
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/C170DB5816FE11F18F088F02403D8C67.roa
File: C170DB5816FE11F18F088F02403D8C67.roa (raw, json)
Hash identifier: cC+R4HBFdeZr2wyzG6w8cE3caNzmH76gfb0agzTkqxs=
Subject key identifier: F6:49:8D:65:34:C4:6C:33:7C:37:B0:B0:42:13:F0:A9:CD:5F:4A:5D
Certificate issuer: /CN=A91C9FA5/serialNumber=ADD16C777F85AC33283497F96866B95F7C5A788F
Certificate serial: 05
Authority key identifier: AD:D1:6C:77:7F:85:AC:33:28:34:97:F9:68:66:B9:5F:7C:5A:78:8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/C170DB5816FE11F18F088F02403D8C67.roa
Signing time: Tue 03 Mar 2026 12:44:45 +0000
ROA not before: Tue 03 Mar 2026 12:44:45 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 401783
IP address blocks: 103.227.166.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl
rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Mar 2026 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9FA5, serialNumber=ADD16C777F85AC33283497F96866B95F7C5A788F
Validity
Not Before: Mar 3 12:44:45 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a6d7bd-bf58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b2:7a:8e:68:8f:71:74:bc:3f:9e:f0:0c:a2:
0e:d3:d6:57:76:2b:40:f0:19:6c:e8:a7:df:da:bf:
2c:e5:52:7e:3b:b5:f7:cb:74:b9:97:a8:44:34:93:
27:a0:0c:54:75:35:94:7b:a4:50:4a:a3:ab:aa:57:
e5:a5:a2:dc:50:9b:8d:11:70:f7:fc:e7:14:e0:d3:
ce:86:b4:e0:65:6a:49:42:6a:06:d9:a4:ac:77:be:
f4:13:fb:f5:bd:49:91:7b:98:4e:37:2e:35:52:74:
47:fb:1c:01:a3:d5:22:e7:63:85:bc:ac:e6:50:bb:
08:5a:c7:43:d7:6b:bf:7a:9b:25:4c:c6:1f:16:51:
3e:da:0a:c2:f7:1a:3b:6a:46:12:d0:a1:82:8d:cf:
13:c3:af:58:79:58:ee:15:ac:a7:f2:4d:74:76:a6:
fd:76:89:f7:34:dd:10:ed:46:0c:18:b0:ca:1e:97:
7d:63:aa:0e:c2:4c:5b:63:85:29:9b:e9:47:17:2f:
75:2c:f5:6c:ee:d0:69:97:24:4f:62:69:15:fc:2f:
74:fc:7a:7f:04:4a:54:c7:38:fc:ec:1d:b4:81:49:
37:20:3e:59:77:07:de:0f:f7:b3:02:03:c7:c5:30:
a6:cb:fa:33:4b:1d:71:ab:03:72:56:22:b1:e3:d8:
e7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:49:8D:65:34:C4:6C:33:7C:37:B0:B0:42:13:F0:A9:CD:5F:4A:5D
X509v3 Authority Key Identifier:
keyid:AD:D1:6C:77:7F:85:AC:33:28:34:97:F9:68:66:B9:5F:7C:5A:78:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/C170DB5816FE11F18F088F02403D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.227.166.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:dc:d1:50:59:b6:92:04:97:1d:f9:7d:4a:10:89:a3:af:0b:
d1:cb:fe:22:47:20:46:2a:f7:c5:ab:48:79:de:49:e8:f5:7d:
4b:2b:e1:00:91:fd:61:97:97:3d:e6:e6:0a:98:71:9b:35:24:
5f:3e:ab:c1:b6:c2:14:68:97:74:e8:ad:c3:f4:6d:db:5a:e6:
e3:73:bd:9e:45:56:c4:64:04:eb:f1:f2:bd:b7:e0:05:19:f9:
4a:ff:a7:91:f2:3f:f6:0e:54:69:97:58:f2:ac:69:b1:5d:f7:
7f:7f:c0:30:8f:31:f0:c9:8c:7b:e3:b2:14:7d:6a:16:49:6e:
75:77:8d:eb:f8:72:c1:1c:da:26:55:21:e5:5f:03:e9:5f:75:
c1:d7:31:6a:49:06:37:11:5d:39:de:3d:5f:90:d2:27:37:52:
08:d7:f7:2e:f7:13:25:60:5d:b7:e8:40:19:55:1e:e1:a9:10:
9c:d8:bb:3f:15:27:ec:83:3a:9a:4f:ed:27:13:4a:ee:58:14:
3e:41:dc:b8:08:a0:df:6c:a3:3a:bc:47:e0:93:c2:61:19:3e:
c0:17:4f:ba:f7:48:bd:fc:15:6d:2d:71:cf:c8:39:a2:60:3a:
2f:33:bf:d2:04:8c:d2:9a:58:ba:5d:ed:38:f6:41:9a:7e:dd:
80:17:5d:75
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 5 14:01:43 2026 by rpki-client