
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/539AC1C6B27A11F19678C2773511F970.roa
File: 539AC1C6B27A11F19678C2773511F970.roa (raw, json)
Hash identifier: kjhI0eeZ4Kl7oEROg4YfSikLSMN/fVN+2AESo76PF0k=
Subject key identifier: BF:36:A6:31:22:96:0E:6E:98:9F:73:54:39:59:36:7B:AB:10:81:25
Certificate issuer: /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Certificate serial: 1790
Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/539AC1C6B27A11F19678C2773511F970.roa
Signing time: Thu 17 Sep 2026 09:29:48 +0000
ROA not before: Thu 17 Sep 2026 09:29:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198381
IP address blocks: 103.27.23.0/24 maxlen: 24
175.111.1.0/24 maxlen: 24
175.111.8.0/24 maxlen: 24
175.111.9.0/24 maxlen: 24
175.111.10.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl
rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 16:35:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6032 (0x1790)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1185, serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Validity
Not Before: Sep 17 09:29:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6aabb30c-64e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:5a:c2:b4:41:fc:30:a8:d4:e8:7f:99:69:
87:26:32:32:e0:4c:de:34:88:70:91:74:41:1e:97:
1c:db:df:ef:93:a0:2d:2d:00:87:b7:e6:d0:c6:b3:
ce:d4:f4:90:25:9c:39:3a:44:3c:e2:ab:66:a9:be:
1f:98:1d:ee:c0:4f:71:9a:47:3b:ea:c4:1b:55:07:
b6:e3:00:1f:77:b8:46:ea:7e:d7:ce:63:15:bd:4d:
48:90:5d:4a:ef:c2:dc:27:16:6e:20:b1:33:85:e7:
f8:e6:39:66:0e:9d:02:cd:8a:e1:c7:57:2d:b4:92:
7a:71:21:c9:e0:ec:eb:30:a0:f1:2f:c9:77:94:c7:
65:9f:18:65:91:b6:40:84:6e:8f:b6:62:1c:df:28:
6a:71:a1:a8:14:4a:9f:3b:38:5a:03:62:3d:94:16:
41:0e:bc:16:08:04:01:12:1d:0d:3d:47:8a:bc:fa:
13:49:de:49:50:cb:28:44:69:e5:fc:7c:a0:c7:75:
d0:ab:b4:52:99:4a:f0:2a:7f:05:a5:5d:1b:74:27:
1c:61:f3:0a:81:7c:ed:e8:96:84:64:c1:c7:dc:d0:
b4:fc:df:47:2b:e1:b5:17:4f:34:31:fc:ab:cf:a4:
d0:4d:8a:71:f3:9f:8d:23:86:a0:19:35:57:a5:1d:
39:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:36:A6:31:22:96:0E:6E:98:9F:73:54:39:59:36:7B:AB:10:81:25
X509v3 Authority Key Identifier:
keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/539AC1C6B27A11F19678C2773511F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.27.23.0/24
175.111.1.0/24
175.111.8.0/22
Signature Algorithm: sha256WithRSAEncryption
31:76:bd:61:fa:93:28:e5:27:6c:da:47:f0:fe:8a:21:55:42:
99:4d:aa:c0:96:f7:cf:09:97:8f:d8:82:63:ca:9f:54:a0:8c:
98:e2:da:31:d7:33:af:53:1c:42:82:7b:35:df:0e:a2:79:2f:
1a:9a:ab:8d:87:40:e3:ce:71:bf:cd:2a:7d:a8:40:2d:75:65:
a5:28:04:07:d3:0e:be:b4:13:0b:6a:e8:c2:a3:6e:01:d2:0c:
76:6d:fe:5b:c3:29:82:be:3a:12:e6:90:63:85:2b:76:46:69:
60:78:f8:0d:cc:87:51:a3:bc:58:bb:11:e3:cc:9c:67:40:e1:
bf:95:db:b2:9c:c3:5b:f4:27:f0:d3:f0:ac:2c:44:0f:36:dc:
51:73:a6:07:c0:64:be:56:37:00:41:d6:6d:fd:e5:fd:11:50:
b2:2c:ce:0d:7c:3b:84:85:88:be:0f:23:02:3c:ee:7d:0c:2b:
b2:97:a3:e1:95:92:99:7e:e0:2a:e8:19:eb:b1:d7:94:a1:a9:
89:45:e2:36:31:ac:fc:20:52:ae:f5:97:ad:d1:54:57:3b:4a:
7a:d5:da:c7:a8:5c:55:54:3b:55:94:1b:96:ef:a1:84:16:10:
18:e1:69:fe:26:2b:a7:fd:ac:4c:ac:e7:0e:95:35:78:8f:72:
0d:d9:d8:29
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICF5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjExODUxMTAvBgNVBAUTKEZFM0NEMzdDRUMwRTM4MjMwN0I0RjlENUZGRDU3RTk3
RjEyMUYwNTMwHhcNMjYwOTE3MDkyOTQ4WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWFiYjMwYy02NGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtoZawrRB/DCo1Oh/mWmHJjIy4EzeNIhwkXRBHpcc29/vk6AtLQCHt+bQxrPO
1PSQJZw5OkQ84qtmqb4fmB3uwE9xmkc76sQbVQe24wAfd7hG6n7XzmMVvU1IkF1K
78LcJxZuILEzhef45jlmDp0CzYrhx1cttJJ6cSHJ4OzrMKDxL8l3lMdlnxhlkbZA
hG6PtmIc3yhqcaGoFEqfOzhaA2I9lBZBDrwWCAQBEh0NPUeKvPoTSd5JUMsoRGnl
/Hygx3XQq7RSmUrwKn8FpV0bdCccYfMKgXzt6JaEZMHH3NC0/N9HK+G1F080Mfyr
z6TQTYpx85+NI4agGTVXpR05iwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFL82pjEi
lg5umJ9zVDlZNnurEIElMB8GA1UdIwQYMBaAFP4803zsDjgjB7T51f/VfpfxIfBT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTE4NS8zRUE5REQzQTE2
MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09DTUh0UG5WXzlWLWxfRWg4
Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19qelRmT3dPT0NNSHRQblZfOVYtbF9FaDhGTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjExODUvM0VBOUREM0ExNjIzMTFFODkyQzRBOTQwQzRGOUFFMDIvNTM5QUMxQzZC
MjdBMTFGMTk2NzhDMjc3MzUxMUY5NzAucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQAZxsXAwQAr28BAwQCr28IMA0GCSqGSIb3DQEBCwUAA4IBAQAxdr1h
+pMo5Sds2kfw/oohVUKZTarAlvfPCZeP2IJjyp9UoIyY4tox1zOvUxxCgns13w6i
eS8amquNh0DjznG/zSp9qEAtdWWlKAQH0w6+tBMLaujCo24B0gx2bf5bwymCvjoS
5pBjhSt2RmlgePgNzIdRo7xYuxHjzJxnQOG/lduynMNb9Cfw0/CsLEQPNtxRc6YH
wGS+VjcAQdZt/eX9EVCyLM4NfDuEhYi+DyMCPO59DCuyl6PhlZKZfuAq6BnrsdeU
oamJReI2Maz8IFKu9Zet0VRXO0p61drHqFxVVDtVlBuW76GEFhAY4Wn+Jiun/axM
rOcOlTV4j3IN2dgp
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:10:36 2026 by rpki-client