1d:bc:82:e3:74:ab:d4:5e:03:3b:b8:a6:81:74:0b:e9:45:24:
28:9d:e4:f2:ac:9b:7e:70:65:8b:07:64:b6:04:04:72:9c:df:
7a:dd:ed:80:00:b4:fc:81:1b:b9:a1:3a:9b:e8:6f:d9:b6:a1:
b5:37:87:a8:b1:73:ad:29:31:c2:3f:56:8b:70:83:99:e0:5c:
8e:8f:57:55:b8:f7:b7:e5:e6:5d:d7:ba:ed:8b:9c:79:ab:cf:
28:c5:50:c5:ec:6a:26:62:7f:50:c6:46:a6:fc:4b:46:21:c4:
76:36:e6:23:6f:b4:1b:44:72:5b:38:d0:b2:b0:49:3a:41:0b:
ca:85:83:c7:c3:41:37:78:b3:9e:4e:48:82:4d:08:74:57:3d:
43:66:38:ff:22:8f:f3:86:a8:98:85:a4:ff:67:82:b5:4c:93:
c1:12:66:1e:79:ba:c1:8d:36:f7:4b:49:23:00:8e:68:d6:09:
1f:88:d8:cb
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzU3MkIxMTAvBgNVBAUTKERGNzlDM0JBMDE1MjYxRTNBQzg0MzIzOUNFNDcwMzU5
MDFENjZBOTQwHhcNMjYwODMxMTI1MjU4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk1NzkyYS01YzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwdAszTzIyRTQ4txYR3vDAcw7adY6JnbBuZhw9ZuSG6MMobaW59MIxa6HnCZu
5M32hyjrXm0PoQQINHNwLTXEJreqBOIqqyjIeR7DOAnfygn2rms564jyVO7smd95
d31Q4ThaHJFc2fxstB6X7rFTTrVKLljobdKiTktdQ6iPlbJRMJJoHLU5mdQASDJN
fH8i3/vywYEnbMxwwdM0iU283xa/RGcjB1zc64aKUGtMWne3d5mHctQPrK58C0gY
ucuQldb03uioN8NzIomtUSiAp0zOTnCLY7fTzd0wGb75WdlC9KEVQQjatHGZz6qm
lfR6lkLaave9F7Wit4jtZhFl5wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBGAhAGH
6493ayr6OKxu33E8nJmbMB8GA1UdIwQYMBaAFN95w7oBUmHjrIQyOc5HA1kB1mqU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTcyQi9GN0U1QzE2ODBF
OUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1llT3NoREk1emtjRFdRSFdh
cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzMzbkR1Z0ZTWWVPc2hESTV6a2NEV1FIV2FwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzU3MkIvRjdFNUMxNjgwRTlBMTFFRUE2NDQ5RTcxQzRGOUFFMDIvRTQwRkE2RUNB
NTNBMTFGMTg1OTMzRDNBNDYxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ+HbMA0GCSqGSIb3DQEBCwUAA4IBAQB/86w0Trr/RTjlHU0rQ59E
44pssJmesqwQguB5+tXmgEPvjHTTvp9JlPj224CCj6HI1z0nVs7IPEo4glVFz8Gt
EMxmt5LmkU4dvILjdKvUXgM7uKaBdAvpRSQoneTyrJt+cGWLB2S2BARynN963e2A
ALT8gRu5oTqb6G/ZtqG1N4eosXOtKTHCP1aLcIOZ4FyOj1dVuPe35eZd17rti5x5
q88oxVDF7GomYn9Qxkam/EtGIcR2NuYjb7QbRHJbONCysEk6QQvKhYPHw0E3eLOe
TkiCTQh0Vz1DZjj/Io/zhqiYhaT/Z4K1TJPBEmYeebrBjTb3S0kjAI5o1gkfiNjL
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:32:38 2026 by rpki-client