
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/A0841A68D0D511EC81001E73C4F9AE02.roa
File: A0841A68D0D511EC81001E73C4F9AE02.roa (raw, json)
Hash identifier: JU2R1iWegqyOEY3wh1qfZrk7NhgHNN+31mJpziiTlZc=
Subject key identifier: 19:79:CF:51:1D:39:0E:88:6C:7A:96:80:B8:9C:72:06:02:05:BE:2F
Certificate issuer: /CN=A91CE6C5/serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC
Certificate serial: 03D0
Authority key identifier: D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/A0841A68D0D511EC81001E73C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:25:34 +0000
ROA not before: Thu 04 Dec 2025 23:38:16 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 132742
IP address blocks: 103.80.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl
rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 00:08:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 976 (0x3d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE6C5, serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC
Validity
Not Before: Dec 4 23:38:16 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a44c5d-dd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:33:27:60:4f:c8:dc:fb:9d:27:22:60:76:28:
39:7e:b7:71:fd:95:e0:1e:10:b7:19:8d:e5:b9:34:
60:d9:d6:0b:c5:ea:d5:fe:c4:fd:3d:a6:80:42:47:
82:b8:e8:1b:12:f8:a6:51:3d:52:b0:a1:eb:e8:20:
e8:f9:6b:51:06:4f:cc:5a:5b:a1:33:dd:7d:25:65:
50:86:c3:4f:d4:1d:c4:a2:8a:8f:e4:ea:53:a8:4d:
d9:e2:71:f0:f9:22:9e:3a:49:c3:e2:9e:a7:8d:5a:
79:9e:cd:d8:f8:15:ba:42:00:05:9d:9f:50:82:e2:
ae:bb:71:7f:c2:51:f1:f2:70:92:d0:32:34:40:08:
b5:d6:b3:c2:07:30:56:10:1f:24:ac:b4:d1:df:ef:
92:a6:95:16:48:94:32:d0:e4:82:0d:9b:1d:91:65:
b1:d3:fa:59:c9:ca:e6:fd:de:ea:d4:42:b6:1b:0e:
d3:a4:3f:03:40:41:92:e6:8d:87:08:6e:08:76:f8:
8d:b6:95:30:ee:64:d3:ca:f0:d6:9c:1c:72:bb:eb:
dc:e6:f2:bb:d1:6d:51:06:71:ea:9f:98:63:04:b0:
fd:e3:de:e0:c5:f7:c6:26:0e:2e:6c:1b:3a:56:49:
3d:43:4a:42:96:62:bd:62:3e:5f:20:e5:e2:d9:cd:
7c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:79:CF:51:1D:39:0E:88:6C:7A:96:80:B8:9C:72:06:02:05:BE:2F
X509v3 Authority Key Identifier:
keyid:D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/A0841A68D0D511EC81001E73C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.80.144.0/22
Signature Algorithm: sha256WithRSAEncryption
42:d9:5c:a4:e5:8c:b2:83:f3:f0:7a:b2:51:25:ee:97:df:07:
de:b2:51:88:95:2f:48:84:62:7f:d1:2e:fd:db:2d:94:c8:79:
f2:44:2c:d0:4c:6c:79:cb:de:75:65:2b:e4:e4:1d:ee:ea:f6:
63:9d:9c:89:b6:08:0f:09:41:1c:cc:ef:ad:f5:4c:39:f6:55:
4d:e5:f9:bf:e3:e5:46:ba:e1:fc:95:a5:79:b1:e3:18:44:be:
1a:db:05:d0:e1:42:d6:e5:66:45:39:da:98:df:8b:a4:80:a3:
6a:9b:b4:ef:5f:dd:19:da:26:c5:7e:b4:90:40:8c:86:8d:78:
88:40:06:6d:f7:d7:b9:a0:32:44:f3:e5:00:37:27:c2:a7:be:
c6:63:4b:0e:6e:a2:06:15:57:ff:0a:06:24:07:db:84:a1:fc:
2d:27:c2:19:fa:14:76:6b:5f:87:c4:df:c6:0e:15:34:98:7b:
1d:d2:2e:86:40:01:bb:84:5a:1a:26:81:ec:b4:06:92:bc:ce:
16:08:b9:c6:81:31:c0:5c:0e:9b:92:9a:78:cc:33:5b:5d:8e:
f6:45:7a:dd:49:70:a7:1f:8e:c3:22:25:27:43:b8:92:ce:ad:
0d:7c:ad:c2:25:8f:f6:65:a2:c0:9b:17:42:f7:55:ca:34:87:
1b:fd:2a:b2
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICA9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U2QzUxMTAvBgNVBAUTKEQ1MjhGQUQ0Qjg3NkFCRkI3MEFGMzg5MjIyMEYyOTNF
MTc5MUI2QkMwHhcNMjUxMjA0MjMzODE2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NGM1ZC1kZDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmjMnYE/I3PudJyJgdig5frdx/ZXgHhC3GY3luTRg2dYLxerV/sT9PaaAQkeC
uOgbEvimUT1SsKHr6CDo+WtRBk/MWluhM919JWVQhsNP1B3EooqP5OpTqE3Z4nHw
+SKeOknD4p6njVp5ns3Y+BW6QgAFnZ9QguKuu3F/wlHx8nCS0DI0QAi11rPCBzBW
EB8krLTR3++SppUWSJQy0OSCDZsdkWWx0/pZycrm/d7q1EK2Gw7TpD8DQEGS5o2H
CG4IdviNtpUw7mTTyvDWnBxyu+vc5vK70W1RBnHqn5hjBLD9497gxffGJg4ubBs6
Vkk9Q0pClmK9Yj5fIOXi2c18KwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBl5z1Ed
OQ6IbHqWgLiccgYCBb4vMB8GA1UdIwQYMBaAFNUo+tS4dqv7cK84kiIPKT4Xkba8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTZDNS9FODI2NjAyMEM2
QzAxMUVDOEFCNzU1M0ZDNEY5QUUwMi8xU2o2MUxoMnFfdHdyemlTSWc4cFBoZVJ0
cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFTajYxTGgycV90d3J6aVNJZzhwUGhlUnRydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0U2QzUvRTgyNjYwMjBDNkMwMTFFQzhBQjc1NTNGQzRGOUFFMDIvQTA4NDFBNjhE
MEQ1MTFFQzgxMDAxRTczQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ1CQMA0GCSqGSIb3DQEBCwUAA4IBAQBC2Vyk5Yyyg/PwerJRJe6X
3wfeslGIlS9IhGJ/0S792y2UyHnyRCzQTGx5y951ZSvk5B3u6vZjnZyJtggPCUEc
zO+t9Uw59lVN5fm/4+VGuuH8laV5seMYRL4a2wXQ4ULW5WZFOdqY34ukgKNqm7Tv
X90Z2ibFfrSQQIyGjXiIQAZt99e5oDJE8+UANyfCp77GY0sObqIGFVf/CgYkB9uE
ofwtJ8IZ+hR2a1+HxN/GDhU0mHsd0i6GQAG7hFoaJoHstAaSvM4WCLnGgTHAXA6b
kpp4zDNbXY72RXrdSXCnH47DIiUnQ7iSzq0NfK3CJY/2ZaLAmxdC91XKNIcb/Sqy
-----END CERTIFICATE-----
Generated at Sat Mar 21 22:44:25 2026 by rpki-client