
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/A46317803F5211EBB1B1701FC4F9AE02.roa
File: A46317803F5211EBB1B1701FC4F9AE02.roa (raw, json)
Hash identifier: cFqGeqvAp4+H9D3Go8EW1NlfA3DNb+FcP3oMJfoNMaY=
Subject key identifier: 39:29:99:0E:F4:A4:43:E3:71:4F:82:DC:F7:DC:49:21:D7:97:9B:CC
Certificate issuer: /CN=A91B58FF/serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F
Certificate serial: 07D0
Authority key identifier: 24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/A46317803F5211EBB1B1701FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:46:56 +0000
ROA not before: Fri 28 Nov 2025 20:53:46 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 137525
IP address blocks: 103.111.168.0/22 maxlen: 23
110.238.160.0/20 maxlen: 21
110.238.160.0/22 maxlen: 22
110.238.168.0/22 maxlen: 22
110.238.176.0/21 maxlen: 21
110.238.180.0/22 maxlen: 22
110.238.182.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl
rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:55:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2000 (0x7d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B58FF, serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F
Validity
Not Before: Nov 28 20:53:46 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a46d7f-f63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:af:9f:1f:50:ea:a3:39:09:fc:c0:4d:d4:e8:
6b:1b:2f:2f:84:d4:d8:cb:3c:a7:ea:ba:34:9b:60:
ca:41:a7:f0:20:33:81:cb:91:96:ad:7b:d9:63:2c:
f8:09:8d:71:a7:0a:61:b3:28:7e:b1:21:56:76:8d:
47:65:ac:b4:20:ba:cb:0d:95:69:72:f8:f1:a7:e3:
13:7d:40:e3:27:d1:18:04:3d:f4:26:82:81:bd:28:
76:a5:d0:16:45:40:d1:b5:8a:68:3e:c8:c2:2d:4a:
13:d1:7a:ea:7a:39:6d:b0:16:54:a5:3d:be:0e:b5:
bd:b6:07:40:99:c6:1c:4b:3a:93:96:1d:dd:36:99:
8a:6e:3a:65:53:84:d9:b5:c9:0c:cc:c5:1e:27:0e:
6b:89:c8:2c:09:c8:21:8b:fc:00:dc:cd:d7:25:de:
ba:12:0f:d3:46:0b:ff:5c:b6:65:38:b3:00:c5:02:
a9:c3:c9:79:6b:ba:e5:e5:6c:f0:14:db:82:ba:dd:
9e:3a:51:9b:15:fe:0e:7f:55:18:b4:73:b9:11:00:
5c:93:bc:20:c5:1a:4a:cd:23:d6:a8:05:6c:1f:15:
85:82:8d:1b:70:96:8e:32:63:fa:e6:46:db:82:b2:
db:6a:7f:06:e5:37:91:ee:c6:fd:dc:a9:d6:cf:48:
17:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:29:99:0E:F4:A4:43:E3:71:4F:82:DC:F7:DC:49:21:D7:97:9B:CC
X509v3 Authority Key Identifier:
keyid:24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/A46317803F5211EBB1B1701FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.111.168.0/22
110.238.160.0-110.238.183.255
Signature Algorithm: sha256WithRSAEncryption
7c:07:fc:f7:ae:57:8a:58:01:ee:28:1c:17:52:06:3d:b5:19:
4a:43:97:99:13:59:93:58:0a:91:13:42:42:6a:e8:db:81:9b:
73:4c:88:29:83:cf:3a:c5:87:98:4b:30:e1:d4:2c:8c:ae:6b:
51:cf:f1:ae:4b:4c:7d:67:77:40:d6:f1:f7:de:49:7d:24:75:
73:53:da:21:47:39:fa:30:70:6d:cb:12:06:fb:50:91:5f:93:
72:15:2a:31:88:4b:a8:0b:3a:39:0b:30:aa:2c:dc:85:58:d4:
69:80:7c:71:77:a0:86:1f:ea:1b:31:bd:2d:d6:c8:5e:a0:25:
0a:3a:a4:ea:96:3b:f9:b4:c1:d5:af:90:d3:de:6a:68:ce:72:
62:d1:46:bf:8c:b8:ad:b3:c7:51:48:15:9f:50:55:f0:13:68:
ac:be:48:d7:57:0e:7b:29:06:2d:88:6c:e3:65:cc:97:af:51:
99:30:f8:19:ca:6d:9a:ca:04:bd:18:04:b7:d6:30:0a:e1:7b:
0c:ba:2d:fc:93:58:60:7f:22:23:81:a3:8e:f2:c5:5f:4d:bc:
2c:fc:71:87:78:a5:8b:19:0a:c7:6f:a8:6a:59:43:54:71:6c:
88:16:f2:56:fe:c8:1a:7d:70:3b:9e:e2:71:86:3b:c5:4b:25:
06:77:2a:81
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgICB9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjU4RkYxMTAvBgNVBAUTKDI0NDQzQUU4M0VERjk2QUYxOTQyREJGRjBFRDRGOEMx
N0RENjc5NkYwHhcNMjUxMTI4MjA1MzQ2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NmQ3Zi1mNjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwK+fH1DqozkJ/MBN1OhrGy8vhNTYyzyn6ro0m2DKQafwIDOBy5GWrXvZYyz4
CY1xpwphsyh+sSFWdo1HZay0ILrLDZVpcvjxp+MTfUDjJ9EYBD30JoKBvSh2pdAW
RUDRtYpoPsjCLUoT0XrqejltsBZUpT2+DrW9tgdAmcYcSzqTlh3dNpmKbjplU4TZ
tckMzMUeJw5ricgsCcghi/wA3M3XJd66Eg/TRgv/XLZlOLMAxQKpw8l5a7rl5Wzw
FNuCut2eOlGbFf4Of1UYtHO5EQBck7wgxRpKzSPWqAVsHxWFgo0bcJaOMmP65kbb
grLban8G5TeR7sb93KnWz0gXOQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFDkpmQ70
pEPjcU+C3PfcSSHXl5vMMB8GA1UdIwQYMBaAFCREOug+35avGULb/w7U+MF91nlv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNThGRi8xMjA0QUIzQzND
M0QxMUVCQjkzODFGNzFDNEY5QUUwMi9KRVE2NkQ3ZmxxOFpRdHZfRHRUNHdYM1dl
VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pFUTY2RDdmbHE4WlF0dl9EdFQ0d1gzV2VXOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjU4RkYvMTIwNEFCM0MzQzNEMTFFQkI5MzgxRjcxQzRGOUFFMDIvQTQ2MzE3ODAz
RjUyMTFFQkIxQjE3MDFGQzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa
BAIAATAUAwQCZ2+oMAwDBAVu7qADBANu7rAwDQYJKoZIhvcNAQELBQADggEBAHwH
/PeuV4pYAe4oHBdSBj21GUpDl5kTWZNYCpETQkJq6NuBm3NMiCmDzzrFh5hLMOHU
LIyua1HP8a5LTH1nd0DW8ffeSX0kdXNT2iFHOfowcG3LEgb7UJFfk3IVKjGIS6gL
OjkLMKos3IVY1GmAfHF3oIYf6hsxvS3WyF6gJQo6pOqWO/m0wdWvkNPeamjOcmLR
Rr+MuK2zx1FIFZ9QVfATaKy+SNdXDnspBi2IbONlzJevUZkw+BnKbZrKBL0YBLfW
MArhewy6LfyTWGB/IiOBo47yxV9NvCz8cYd4pYsZCsdvqGpZQ1RxbIgW8lb+yBp9
cDue4nGGO8VLJQZ3KoE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:56 2026 by rpki-client