
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/AF91ADB42CE211EC8664D47EC4F9AE02.roa
File: AF91ADB42CE211EC8664D47EC4F9AE02.roa (raw, json)
Hash identifier: iu4wDFeMIY7/bQ9J/tfUOATlPlHEokNa5kKy6FcUF3g=
Subject key identifier: 08:06:F9:72:69:AA:E1:F7:37:95:CD:E8:0A:BF:CE:95:62:23:D1:08
Certificate issuer: /CN=A91A85A8/serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
Certificate serial: 05D2
Authority key identifier: AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/AF91ADB42CE211EC8664D47EC4F9AE02.roa
Signing time: Thu 10 Sep 2026 23:45:18 +0000
ROA not before: Thu 10 Sep 2026 23:45:18 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 16509
IP address blocks: 103.70.49.0/24 maxlen: 24
103.70.51.0/24 maxlen: 24
182.54.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl
rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1490 (0x5d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A85A8, serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
Validity
Not Before: Sep 10 23:45:18 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6aa3410e-dffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ca:2e:45:4c:99:65:53:c6:f8:64:b8:1a:56:
67:34:88:40:42:6e:bd:15:22:ee:c4:bb:36:ff:77:
0d:f9:27:d9:1d:23:29:fa:ce:70:49:08:0b:2c:21:
3a:cf:46:14:fd:91:c7:6c:14:be:64:5b:86:fa:0d:
95:05:4e:b0:7a:4c:84:35:00:e5:5a:75:29:08:3e:
c5:c4:40:b2:b6:6b:d7:b0:7a:a7:94:be:8b:87:2f:
11:75:96:e5:ba:14:77:68:3e:76:d1:e2:40:eb:55:
2c:66:d7:1f:3a:65:f4:55:48:0e:78:db:4f:2b:c1:
40:68:dd:dc:de:63:cd:be:4a:fa:13:6a:ee:b1:75:
24:b1:40:6a:91:54:39:29:9f:11:17:0c:d9:22:f2:
f3:c2:99:bd:53:7f:e8:72:76:1e:c0:b4:b7:f8:2d:
15:31:8d:e8:5a:16:57:4c:04:36:47:10:f3:81:5e:
b0:f8:31:a3:f5:42:f7:d6:88:40:80:08:89:1e:6d:
9e:58:a0:d8:ea:5b:41:59:7c:a5:07:70:19:49:3e:
a7:4d:15:04:99:3c:16:d8:f4:0e:f2:23:40:77:df:
fa:fb:3e:a6:45:29:c5:58:de:92:36:0d:b3:19:5c:
da:f7:7a:70:5b:f2:d9:dd:1c:b5:44:19:ed:33:bb:
de:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:06:F9:72:69:AA:E1:F7:37:95:CD:E8:0A:BF:CE:95:62:23:D1:08
X509v3 Authority Key Identifier:
keyid:AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/AF91ADB42CE211EC8664D47EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.70.49.0/24
103.70.51.0/24
182.54.135.0/24
Signature Algorithm: sha256WithRSAEncryption
24:18:34:94:09:25:4b:39:db:f8:1c:b8:41:0f:63:0d:1b:22:
e6:c1:6f:b8:fa:a0:70:9a:f0:ad:c7:5f:2a:00:b7:22:ba:e8:
5c:e0:e9:71:d5:a3:03:48:a5:3f:c5:cd:43:f1:d5:40:b0:f1:
17:d2:ea:c1:86:4f:cf:ab:f6:eb:09:74:70:03:42:97:56:23:
4c:ef:47:24:9f:b8:13:b0:f3:d8:22:63:b3:47:1b:a6:d9:10:
a5:2c:0f:4d:8a:71:46:c9:75:2f:da:c3:df:54:2d:9e:ba:0c:
d7:be:7a:d7:e1:82:35:32:fd:bb:52:01:60:db:37:b0:05:e2:
93:6f:27:16:be:43:be:8b:11:4b:ed:ce:5f:13:c2:bd:4c:77:
51:f1:fd:4a:6a:97:3a:bf:f2:e1:2d:2f:d4:04:f7:3e:0d:ed:
39:26:b2:5b:32:ff:af:79:f7:3e:4c:3d:16:01:85:ea:0a:6b:
39:75:3b:61:b0:31:b8:11:a5:e5:db:80:ce:da:dd:30:fd:de:
d2:b8:80:65:c6:b9:aa:75:0d:dd:a7:08:ab:f9:ba:31:2f:6b:
77:f8:9b:85:7e:6f:b9:6f:df:16:41:47:a4:f4:86:91:c7:3f:
f8:f0:69:31:94:62:a2:9d:9e:80:04:25:ab:0f:6e:c7:24:3d:
e7:4c:26:7a
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICBdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTg1QTgxMTAvBgNVBAUTKEFFMEEwRjk4QTA5MDNFMDE1RTVGQzU0Q0I4Q0UwODFE
NDI0REI0RDIwHhcNMjYwOTEwMjM0NTE4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWEzNDEwZS1kZmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2souRUyZZVPG+GS4GlZnNIhAQm69FSLuxLs2/3cN+SfZHSMp+s5wSQgLLCE6
z0YU/ZHHbBS+ZFuG+g2VBU6wekyENQDlWnUpCD7FxECytmvXsHqnlL6Lhy8RdZbl
uhR3aD520eJA61UsZtcfOmX0VUgOeNtPK8FAaN3c3mPNvkr6E2rusXUksUBqkVQ5
KZ8RFwzZIvLzwpm9U3/ocnYewLS3+C0VMY3oWhZXTAQ2RxDzgV6w+DGj9UL31ohA
gAiJHm2eWKDY6ltBWXylB3AZST6nTRUEmTwW2PQO8iNAd9/6+z6mRSnFWN6SNg2z
GVza93pwW/LZ3Ry1RBntM7veFQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFAgG+XJp
quH3N5XN6Aq/zpViI9EIMB8GA1UdIwQYMBaAFK4KD5igkD4BXl/FTLjOCB1CTbTS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODVBOC9BNTMwODE0NjJD
REUxMUVDQUE2RkU2NzhDNEY5QUUwMi9yZ29QbUtDUVBnRmVYOFZNdU00SUhVSk50
TkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Jnb1BtS0NRUGdGZVg4Vk11TTRJSFVKTnROSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTg1QTgvQTUzMDgxNDYyQ0RFMTFFQ0FBNkZFNjc4QzRGOUFFMDIvQUY5MUFEQjQy
Q0UyMTFFQzg2NjRENDdFQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQAZ0YxAwQAZ0YzAwQAtjaHMA0GCSqGSIb3DQEBCwUAA4IBAQAkGDSU
CSVLOdv4HLhBD2MNGyLmwW+4+qBwmvCtx18qALciuuhc4Olx1aMDSKU/xc1D8dVA
sPEX0urBhk/Pq/brCXRwA0KXViNM70ckn7gTsPPYImOzRxum2RClLA9NinFGyXUv
2sPfVC2eugzXvnrX4YI1Mv27UgFg2zewBeKTbycWvkO+ixFL7c5fE8K9THdR8f1K
apc6v/LhLS/UBPc+De05JrJbMv+vefc+TD0WAYXqCms5dTthsDG4EaXl24DO2t0w
/d7SuIBlxrmqdQ3dpwir+boxL2t3+JuFfm+5b98WQUek9IaRxz/48GkxlGKinZ6A
BCWrD27HJD3nTCZ6
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:24:11 2026 by rpki-client