
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/C458350E979C11EC8E769C43C4F9AE02.roa
File: C458350E979C11EC8E769C43C4F9AE02.roa (raw, json)
Hash identifier: wOy6heD304ZYKXHgXC6sjOSWrBhnhYKkUolhpPmInz4=
Subject key identifier: 28:3A:B3:41:DE:C6:AA:BE:EF:64:DD:22:6F:EF:F6:35:75:79:11:0A
Certificate issuer: /CN=A91D4636/serialNumber=B4684E0D622CB9AFD12CB5FA3E4885DFCD85004D
Certificate serial: 04C1
Authority key identifier: B4:68:4E:0D:62:2C:B9:AF:D1:2C:B5:FA:3E:48:85:DF:CD:85:00:4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGhODWIsua_RLLX6PkiF382FAE0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/C458350E979C11EC8E769C43C4F9AE02.roa
Signing time: Sat 03 Oct 2026 00:48:11 +0000
ROA not before: Sat 03 Oct 2026 00:48:11 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 139659
IP address blocks: 103.143.80.0/24 maxlen: 24
103.143.81.0/24 maxlen: 24
2001:df1:7880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.crl
rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGhODWIsua_RLLX6PkiF382FAE0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 00:05:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1217 (0x4c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4636, serialNumber=B4684E0D622CB9AFD12CB5FA3E4885DFCD85004D
Validity
Not Before: Oct 3 00:48:11 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ac050cb-bc0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:31:cc:be:76:bf:cb:b9:10:ef:d8:8a:27:10:
50:cb:3a:18:8f:32:e8:c3:4e:57:df:b8:45:e0:51:
00:8e:0f:a0:84:90:60:ef:01:c3:19:06:64:e6:6a:
b7:cc:f1:3a:84:aa:d4:42:67:22:ea:b7:77:e7:19:
91:94:7b:ab:12:81:b0:7c:8f:38:81:2e:a9:bb:f0:
d2:b9:ba:90:df:da:3a:c8:fe:cc:3b:09:1d:a5:83:
70:f4:2b:c1:ca:2c:f5:15:68:22:60:40:cb:e1:08:
ca:53:ff:c6:d1:73:9a:ff:46:23:b5:d1:d6:93:08:
98:72:e6:fc:a5:ad:91:f3:3d:65:e2:3a:e2:12:0b:
d9:53:17:75:90:4f:8c:8a:1d:13:35:31:e9:46:25:
e8:d6:7f:ee:80:8c:ad:64:2d:75:97:90:fb:6f:1c:
33:3f:dc:15:04:0f:46:30:a0:22:77:a8:eb:81:f4:
69:13:20:e5:72:28:1f:41:42:0a:df:6e:61:f6:60:
18:7c:79:d4:be:dd:48:31:d9:12:87:2a:00:ac:d0:
0b:70:53:44:91:10:22:f2:6a:c3:c8:bf:cb:03:7f:
05:4a:05:c3:25:6e:8f:68:62:50:32:27:48:bc:72:
c5:23:0e:35:e5:f8:26:85:ed:31:23:a7:10:34:d1:
fb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3A:B3:41:DE:C6:AA:BE:EF:64:DD:22:6F:EF:F6:35:75:79:11:0A
X509v3 Authority Key Identifier:
keyid:B4:68:4E:0D:62:2C:B9:AF:D1:2C:B5:FA:3E:48:85:DF:CD:85:00:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGhODWIsua_RLLX6PkiF382FAE0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/C458350E979C11EC8E769C43C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.143.80.0/23
IPv6:
2001:df1:7880::/48
Signature Algorithm: sha256WithRSAEncryption
80:e0:0f:5a:22:f8:fd:ff:55:14:d3:56:26:34:39:a2:25:9e:
37:fc:a3:a3:fa:a0:1b:73:60:96:c6:06:3a:74:ab:bf:fe:f6:
c5:05:da:cd:6a:6c:08:7c:20:e5:ab:1a:d9:a2:c5:1a:7b:d5:
bb:0a:fb:7e:7d:34:27:c2:7c:e3:43:1d:d1:3d:e2:03:2f:23:
b4:d6:c1:17:04:33:76:ea:4f:33:16:25:0e:5c:2b:07:eb:19:
5d:3c:25:33:04:5f:e6:99:51:14:8c:e1:2e:d4:8f:8e:fa:14:
4c:eb:71:ad:30:14:8a:da:82:45:5f:9b:09:82:7e:51:f6:8c:
16:51:d6:10:42:16:55:35:ba:d7:f1:85:5c:b2:56:ac:c7:05:
33:ec:d5:40:90:56:a2:46:24:9b:d7:a3:11:68:a6:ee:e0:e7:
a3:20:e2:0a:93:83:a4:59:9e:cc:37:7a:63:b8:c2:a4:f1:46:
fb:d7:46:c1:3b:e2:20:d0:10:fc:48:dd:5d:1c:d7:61:70:25:
2a:db:a6:9a:71:a7:a3:81:60:75:0c:97:82:53:3b:62:86:52:
41:57:da:c7:ba:a7:cc:2c:f6:68:3a:fb:fa:64:0e:96:ee:48:
6b:ab:da:9c:61:b5:96:52:7b:93:fe:51:aa:bf:a7:5c:60:8c:
36:e5:fc:e7
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICBMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQ2MzYxMTAvBgNVBAUTKEI0Njg0RTBENjIyQ0I5QUZEMTJDQjVGQTNFNDg4NURG
Q0Q4NTAwNEQwHhcNMjYxMDAzMDA0ODExWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWMwNTBjYi1iYzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqTHMvna/y7kQ79iKJxBQyzoYjzLow05X37hF4FEAjg+ghJBg7wHDGQZk5mq3
zPE6hKrUQmci6rd35xmRlHurEoGwfI84gS6pu/DSubqQ39o6yP7MOwkdpYNw9CvB
yiz1FWgiYEDL4QjKU//G0XOa/0YjtdHWkwiYcub8pa2R8z1l4jriEgvZUxd1kE+M
ih0TNTHpRiXo1n/ugIytZC11l5D7bxwzP9wVBA9GMKAid6jrgfRpEyDlcigfQUIK
325h9mAYfHnUvt1IMdkShyoArNALcFNEkRAi8mrDyL/LA38FSgXDJW6PaGJQMidI
vHLFIw415fgmhe0xI6cQNNH7JwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFCg6s0He
xqq+72TdIm/v9jV1eREKMB8GA1UdIwQYMBaAFLRoTg1iLLmv0Sy1+j5Ihd/NhQBN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYzNi8yQzlCQzMzQzk3
OTkxMUVDQkU3MjVBM0NDNEY5QUUwMi90R2hPRFdJc3VhX1JMTFg2UGtpRjM4MkZB
RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RHaE9EV0lzdWFfUkxMWDZQa2lGMzgyRkFFMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDQ2MzYvMkM5QkMzM0M5Nzk5MTFFQ0JFNzI1QTNDQzRGOUFFMDIvQzQ1ODM1MEU5
NzlDMTFFQzhFNzY5QzQzQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ49QMA8EAgACMAkDBwAgAQ3xeIAwDQYJKoZIhvcNAQELBQADggEB
AIDgD1oi+P3/VRTTViY0OaIlnjf8o6P6oBtzYJbGBjp0q7/+9sUF2s1qbAh8IOWr
GtmixRp71bsK+359NCfCfONDHdE94gMvI7TWwRcEM3bqTzMWJQ5cKwfrGV08JTME
X+aZURSM4S7Uj476FEzrca0wFIragkVfmwmCflH2jBZR1hBCFlU1utfxhVyyVqzH
BTPs1UCQVqJGJJvXoxFopu7g56Mg4gqTg6RZnsw3emO4wqTxRvvXRsE74iDQEPxI
3V0c12FwJSrbpppxp6OBYHUMl4JTO2KGUkFX2se6p8ws9mg6+/pkDpbuSGur2pxh
tZZSe5P+Uaq/p1xgjDbl/Oc=
-----END CERTIFICATE-----
Generated at Thu Oct 29 20:31:09 2026 by rpki-client