
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/09E46A74C07F11ECB0707F18C4F9AE02.roa
File: 09E46A74C07F11ECB0707F18C4F9AE02.roa (raw, json)
Hash identifier: d9abjcEhs9/di2KPJ0Tgn2dnNXYERKiguvM4ngPYdno=
Subject key identifier: C4:B6:7B:C5:3B:2E:9D:02:FD:BB:DF:CE:8F:2E:F7:61:B2:C5:06:82
Certificate issuer: /CN=A91DA590/serialNumber=2000005AC5A174404BD3BFC29943323E960625B9
Certificate serial: 0432
Authority key identifier: 20:00:00:5A:C5:A1:74:40:4B:D3:BF:C2:99:43:32:3E:96:06:25:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/09E46A74C07F11ECB0707F18C4F9AE02.roa
Signing time: Wed 05 Aug 2026 01:48:47 +0000
ROA not before: Wed 05 Aug 2026 01:48:47 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 142153
IP address blocks: 103.166.250.0/23 maxlen: 23
103.166.250.0/24 maxlen: 24
103.166.251.0/24 maxlen: 24
2001:df6:a080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.crl
rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1074 (0x432)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA590, serialNumber=2000005AC5A174404BD3BFC29943323E960625B9
Validity
Not Before: Aug 5 01:48:47 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a72967f-3568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:87:0d:7e:04:76:b0:a5:45:7a:cc:59:35:e7:
19:76:98:58:1e:e8:e3:4c:a5:d9:b1:b6:dd:33:7a:
e7:12:36:f4:b0:0e:ea:85:8b:03:26:d8:89:73:7b:
53:1c:71:28:51:bf:3f:77:e5:d2:9a:99:a2:a1:10:
c8:86:4f:0d:c6:eb:87:63:9c:51:be:91:60:21:27:
71:3b:26:dc:3a:a3:ac:1f:6b:e2:03:c1:36:82:9f:
61:d1:1d:00:6e:37:9a:97:d5:00:5d:a0:81:3c:7f:
65:85:ce:88:b5:73:71:cf:1b:3a:ab:77:88:c0:45:
fb:a5:48:b5:64:9d:4d:a5:ef:a9:57:3d:a3:3f:ef:
5c:cd:da:56:2c:11:4b:3d:ff:78:54:c0:b1:85:49:
c4:f1:e7:32:b4:f4:44:84:68:37:15:b9:fb:c2:4b:
9d:13:0e:b0:79:c6:28:a2:fb:e5:34:38:aa:5d:6c:
f5:a2:01:1c:cc:88:e9:20:80:7f:3a:fb:02:db:91:
cb:9e:9f:91:de:8f:a1:62:6d:69:cc:3c:44:b2:2f:
75:82:8e:36:eb:46:71:52:25:bd:b8:5f:53:f9:7d:
1d:dc:5d:f4:32:49:83:81:72:80:da:f8:a1:c6:d6:
5a:ac:ec:0e:85:ef:b0:7f:e2:17:19:2e:ad:3c:86:
ef:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B6:7B:C5:3B:2E:9D:02:FD:BB:DF:CE:8F:2E:F7:61:B2:C5:06:82
X509v3 Authority Key Identifier:
keyid:20:00:00:5A:C5:A1:74:40:4B:D3:BF:C2:99:43:32:3E:96:06:25:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/09E46A74C07F11ECB0707F18C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.166.250.0/23
IPv6:
2001:df6:a080::/48
Signature Algorithm: sha256WithRSAEncryption
5f:d7:f0:24:c2:a8:87:0d:1c:c7:87:98:0a:84:3e:b1:46:bf:
70:e5:64:a1:fb:42:94:4f:fa:34:a6:e7:b6:c9:14:3a:74:17:
5f:dc:59:e3:6f:f4:28:b9:81:89:e5:de:1d:7a:5c:0c:0b:b8:
a1:72:3d:75:3f:e9:5e:70:da:1d:0f:b9:b4:4c:58:07:8b:38:
97:f0:b3:85:f4:fc:db:82:f9:ff:73:01:62:03:7d:71:30:f2:
cf:c8:54:3e:f2:4e:89:93:f4:0d:85:eb:7c:b4:8e:11:61:e7:
1a:19:53:22:69:81:6a:85:db:a1:95:70:e5:b1:70:7f:77:8e:
ac:47:1d:f3:ae:09:c0:5c:d1:f1:e9:95:e9:36:f6:fb:79:a2:
ef:c8:3a:50:99:ac:0f:c4:e7:28:73:29:e0:bf:e7:01:a4:2a:
59:44:c7:1b:f9:91:1e:65:d7:83:c6:a3:45:f1:d0:db:e5:3b:
28:ee:3a:ba:2d:d3:40:52:20:f4:ec:a4:96:31:bf:a7:f6:c7:
df:8b:15:99:78:3c:67:73:9c:f6:34:66:6d:27:eb:cc:77:63:
2b:d1:fa:b5:f7:37:d2:03:a6:e7:18:55:6c:9b:2a:e8:44:62:
3a:a4:57:42:c7:b0:55:9a:63:55:50:92:20:ae:0b:86:48:35:
4e:11:8c:66
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICBDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REE1OTAxMTAvBgNVBAUTKDIwMDAwMDVBQzVBMTc0NDA0QkQzQkZDMjk5NDMzMjNF
OTYwNjI1QjkwHhcNMjYwODA1MDE0ODQ3WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTcyOTY3Zi0zNTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuIcNfgR2sKVFesxZNecZdphYHujjTKXZsbbdM3rnEjb0sA7qhYsDJtiJc3tT
HHEoUb8/d+XSmpmioRDIhk8NxuuHY5xRvpFgISdxOybcOqOsH2viA8E2gp9h0R0A
bjeal9UAXaCBPH9lhc6ItXNxzxs6q3eIwEX7pUi1ZJ1Npe+pVz2jP+9czdpWLBFL
Pf94VMCxhUnE8ecytPREhGg3Fbn7wkudEw6wecYoovvlNDiqXWz1ogEczIjpIIB/
OvsC25HLnp+R3o+hYm1pzDxEsi91go4260ZxUiW9uF9T+X0d3F30MkmDgXKA2vih
xtZarOwOhe+wf+IXGS6tPIbvTwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFMS2e8U7
Lp0C/bvfzo8u92GyxQaCMB8GA1UdIwQYMBaAFCAAAFrFoXRAS9O/wplDMj6WBiW5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTU5MC85NTEwRTg2QUMw
N0IxMUVDOTg3Qjg0N0ZDNEY5QUUwMi9JQUFBV3NXaGRFQkwwN19DbVVNeVBwWUdK
YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lBQUFXc1doZEVCTDA3X0NtVU15UHBZR0piay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REE1OTAvOTUxMEU4NkFDMDdCMTFFQzk4N0I4NDdGQzRGOUFFMDIvMDlFNDZBNzRD
MDdGMTFFQ0IwNzA3RjE4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ6b6MA8EAgACMAkDBwAgAQ32oIAwDQYJKoZIhvcNAQELBQADggEB
AF/X8CTCqIcNHMeHmAqEPrFGv3DlZKH7QpRP+jSm57bJFDp0F1/cWeNv9Ci5gYnl
3h16XAwLuKFyPXU/6V5w2h0PubRMWAeLOJfws4X0/NuC+f9zAWIDfXEw8s/IVD7y
TomT9A2F63y0jhFh5xoZUyJpgWqF26GVcOWxcH93jqxHHfOuCcBc0fHplek29vt5
ou/IOlCZrA/E5yhzKeC/5wGkKllExxv5kR5l14PGo0Xx0NvlOyjuOrot00BSIPTs
pJYxv6f2x9+LFZl4PGdznPY0Zm0n68x3YyvR+rX3N9IDpucYVWybKuhEYjqkV0LH
sFWaY1VQkiCuC4ZINU4RjGY=
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:47 2026 by rpki-client