
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/1AD64F18D23411EAAFD6AA3AC4F9AE02.roa
File: 1AD64F18D23411EAAFD6AA3AC4F9AE02.roa (raw, json)
Hash identifier: MqlBf1TAsOwILwTo3JKCmLFuWYyQ3RYADDcjd7qhNAo=
Subject key identifier: 1C:C7:D7:A3:DE:10:B8:87:C8:9C:4A:CF:0F:48:85:DA:D9:50:A4:AB
Certificate issuer: /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Certificate serial: 170C
Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/1AD64F18D23411EAAFD6AA3AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:45:54 +0000
ROA not before: Mon 10 Nov 2025 07:01:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198381
IP address blocks: 103.27.23.0/24 maxlen: 24
175.111.1.0/24 maxlen: 24
175.111.8.0/24 maxlen: 24
175.111.9.0/24 maxlen: 24
175.111.10.0/23 maxlen: 23
175.111.12.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl
rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5900 (0x170c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1185, serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Validity
Not Before: Nov 10 07:01:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a47b52-73fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6f:a2:e4:bb:2e:b8:5d:94:38:59:fb:e1:9e:
f7:fb:17:31:6b:fc:bc:39:dc:13:97:af:d9:40:0b:
17:58:3a:b2:7c:f6:44:ad:3f:63:98:50:ba:82:0c:
b8:aa:90:51:26:cd:34:96:c9:ac:64:e0:2f:47:72:
29:b5:50:3e:8a:60:38:0d:a5:67:74:3e:29:be:8d:
13:42:8a:27:14:7b:c5:7f:24:4b:5c:76:60:0b:50:
e3:49:b9:7c:09:41:59:d5:97:4d:17:1d:bc:53:bc:
25:f8:d3:7c:93:bc:0b:ca:84:15:94:34:5f:e2:76:
94:3b:8e:60:b9:f8:94:2f:6e:64:9f:39:76:72:74:
27:45:37:5f:ba:f3:a7:b5:d2:0d:02:86:87:e5:57:
83:0d:22:f0:04:96:7b:aa:42:78:e1:eb:1b:3f:59:
9c:11:74:5a:4a:6e:3e:7e:19:47:50:9d:54:d0:fe:
34:68:85:68:8d:66:d9:18:08:10:bf:54:98:e5:41:
aa:e7:3e:53:57:a5:a7:91:ad:c0:f1:83:12:47:c4:
e2:f6:6f:ff:a5:40:c9:07:3e:5c:e1:b9:08:7b:58:
4e:d0:49:4a:8c:10:b6:85:d9:57:69:db:b9:2c:22:
31:6a:62:36:97:b7:f5:f3:a3:23:37:a6:d5:95:c3:
37:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C7:D7:A3:DE:10:B8:87:C8:9C:4A:CF:0F:48:85:DA:D9:50:A4:AB
X509v3 Authority Key Identifier:
keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/1AD64F18D23411EAAFD6AA3AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.27.23.0/24
175.111.1.0/24
175.111.8.0-175.111.13.255
Signature Algorithm: sha256WithRSAEncryption
59:2f:b1:39:b3:56:ae:54:8d:8e:18:61:e0:93:35:b8:4d:f2:
f8:11:c7:c2:4d:f0:85:3f:45:32:c6:00:d0:a0:06:1d:c9:5f:
6f:fe:f4:a5:cf:52:ea:e2:5c:81:dd:0c:6b:ca:a9:9a:22:09:
10:b9:fe:2b:2f:80:a7:fd:8b:db:5c:54:0e:ce:f3:c3:93:29:
8d:5e:79:1f:30:e4:e8:38:83:8b:bf:16:ba:59:75:63:01:b4:
9d:c1:e5:98:d5:8d:79:54:61:7d:19:3d:65:cc:44:33:4d:86:
60:86:75:2d:cd:1b:e0:ef:2c:c9:0a:f7:68:a3:50:05:65:ff:
00:e8:aa:88:41:ed:ef:22:bd:3b:a6:7c:e0:e8:42:0f:d1:e9:
7c:2f:85:61:3f:4d:18:b7:79:a2:c4:93:49:80:03:99:d2:73:
05:01:73:1b:95:1e:01:be:09:04:f3:48:34:16:49:bf:a9:95:
ab:28:c9:32:5f:57:6d:1d:9b:32:74:7e:2d:e5:bb:87:fb:f5:
8f:94:d2:90:af:8b:6a:79:18:03:fe:99:fa:73:7a:f3:11:f9:
94:20:ef:7d:a6:d3:37:f4:e7:8d:13:3a:7d:df:9f:1d:bc:1f:
c1:8e:1f:ae:60:18:34:dd:73:b8:7c:09:fe:a7:b9:d7:06:48:
98:e1:14:53
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgICFwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjExODUxMTAvBgNVBAUTKEZFM0NEMzdDRUMwRTM4MjMwN0I0RjlENUZGRDU3RTk3
RjEyMUYwNTMwHhcNMjUxMTEwMDcwMTI3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0N2I1Mi03M2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn2+i5LsuuF2UOFn74Z73+xcxa/y8OdwTl6/ZQAsXWDqyfPZErT9jmFC6ggy4
qpBRJs00lsmsZOAvR3IptVA+imA4DaVndD4pvo0TQoonFHvFfyRLXHZgC1DjSbl8
CUFZ1ZdNFx28U7wl+NN8k7wLyoQVlDRf4naUO45gufiUL25knzl2cnQnRTdfuvOn
tdINAoaH5VeDDSLwBJZ7qkJ44esbP1mcEXRaSm4+fhlHUJ1U0P40aIVojWbZGAgQ
v1SY5UGq5z5TV6Wnka3A8YMSR8Ti9m//pUDJBz5c4bkIe1hO0ElKjBC2hdlXadu5
LCIxamI2l7f186MjN6bVlcM3/QIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFBzH16Pe
ELiHyJxKzw9IhdrZUKSrMB8GA1UdIwQYMBaAFP4803zsDjgjB7T51f/VfpfxIfBT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTE4NS8zRUE5REQzQTE2
MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09DTUh0UG5WXzlWLWxfRWg4
Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19qelRmT3dPT0NNSHRQblZfOVYtbF9FaDhGTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjExODUvM0VBOUREM0ExNjIzMTFFODkyQzRBOTQwQzRGOUFFMDIvMUFENjRGMThE
MjM0MTFFQUFGRDZBQTNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg
BAIAATAaAwQAZxsXAwQAr28BMAwDBAOvbwgDBAGvbwwwDQYJKoZIhvcNAQELBQAD
ggEBAFkvsTmzVq5UjY4YYeCTNbhN8vgRx8JN8IU/RTLGANCgBh3JX2/+9KXPUuri
XIHdDGvKqZoiCRC5/isvgKf9i9tcVA7O88OTKY1eeR8w5Og4g4u/FrpZdWMBtJ3B
5ZjVjXlUYX0ZPWXMRDNNhmCGdS3NG+DvLMkK92ijUAVl/wDoqohB7e8ivTumfODo
Qg/R6XwvhWE/TRi3eaLEk0mAA5nScwUBcxuVHgG+CQTzSDQWSb+plasoyTJfV20d
mzJ0fi3lu4f79Y+U0pCvi2p5GAP+mfpzevMR+ZQg732m0zf0540TOn3fnx28H8GO
H65gGDTdc7h8Cf6nudcGSJjhFFM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:58 2026 by rpki-client