
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/CA1A46101A5B11EE89B07267C4F9AE02.roa
File: CA1A46101A5B11EE89B07267C4F9AE02.roa (raw, json)
Hash identifier: tqHiB6MdNj5867Z3RrIXxNvtsP/WHrWgARnyhJP6ZUQ=
Subject key identifier: 02:8B:55:E1:E9:54:8F:86:59:A5:A1:4B:4C:D1:BA:C1:77:A1:9E:74
Certificate issuer: /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Certificate serial: 047E
Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/CA1A46101A5B11EE89B07267C4F9AE02.roa
Signing time: Sun 13 Sep 2026 01:51:33 +0000
ROA not before: Sun 13 Sep 2026 01:51:33 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 207990
IP address blocks: 103.109.80.0/23 maxlen: 24
103.192.206.0/24 maxlen: 24
103.194.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:18:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1150 (0x47e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6587, serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Validity
Not Before: Sep 13 01:51:33 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6aa601a5-da80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:ac:6a:0b:f9:71:af:ec:f0:2d:17:d6:80:
ae:23:47:ee:9d:9e:47:ae:e8:27:ec:28:c0:d2:58:
1b:c9:94:3b:f2:89:f2:3b:c3:ef:a8:7e:1f:08:2d:
e1:9b:f3:a2:70:aa:dc:4f:f9:78:e3:6f:97:8d:e6:
bd:4f:ba:80:5b:1a:bf:7e:31:d2:25:bd:cf:f6:ee:
fe:78:4f:9d:94:c6:52:bf:66:f4:5b:e7:61:a7:9d:
76:d7:cd:27:f6:2c:f0:ba:fd:58:fe:31:5d:69:dd:
b1:42:c8:31:26:83:82:a0:60:13:c8:2e:72:ee:0e:
db:7a:07:ca:c8:4d:0d:7b:21:42:a4:20:36:70:71:
0b:bf:1f:1a:f1:6f:22:c8:c3:0a:65:09:23:ef:93:
29:7b:23:c6:f3:dd:54:b5:05:fd:b9:6f:6e:f8:b8:
de:40:5a:ab:7c:e7:be:9e:43:02:37:d5:d5:01:ad:
54:1e:f3:08:ca:13:6e:63:98:d6:b7:95:0e:5f:a6:
75:e1:d2:52:b8:35:7c:5e:a4:94:4e:c8:28:1d:e3:
09:76:d4:4d:8f:8b:c5:01:84:96:30:13:27:d8:47:
74:d5:98:04:e4:3a:7c:79:35:b3:0d:79:4f:e6:ce:
61:ee:62:2e:9b:3f:1e:e3:69:ec:90:1e:0e:58:dc:
30:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8B:55:E1:E9:54:8F:86:59:A5:A1:4B:4C:D1:BA:C1:77:A1:9E:74
X509v3 Authority Key Identifier:
keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/CA1A46101A5B11EE89B07267C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.109.80.0/23
103.192.206.0/24
103.194.114.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:f6:4d:43:37:48:5f:dc:9d:0e:e2:31:cc:4e:9a:86:e8:82:
98:ba:ef:7b:80:8f:ad:18:31:e6:0e:49:7c:f6:f8:92:97:2f:
69:58:bb:78:ed:a4:1b:a4:d8:fa:8b:df:f7:77:9b:71:60:bf:
e3:c1:c3:93:40:3a:d0:fe:75:e9:f6:2c:5f:87:e7:ab:05:52:
ee:81:6b:08:55:df:9c:94:15:5a:bb:47:60:1c:9a:ea:06:6c:
af:65:20:05:ac:d4:68:1a:d5:d1:d8:35:60:ee:6f:e3:7f:5e:
7e:de:83:4e:19:b1:6f:3d:3b:b7:81:40:a9:f4:28:2a:22:30:
0f:6c:59:f1:31:9c:71:82:2b:b5:6e:55:71:3c:f3:19:ef:46:
07:b2:b2:34:ea:33:91:a4:64:a2:e3:31:60:8f:4e:f6:b4:28:
8f:3b:73:4c:ae:21:7d:f6:11:89:43:32:07:d3:73:ab:e4:72:
42:b5:76:bf:82:a4:7e:bd:d6:8f:9b:91:73:b4:14:d9:09:26:
e9:ab:f7:2d:13:cf:7d:49:66:0b:5e:59:d4:90:3f:93:61:1d:
39:d2:e5:76:13:f0:fb:bf:f5:76:ae:ba:08:14:72:02:ec:72:
83:92:b9:6d:ab:f3:0a:9d:c9:4f:2c:97:5a:88:a1:7c:b3:69:
08:0e:d6:ff
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICBH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjY1ODcxMTAvBgNVBAUTKDJENjM0MDc3Q0M4NDdCNTlENDA0OEQ0M0UwNEIzMzA5
Njk4RkU2MzgwHhcNMjYwOTEzMDE1MTMzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWE2MDFhNS1kYTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwyGsagv5ca/s8C0X1oCuI0funZ5Hrugn7CjA0lgbyZQ78onyO8PvqH4fCC3h
m/OicKrcT/l442+Xjea9T7qAWxq/fjHSJb3P9u7+eE+dlMZSv2b0W+dhp512180n
9izwuv1Y/jFdad2xQsgxJoOCoGATyC5y7g7begfKyE0NeyFCpCA2cHELvx8a8W8i
yMMKZQkj75MpeyPG891UtQX9uW9u+LjeQFqrfOe+nkMCN9XVAa1UHvMIyhNuY5jW
t5UOX6Z14dJSuDV8XqSUTsgoHeMJdtRNj4vFAYSWMBMn2Ed01ZgE5Dp8eTWzDXlP
5s5h7mIumz8e42nskB4OWNwwlQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFAKLVeHp
VI+GWaWhS0zRusF3oZ50MB8GA1UdIwQYMBaAFC1jQHfMhHtZ1ASNQ+BLMwlpj+Y4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjU4Ny80MTdENzFCNDkx
ODYxMUVEQTg0QTEyNERDNEY5QUUwMi9MV05BZDh5RWUxblVCSTFENEVzekNXbVA1
amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xXTkFkOHlFZTFuVUJJMUQ0RXN6Q1dtUDVqZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjY1ODcvNDE3RDcxQjQ5MTg2MTFFREE4NEExMjREQzRGOUFFMDIvQ0ExQTQ2MTAx
QTVCMTFFRTg5QjA3MjY3QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQBZ21QAwQAZ8DOAwQAZ8JyMA0GCSqGSIb3DQEBCwUAA4IBAQBv9k1D
N0hf3J0O4jHMTpqG6IKYuu97gI+tGDHmDkl89viSly9pWLt47aQbpNj6i9/3d5tx
YL/jwcOTQDrQ/nXp9ixfh+erBVLugWsIVd+clBVau0dgHJrqBmyvZSAFrNRoGtXR
2DVg7m/jf15+3oNOGbFvPTu3gUCp9CgqIjAPbFnxMZxxgiu1blVxPPMZ70YHsrI0
6jORpGSi4zFgj072tCiPO3NMriF99hGJQzIH03Or5HJCtXa/gqR+vdaPm5FztBTZ
CSbpq/ctE899SWYLXlnUkD+TYR050uV2E/D7v/V2rroIFHIC7HKDkrltq/MKnclP
LJdaiKF8s2kIDtb/
-----END CERTIFICATE-----
Generated at Wed Sep 23 12:03:48 2026 by rpki-client