
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/57DD65D0D1FB11EDA0A31C2FC4F9AE02.roa
File: 57DD65D0D1FB11EDA0A31C2FC4F9AE02.roa (raw, json)
Hash identifier: clsZuFy5g+1emvntcOY/P2Vw/DD0Zep7TP+9f225EEw=
Subject key identifier: 64:5B:68:A8:79:F6:0A:A9:09:0F:6C:EA:4E:95:A1:62:FC:65:34:94
Certificate issuer: /CN=A91A3D65/serialNumber=5008BE041F9997B259D2584483A53A0DFF0B178C
Certificate serial: 0270
Authority key identifier: 50:08:BE:04:1F:99:97:B2:59:D2:58:44:83:A5:3A:0D:FF:0B:17:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/57DD65D0D1FB11EDA0A31C2FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:17:58 +0000
ROA not before: Thu 15 Jan 2026 01:21:18 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 132080
IP address blocks: 103.11.216.0/22 maxlen: 22
103.11.216.0/24 maxlen: 24
103.11.217.0/24 maxlen: 24
103.11.218.0/24 maxlen: 24
103.11.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.crl
rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:39:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 624 (0x270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3D65, serialNumber=5008BE041F9997B259D2584483A53A0DFF0B178C
Validity
Not Before: Jan 15 01:21:18 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a458a6-72fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:31:90:d2:df:b7:e5:e9:01:b7:75:2a:82:ee:
d5:da:35:25:13:17:cc:ce:b4:dc:61:2d:9e:6b:53:
e2:14:3c:17:a3:6e:e8:ff:c7:ac:54:fb:40:5b:92:
d4:7b:fc:99:14:9f:48:f1:f2:20:24:0c:30:3b:e5:
85:d8:26:18:1d:08:52:b0:a4:15:84:79:72:a7:88:
7b:fc:0a:7f:ec:b9:ed:9d:06:d2:17:82:e3:ba:33:
a4:f4:28:63:0b:e2:08:a3:cc:b8:a3:d8:40:78:5b:
9a:69:c3:6c:40:27:f0:4c:4a:2f:57:bf:ea:86:1a:
60:14:a8:35:e2:1d:4f:8d:b1:91:08:d0:3e:71:37:
17:91:3b:9b:be:ec:cb:97:57:5d:4a:72:8a:01:b3:
2a:0a:aa:31:c3:96:9f:8d:99:7e:b8:70:d9:cc:ef:
1f:f3:3d:09:3e:0a:8b:aa:24:23:6e:19:ad:48:3c:
e5:45:91:92:b6:48:2f:5a:37:27:09:67:de:47:f7:
b2:9b:e7:de:21:cb:5b:35:78:b3:55:fc:1d:0a:c6:
ee:ff:d5:17:a5:8a:69:89:e5:de:7f:08:78:2a:19:
80:e3:93:14:24:82:93:91:47:73:b3:8e:fe:3a:a0:
bd:e9:6d:59:c0:c9:f0:81:00:56:b4:74:7c:1e:76:
cc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5B:68:A8:79:F6:0A:A9:09:0F:6C:EA:4E:95:A1:62:FC:65:34:94
X509v3 Authority Key Identifier:
keyid:50:08:BE:04:1F:99:97:B2:59:D2:58:44:83:A5:3A:0D:FF:0B:17:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/57DD65D0D1FB11EDA0A31C2FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.11.216.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:fe:bc:ae:0f:46:b5:e0:f8:36:d8:3c:7c:cf:17:c5:af:c0:
37:60:d6:70:5a:eb:ac:4b:50:5a:eb:a9:48:26:8c:1b:58:ab:
ad:d4:bb:33:89:ab:a8:ea:c5:32:5c:15:de:ec:70:f1:05:f3:
1e:43:81:b9:29:7c:67:8c:4d:28:25:e4:66:5e:43:c4:e3:2f:
40:56:c4:09:dd:0b:9e:a5:b0:6b:0e:6b:4e:cc:6b:eb:e2:7b:
5e:b6:55:97:4f:f2:37:91:92:45:46:cb:27:ce:ef:c9:66:7c:
ff:b9:b8:d8:26:9e:80:e4:80:04:99:12:54:18:f7:8b:05:73:
5e:cb:10:5b:2c:63:ac:e2:de:41:fb:61:5a:cd:a8:0c:51:5b:
7d:12:55:07:9d:2e:83:ff:2d:9c:56:25:2a:17:33:a9:f7:31:
81:20:ef:ec:c0:ad:0e:ad:2b:4f:2b:e9:da:4e:90:78:17:7c:
ea:7f:db:92:ba:22:10:03:c9:35:e1:92:c2:32:93:a6:ea:f7:
ab:44:a2:a9:c2:16:0e:f6:9a:ff:49:d6:ed:76:be:b4:86:a6:
b8:89:5d:d3:f0:9c:cd:a2:ff:3b:97:74:72:bf:13:8b:f3:8f:
4a:05:aa:38:4f:c5:17:03:7d:40:c7:41:f9:34:bc:1d:43:3c:
03:94:32:0f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTNENjUxMTAvBgNVBAUTKDUwMDhCRTA0MUY5OTk3QjI1OUQyNTg0NDgzQTUzQTBE
RkYwQjE3OEMwHhcNMjYwMTE1MDEyMTE4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NThhNi03MmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyDGQ0t+35ekBt3Uqgu7V2jUlExfMzrTcYS2ea1PiFDwXo27o/8esVPtAW5LU
e/yZFJ9I8fIgJAwwO+WF2CYYHQhSsKQVhHlyp4h7/Ap/7LntnQbSF4LjujOk9Chj
C+IIo8y4o9hAeFuaacNsQCfwTEovV7/qhhpgFKg14h1PjbGRCNA+cTcXkTubvuzL
l1ddSnKKAbMqCqoxw5afjZl+uHDZzO8f8z0JPgqLqiQjbhmtSDzlRZGStkgvWjcn
CWfeR/eym+feIctbNXizVfwdCsbu/9UXpYppieXefwh4KhmA45MUJIKTkUdzs47+
OqC96W1ZwMnwgQBWtHR8HnbMQQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGRbaKh5
9gqpCQ9s6k6VoWL8ZTSUMB8GA1UdIwQYMBaAFFAIvgQfmZeyWdJYRIOlOg3/CxeM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0Q2NS9FQTFFNjJENjdD
NzUxMUVEOEJFNjVCMzhDNEY5QUUwMi9VQWktQkItWmw3SlowbGhFZzZVNkRmOExG
NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VBaS1CQi1abDdKWjBsaEVnNlU2RGY4TEY0dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTNENjUvRUExRTYyRDY3Qzc1MTFFRDhCRTY1QjM4QzRGOUFFMDIvNTdERDY1RDBE
MUZCMTFFREEwQTMxQzJGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZwvYMA0GCSqGSIb3DQEBCwUAA4IBAQBu/ryuD0a14Pg22Dx8zxfF
r8A3YNZwWuusS1Ba66lIJowbWKut1Lsziauo6sUyXBXe7HDxBfMeQ4G5KXxnjE0o
JeRmXkPE4y9AVsQJ3QuepbBrDmtOzGvr4ntetlWXT/I3kZJFRssnzu/JZnz/ubjY
Jp6A5IAEmRJUGPeLBXNeyxBbLGOs4t5B+2FazagMUVt9ElUHnS6D/y2cViUqFzOp
9zGBIO/swK0OrStPK+naTpB4F3zqf9uSuiIQA8k14ZLCMpOm6verRKKpwhYO9pr/
Sdbtdr60hqa4iV3T8JzNov87l3RyvxOL849KBao4T8UXA31Ax0H5NLwdQzwDlDIP
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:22 2026 by rpki-client