
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/8160C03610E911EA86FA6774C4F9AE02.roa
File: 8160C03610E911EA86FA6774C4F9AE02.roa (raw, json)
Hash identifier: 6d9x5P4qjslvkCA0UbFumpnnbX594CB88ciKOH4G9Ks=
Subject key identifier: 43:0C:08:9B:A5:33:FE:23:63:B2:41:AD:2E:2E:ED:53:C7:8E:2B:35
Certificate issuer: /CN=A91BB883/serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29
Certificate serial: 0CA4
Authority key identifier: 4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/8160C03610E911EA86FA6774C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:36:08 +0000
ROA not before: Fri 16 Jan 2026 18:15:46 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 136009
IP address blocks: 103.79.182.0/23 maxlen: 23
103.79.182.0/24 maxlen: 24
103.79.183.0/24 maxlen: 24
103.122.90.0/23 maxlen: 23
103.122.90.0/24 maxlen: 24
103.122.91.0/24 maxlen: 24
2001:df6:d600::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl
rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3236 (0xca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB883, serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29
Validity
Not Before: Jan 16 18:15:46 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a45ce8-efe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:27:9b:1a:db:8a:47:0f:fc:12:ab:22:a2:f5:
67:97:78:52:3d:4d:de:bb:6b:1f:0f:1e:df:fc:63:
c1:1e:1d:ed:76:9e:77:03:7d:79:3f:99:4f:94:a7:
0c:2a:ec:0d:a6:ac:b1:80:20:a6:a6:e5:82:ed:36:
df:f9:67:d2:cf:4c:0f:a7:4a:f7:a6:b6:02:25:e1:
86:87:07:ed:9b:18:c4:27:47:f2:3e:e7:b6:d7:00:
a4:93:0e:88:fa:25:f7:6f:3b:6a:ed:87:6c:ef:44:
ce:de:3e:93:d8:ef:bd:9e:fc:8f:6a:0d:9e:d1:fb:
d6:31:db:7f:5f:27:fe:b6:d4:a0:67:ec:81:40:4c:
41:28:c8:c2:a5:22:70:f6:37:f8:93:50:9c:58:e1:
fc:2e:aa:5b:54:c8:dc:8a:00:f8:3b:04:ed:2c:66:
09:68:7b:5a:a9:e8:30:b5:98:d3:62:5d:1d:eb:bd:
c8:86:7e:a8:09:76:db:55:51:79:f6:6c:3e:93:d4:
0c:9a:d6:ea:b6:1b:93:05:60:c4:b2:6b:53:bf:b3:
ea:f3:34:04:45:18:0b:04:bc:02:57:1e:eb:49:3d:
b7:42:f8:49:bd:e3:03:e1:5a:dd:23:0a:ef:00:93:
5d:8a:71:c6:fa:52:df:9e:48:99:f9:81:f7:39:f4:
60:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0C:08:9B:A5:33:FE:23:63:B2:41:AD:2E:2E:ED:53:C7:8E:2B:35
X509v3 Authority Key Identifier:
keyid:4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/8160C03610E911EA86FA6774C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.79.182.0/23
103.122.90.0/23
IPv6:
2001:df6:d600::/48
Signature Algorithm: sha256WithRSAEncryption
86:07:f0:a8:8f:0a:8a:c5:13:7b:9a:ab:e7:e2:74:9a:14:a3:
86:cf:d6:27:38:1c:d7:31:fb:83:43:c3:4a:9f:a7:70:39:20:
53:f6:95:f6:87:a4:7e:a0:2d:ff:47:bd:39:33:eb:28:08:92:
35:b8:76:85:9f:47:37:70:54:b3:28:86:e8:3e:07:6e:bb:52:
6e:a5:49:56:9f:15:e4:c4:b9:47:46:83:c9:a1:32:a7:f8:b7:
4c:d1:e6:31:4d:8b:65:98:13:53:45:15:e4:bc:a6:6f:df:bd:
1b:07:cd:8b:27:9f:e1:5b:25:64:6c:ad:e5:f4:58:e1:ae:08:
1c:8c:eb:a7:db:d6:05:02:68:c6:a2:b1:42:54:50:e2:ed:94:
72:69:07:a8:bf:c8:3b:dd:74:c0:8d:c9:f3:54:12:2c:fc:45:
d1:a1:7d:2d:2f:ed:7d:ce:70:22:66:8f:ee:37:4f:43:33:af:
2f:e3:2d:fa:87:bd:21:af:64:e1:bd:b3:0c:f1:98:79:4f:06:
ee:b6:97:b5:b2:35:2c:5d:80:f2:7a:a9:40:ae:50:57:d3:05:
da:55:b9:3c:e6:7d:36:e5:39:88:40:61:b1:b5:6e:d9:3f:ce:
1e:c3:d4:fd:19:b5:53:3a:81:7c:2e:71:e7:79:01:09:43:7f:
f9:86:e6:f2
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgICDKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI4ODMxMTAvBgNVBAUTKDRGNUFGNTY1RDMwREQ1NEYyNDE0N0VGNUUxNzhBQTBC
QUEzM0ZDMjkwHhcNMjYwMTE2MTgxNTQ2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWNlOC1lZmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkCebGtuKRw/8EqsiovVnl3hSPU3eu2sfDx7f/GPBHh3tdp53A315P5lPlKcM
KuwNpqyxgCCmpuWC7Tbf+WfSz0wPp0r3prYCJeGGhwftmxjEJ0fyPue21wCkkw6I
+iX3bztq7Yds70TO3j6T2O+9nvyPag2e0fvWMdt/Xyf+ttSgZ+yBQExBKMjCpSJw
9jf4k1CcWOH8LqpbVMjcigD4OwTtLGYJaHtaqegwtZjTYl0d673Ihn6oCXbbVVF5
9mw+k9QMmtbqthuTBWDEsmtTv7Pq8zQERRgLBLwCVx7rST23QvhJveMD4VrdIwrv
AJNdinHG+lLfnkiZ+YH3OfRguQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFEMMCJul
M/4jY7JBrS4u7VPHjis1MB8GA1UdIwQYMBaAFE9a9WXTDdVPJBR+9eF4qguqM/wp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjg4My9FOTgyQkEzNjEw
RTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFVOGtGSDcxNFhpcUM2b3pf
Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1QxcjFaZE1OMVU4a0ZINzE0WGlxQzZvel9Day5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkI4ODMvRTk4MkJBMzYxMEU3MTFFQTlEMjFDMjZGQzRGOUFFMDIvODE2MEMwMzYx
MEU5MTFFQTg2RkE2Nzc0QzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS
BAIAATAMAwQBZ0+2AwQBZ3paMA8EAgACMAkDBwAgAQ321gAwDQYJKoZIhvcNAQEL
BQADggEBAIYH8KiPCorFE3uaq+fidJoUo4bP1ic4HNcx+4NDw0qfp3A5IFP2lfaH
pH6gLf9HvTkz6ygIkjW4doWfRzdwVLMohug+B267Um6lSVafFeTEuUdGg8mhMqf4
t0zR5jFNi2WYE1NFFeS8pm/fvRsHzYsnn+FbJWRsreX0WOGuCByM66fb1gUCaMai
sUJUUOLtlHJpB6i/yDvddMCNyfNUEiz8RdGhfS0v7X3OcCJmj+43T0Mzry/jLfqH
vSGvZOG9swzxmHlPBu62l7WyNSxdgPJ6qUCuUFfTBdpVuTzmfTblOYhAYbG1btk/
zh7D1P0ZtVM6gXwuced5AQlDf/mG5vI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:10:00 2026 by rpki-client