
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/BC66C474FB5C11EFB5FF765EC4F9AE02.roa
File: BC66C474FB5C11EFB5FF765EC4F9AE02.roa (raw, json)
Hash identifier: Az2YFmLh2UdhhRQEO6OH55PrWIA1OjwsVS+BS3c5lCU=
Subject key identifier: 73:73:6B:E6:48:0F:27:C2:61:6E:B3:A2:2A:29:1A:8B:A4:E9:BC:43
Certificate issuer: /CN=A91B3EDE/serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046
Certificate serial: BC
Authority key identifier: 80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/BC66C474FB5C11EFB5FF765EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:05:36 +0000
ROA not before: Thu 05 Jun 2025 07:32:23 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 135357
IP address blocks: 103.41.16.0/22 maxlen: 22
103.41.16.0/24 maxlen: 24
103.41.17.0/24 maxlen: 24
103.41.18.0/24 maxlen: 24
103.41.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl
rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:15:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3EDE, serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046
Validity
Not Before: Jun 5 07:32:23 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a3f350-3300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bd:4f:e4:ff:6e:c2:d5:5e:3a:8f:aa:34:53:
86:c2:07:83:ea:36:49:2f:61:b8:af:8f:a5:6b:ba:
c7:39:98:be:7d:88:65:dc:3a:cf:49:ff:94:c8:69:
4f:2d:4a:ba:e9:40:3f:5e:0c:28:3b:25:c0:d8:a2:
f8:ec:79:60:f8:03:4b:c4:b8:43:da:94:eb:db:9c:
92:8c:32:27:05:19:17:e5:12:88:3d:29:00:6c:e3:
c4:74:93:40:c7:c3:e6:29:35:65:43:f6:95:5b:36:
99:d5:a8:f1:cd:22:d0:9a:1c:f0:00:90:58:05:7d:
ef:39:ba:de:3b:4c:7c:c5:2d:e3:0d:be:27:f9:dd:
10:b8:77:4c:a5:38:e4:0b:a8:0a:b4:b8:28:71:54:
17:08:b5:08:0c:b6:9d:79:b0:6f:b9:1a:b2:63:47:
12:d5:73:f6:ae:47:a6:f2:6d:60:e5:8b:8a:71:34:
9f:5b:83:f6:5a:1c:d7:c4:72:2b:e4:e3:8f:39:f4:
7f:85:47:00:a9:24:2e:62:0d:24:9f:86:61:b6:76:
52:a7:7a:c5:7c:6a:b4:86:8f:f8:0d:c4:e5:96:2e:
7a:8b:87:5c:e6:85:82:17:52:09:3f:e7:27:c9:8b:
2e:97:f0:a8:ce:c6:c4:46:75:f6:09:27:71:a6:e0:
79:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:73:6B:E6:48:0F:27:C2:61:6E:B3:A2:2A:29:1A:8B:A4:E9:BC:43
X509v3 Authority Key Identifier:
keyid:80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/BC66C474FB5C11EFB5FF765EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.41.16.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:f8:81:79:d3:5a:7b:49:15:14:58:98:2e:53:cc:ab:1f:45:
1b:3e:c8:43:87:ca:17:b5:8d:0a:bf:9b:cc:1e:3c:b8:84:18:
1d:9f:38:ad:34:c5:d2:90:30:85:fe:50:4a:9b:84:1c:7a:98:
73:a4:fe:e6:4c:64:c7:c6:aa:06:0b:96:2b:04:ec:80:53:1f:
55:5f:43:dd:bf:77:00:23:97:fe:5e:97:fe:0f:3c:1b:20:e0:
76:fe:b1:af:3f:c7:42:51:6e:e1:f4:58:6b:bd:90:cd:0d:3e:
8b:46:39:d2:7b:19:15:b0:80:24:2b:58:75:c8:c0:c8:04:bd:
53:4e:f2:e6:b5:f9:4d:d5:28:65:c4:bf:8e:8d:09:c6:39:0b:
6d:55:e3:11:27:af:12:6e:28:f2:f0:ef:aa:5a:25:e1:8d:a5:
ce:6b:77:d5:be:b6:39:48:bb:cb:1d:63:72:1a:a1:4d:24:3b:
1c:0b:16:bd:df:37:4d:73:bf:bd:c2:cb:4b:9d:78:16:83:35:
20:e2:15:6b:14:52:91:aa:99:8c:fc:21:3e:32:38:83:88:02:
6a:ba:4e:29:a3:64:ef:07:df:88:58:19:24:05:e3:f2:8a:e3:
a6:81:8e:5f:9f:53:1f:68:be:2a:82:97:72:ab:d5:0c:36:2b:
27:81:69:57
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjNFREUxMTAvBgNVBAUTKDgwRkI1MjYzNkE5RTUwQzA4ODY4RTYyNzUyMEExQTBE
OEE4N0YwNDYwHhcNMjUwNjA1MDczMjIzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZjM1MC0zMzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzr1P5P9uwtVeOo+qNFOGwgeD6jZJL2G4r4+la7rHOZi+fYhl3DrPSf+UyGlP
LUq66UA/XgwoOyXA2KL47Hlg+ANLxLhD2pTr25ySjDInBRkX5RKIPSkAbOPEdJNA
x8PmKTVlQ/aVWzaZ1ajxzSLQmhzwAJBYBX3vObreO0x8xS3jDb4n+d0QuHdMpTjk
C6gKtLgocVQXCLUIDLadebBvuRqyY0cS1XP2rkem8m1g5YuKcTSfW4P2WhzXxHIr
5OOPOfR/hUcAqSQuYg0kn4ZhtnZSp3rFfGq0ho/4DcTlli56i4dc5oWCF1IJP+cn
yYsul/CozsbERnX2CSdxpuB5MwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHNza+ZI
DyfCYW6zoiopGouk6bxDMB8GA1UdIwQYMBaAFID7UmNqnlDAiGjmJ1IKGg2Kh/BG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0VERS81OTA0RDk3MEZC
NUMxMUVGOEVBRjMxMUNDNEY5QUUwMi9nUHRTWTJxZVVNQ0lhT1luVWdvYURZcUg4
RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dQdFNZMnFlVU1DSWFPWW5VZ29hRFlxSDhFWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjNFREUvNTkwNEQ5NzBGQjVDMTFFRjhFQUYzMTFDQzRGOUFFMDIvQkM2NkM0NzRG
QjVDMTFFRkI1RkY3NjVFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZykQMA0GCSqGSIb3DQEBCwUAA4IBAQC2+IF501p7SRUUWJguU8yr
H0UbPshDh8oXtY0Kv5vMHjy4hBgdnzitNMXSkDCF/lBKm4QcephzpP7mTGTHxqoG
C5YrBOyAUx9VX0Pdv3cAI5f+Xpf+DzwbIOB2/rGvP8dCUW7h9FhrvZDNDT6LRjnS
exkVsIAkK1h1yMDIBL1TTvLmtflN1ShlxL+OjQnGOQttVeMRJ68Sbijy8O+qWiXh
jaXOa3fVvrY5SLvLHWNyGqFNJDscCxa93zdNc7+9wstLnXgWgzUg4hVrFFKRqpmM
/CE+MjiDiAJquk4po2TvB9+IWBkkBePyiuOmgY5fn1MfaL4qgpdyq9UMNisngWlX
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:33:25 2026 by rpki-client