
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/A1C11FC2D18411EFBBD4971AC4F9AE02.roa
File: A1C11FC2D18411EFBBD4971AC4F9AE02.roa (raw, json)
Hash identifier: 0yJCvRma7jQ7Od9af1YTlNy9lCIhrKAmoZlpg80TJmc=
Subject key identifier: 9D:42:E7:37:B6:C2:A5:C6:14:F2:F7:05:C5:C8:6B:59:00:D3:DF:98
Certificate issuer: /CN=A91E3B1D/serialNumber=5A99B0276719D3A83770FAAE14D7575CC666488D
Certificate serial: 03D2
Authority key identifier: 5A:99:B0:27:67:19:D3:A8:37:70:FA:AE:14:D7:57:5C:C6:66:48:8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/A1C11FC2D18411EFBBD4971AC4F9AE02.roa
Signing time: Fri 17 Jul 2026 01:26:38 +0000
ROA not before: Fri 17 Jul 2026 01:26:38 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 140228
IP address blocks: 103.189.4.0/23 maxlen: 23
103.189.4.0/24 maxlen: 24
103.189.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.crl
rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:55:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 978 (0x3d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3B1D, serialNumber=5A99B0276719D3A83770FAAE14D7575CC666488D
Validity
Not Before: Jul 17 01:26:38 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a5984ce-1b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e7:38:4a:4a:98:81:e9:8b:b8:9b:41:52:f5:
db:47:52:ee:e6:43:eb:be:48:7a:e4:a2:3d:ee:47:
a3:e2:70:66:54:33:9b:5f:7a:c2:1c:b0:7f:48:8b:
15:c2:4c:09:96:6d:a7:27:d0:d4:27:50:ed:7d:94:
1c:cb:77:79:07:ff:53:b0:4c:9a:06:e6:07:d8:fc:
8d:99:47:3b:e9:99:da:84:89:39:a0:46:80:f5:c8:
c1:d3:95:4b:8e:dd:86:b5:06:54:20:ea:23:fb:1d:
0b:3a:56:e6:3f:19:68:59:4a:2d:3d:17:00:5a:ba:
0a:02:be:8a:93:d4:ff:22:4a:97:78:7d:f9:da:4f:
a4:32:6d:0c:9d:39:9f:bf:5b:a9:0d:67:2c:b5:6d:
34:fc:df:12:73:33:62:f8:44:5a:23:34:f2:2f:76:
d8:c0:67:7e:d9:58:88:40:83:e0:a1:35:cd:69:39:
91:49:97:d9:cf:c3:87:b5:0f:4e:7d:35:25:a9:22:
95:a6:47:d6:63:de:e8:2f:70:f5:42:47:d1:2b:ad:
75:2a:32:68:5c:0d:4f:00:41:a8:c5:c6:25:ec:f5:
eb:fc:8e:08:3b:3b:1a:6c:a1:5c:b1:2e:42:06:26:
d1:86:ef:cf:b3:24:ea:6a:5c:f4:3b:d9:02:1c:19:
11:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:42:E7:37:B6:C2:A5:C6:14:F2:F7:05:C5:C8:6B:59:00:D3:DF:98
X509v3 Authority Key Identifier:
keyid:5A:99:B0:27:67:19:D3:A8:37:70:FA:AE:14:D7:57:5C:C6:66:48:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/A1C11FC2D18411EFBBD4971AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.189.4.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:c4:d1:8f:4e:77:90:18:8b:f1:b6:8f:cc:12:0d:05:65:ea:
76:9a:f8:cf:0b:c6:c4:44:c7:3b:65:85:01:f9:02:1a:ca:ac:
40:e8:8f:73:50:61:69:1b:43:90:c3:3f:41:7b:18:48:03:4c:
c8:eb:e7:a3:27:b2:60:d8:77:e7:9b:c1:eb:02:cd:f9:4e:64:
a7:26:2f:db:ef:0b:98:76:ff:fc:5f:34:b0:a4:d9:a0:0b:aa:
9a:81:21:d6:8e:f7:5c:dc:3d:c0:80:e9:ee:bf:54:34:38:59:
32:94:69:c1:bb:fd:8d:e2:d3:e8:e7:5b:86:c5:ff:0b:4c:11:
dd:3d:e1:36:16:78:8b:30:4f:d7:e5:50:22:64:66:a9:c5:76:
e3:e7:ae:15:81:b3:8f:21:14:79:61:70:6f:1c:2c:f6:94:67:
3d:0f:13:f6:79:ae:32:df:7c:f2:af:86:e2:a0:48:bd:da:08:
4b:6f:9d:70:1c:e4:f6:ff:bf:00:c4:20:ed:ee:b9:1c:55:8f:
b7:a8:63:bf:8d:c6:08:d3:8f:f8:b5:e1:64:a2:e5:cb:16:20:
3b:41:39:b7:0e:5b:6f:35:ff:8a:cc:df:c4:d9:15:49:c9:47:
61:82:9d:5c:a8:b1:3c:0c:89:c0:6a:2d:c1:05:bb:92:ec:45:
0a:15:a4:2a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICA9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTNCMUQxMTAvBgNVBAUTKDVBOTlCMDI3NjcxOUQzQTgzNzcwRkFBRTE0RDc1NzVD
QzY2NjQ4OEQwHhcNMjYwNzE3MDEyNjM4WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTU5ODRjZS0xYjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxOc4SkqYgemLuJtBUvXbR1Lu5kPrvkh65KI97kej4nBmVDObX3rCHLB/SIsV
wkwJlm2nJ9DUJ1DtfZQcy3d5B/9TsEyaBuYH2PyNmUc76ZnahIk5oEaA9cjB05VL
jt2GtQZUIOoj+x0LOlbmPxloWUotPRcAWroKAr6Kk9T/IkqXeH352k+kMm0MnTmf
v1upDWcstW00/N8SczNi+ERaIzTyL3bYwGd+2ViIQIPgoTXNaTmRSZfZz8OHtQ9O
fTUlqSKVpkfWY97oL3D1QkfRK611KjJoXA1PAEGoxcYl7PXr/I4IOzsabKFcsS5C
BibRhu/PsyTqalz0O9kCHBkRKQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJ1C5ze2
wqXGFPL3BcXIa1kA09+YMB8GA1UdIwQYMBaAFFqZsCdnGdOoN3D6rhTXV1zGZkiN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IxRC9CQTY0RDA2NkUz
MzcxMUVDOTczMEVCM0RDNEY5QUUwMi9XcG13SjJjWjA2ZzNjUHF1Rk5kWFhNWm1T
STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dwbXdKMmNaMDZnM2NQcXVGTmRYWE1abVNJMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTNCMUQvQkE2NEQwNjZFMzM3MTFFQzk3MzBFQjNEQzRGOUFFMDIvQTFDMTFGQzJE
MTg0MTFFRkJCRDQ5NzFBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ70EMA0GCSqGSIb3DQEBCwUAA4IBAQBKxNGPTneQGIvxto/MEg0F
Zep2mvjPC8bERMc7ZYUB+QIayqxA6I9zUGFpG0OQwz9BexhIA0zI6+ejJ7Jg2Hfn
m8HrAs35TmSnJi/b7wuYdv/8XzSwpNmgC6qagSHWjvdc3D3AgOnuv1Q0OFkylGnB
u/2N4tPo51uGxf8LTBHdPeE2FniLME/X5VAiZGapxXbj564VgbOPIRR5YXBvHCz2
lGc9DxP2ea4y33zyr4bioEi92ghLb51wHOT2/78AxCDt7rkcVY+3qGO/jcYI04/4
teFkouXLFiA7QTm3DltvNf+KzN/E2RVJyUdhgp1cqLE8DInAai3BBbuS7EUKFaQq
-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:43 2026 by rpki-client