
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/A850C476026E11EBB2E0E72FC4F9AE02.roa
File: A850C476026E11EBB2E0E72FC4F9AE02.roa (raw, json)
Hash identifier: MFPThW45MDgLd1zOznKJ0EAncSmGQzB35N9n5suLU3U=
Subject key identifier: 47:FA:D0:38:F1:2A:9B:2D:ED:A1:B4:89:E9:43:A7:E6:DC:84:56:95
Certificate issuer: /CN=A91BC6B4/serialNumber=6CA6B2AC1DD17B014DB6C767279D08C66E4EFC05
Certificate serial: 103C
Authority key identifier: 6C:A6:B2:AC:1D:D1:7B:01:4D:B6:C7:67:27:9D:08:C6:6E:4E:FC:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/A850C476026E11EBB2E0E72FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:21:26 +0000
ROA not before: Tue 30 Sep 2025 17:46:13 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 137443
IP address blocks: 103.99.40.0/23 maxlen: 24
103.132.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.crl
rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:21:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4156 (0x103c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC6B4, serialNumber=6CA6B2AC1DD17B014DB6C767279D08C66E4EFC05
Validity
Not Before: Sep 30 17:46:13 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a47596-b155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2d:9f:5a:4b:6a:fc:ee:a6:33:2e:d3:d9:ab:
da:89:da:b7:00:ba:0a:c4:48:d8:93:6e:25:4d:ec:
1e:9f:86:d5:8f:84:fc:40:96:7f:80:f3:37:11:b8:
cb:86:05:60:48:ea:c3:de:c0:d7:4d:11:22:16:61:
f9:51:47:2f:66:be:50:ea:31:94:99:e1:da:3b:db:
90:82:55:db:0b:13:54:99:40:80:b9:bb:94:13:7e:
f9:ce:42:a3:1a:7c:9d:54:7f:74:5a:37:3d:e6:b5:
0d:50:45:9b:28:43:0c:b3:66:b9:51:bb:98:fb:7d:
b4:9d:40:0a:8d:bf:d5:34:fa:75:29:e6:a8:4f:c4:
f0:45:86:9b:61:f7:b0:46:db:78:62:bf:7a:4e:0d:
1c:25:5c:e2:e1:54:22:e8:91:8d:35:f4:d8:e4:eb:
95:1a:ef:8d:99:80:b5:d3:86:e8:cb:a7:1e:81:e5:
0c:8c:34:85:d1:24:08:89:c7:81:24:1f:d1:99:49:
10:2b:1f:a2:39:93:a1:68:aa:e7:d4:18:c9:6b:01:
68:15:43:61:a3:5d:65:1f:33:40:44:f0:93:cd:4e:
ba:6b:bb:10:83:9f:81:14:85:3a:f9:ef:b1:84:63:
71:89:49:81:d3:b7:5b:52:ad:05:ad:f5:52:67:0d:
b1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FA:D0:38:F1:2A:9B:2D:ED:A1:B4:89:E9:43:A7:E6:DC:84:56:95
X509v3 Authority Key Identifier:
keyid:6C:A6:B2:AC:1D:D1:7B:01:4D:B6:C7:67:27:9D:08:C6:6E:4E:FC:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/A850C476026E11EBB2E0E72FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.99.40.0/23
103.132.234.0/23
Signature Algorithm: sha256WithRSAEncryption
06:ae:63:fb:37:19:46:cc:14:80:49:1d:4f:21:c7:b1:7b:27:
5a:b5:35:f2:c2:3b:8d:db:9c:65:e7:72:ca:10:d6:93:a0:94:
49:cb:5a:e1:ee:ba:68:8b:03:f3:12:cb:51:e7:8a:b3:cc:50:
ee:db:2d:73:c0:a9:7d:a6:e4:2e:8e:6f:28:4d:f0:0e:c6:7a:
b9:db:f4:46:37:e6:4b:93:0e:d4:d8:bc:f0:02:cf:64:9d:87:
6e:4d:cb:52:de:8c:52:2e:49:c5:8a:fb:52:c9:1e:74:28:eb:
49:dd:e9:d0:8b:72:e9:79:80:4c:c2:e6:66:1c:52:3c:a0:45:
e9:84:cf:f6:45:9c:ec:aa:79:cb:3b:d0:f0:40:8f:e4:a3:4e:
d6:bc:75:f4:99:42:e2:f3:03:06:80:aa:23:74:d0:59:d7:d2:
f0:54:6b:27:fd:80:b8:4f:65:c6:77:2f:a5:71:79:f8:2c:8d:
00:db:12:b8:d5:f4:05:80:73:e0:3e:d1:66:90:12:f8:d2:b0:
21:ac:ca:a4:2e:7b:dc:15:03:bd:dd:0a:5f:10:53:a9:92:f8:
f9:2b:5d:57:f5:76:53:dd:af:b4:9c:09:8f:d6:4a:a1:04:62:
d5:bf:bc:ce:3d:19:1f:24:a5:91:32:ea:7d:7e:0f:87:c5:fd:
8d:9d:a9:78
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICEDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkM2QjQxMTAvBgNVBAUTKDZDQTZCMkFDMUREMTdCMDE0REI2Qzc2NzI3OUQwOEM2
NkU0RUZDMDUwHhcNMjUwOTMwMTc0NjEzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzU5Ni1iMTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5y2fWktq/O6mMy7T2avaidq3ALoKxEjYk24lTewen4bVj4T8QJZ/gPM3EbjL
hgVgSOrD3sDXTREiFmH5UUcvZr5Q6jGUmeHaO9uQglXbCxNUmUCAubuUE375zkKj
GnydVH90Wjc95rUNUEWbKEMMs2a5UbuY+320nUAKjb/VNPp1KeaoT8TwRYabYfew
Rtt4Yr96Tg0cJVzi4VQi6JGNNfTY5OuVGu+NmYC104boy6cegeUMjDSF0SQIiceB
JB/RmUkQKx+iOZOhaKrn1BjJawFoFUNho11lHzNARPCTzU66a7sQg5+BFIU6+e+x
hGNxiUmB07dbUq0FrfVSZw2xRQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFEf60Djx
Kpst7aG0ielDp+bchFaVMB8GA1UdIwQYMBaAFGymsqwd0XsBTbbHZyedCMZuTvwF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzZCNC83MjZGNTFDMjYz
RjIxMUU5QkIyMERENDVDNEY5QUUwMi9iS2F5ckIzUmV3Rk50c2RuSjUwSXhtNU9f
QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JLYXlyQjNSZXdGTnRzZG5KNTBJeG01T19BVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkM2QjQvNzI2RjUxQzI2M0YyMTFFOUJCMjBERDQ1QzRGOUFFMDIvQTg1MEM0NzYw
MjZFMTFFQkIyRTBFNzJGQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQBZ2MoAwQBZ4TqMA0GCSqGSIb3DQEBCwUAA4IBAQAGrmP7NxlGzBSA
SR1PIcexeydatTXywjuN25xl53LKENaToJRJy1rh7rpoiwPzEstR54qzzFDu2y1z
wKl9puQujm8oTfAOxnq52/RGN+ZLkw7U2LzwAs9knYduTctS3oxSLknFivtSyR50
KOtJ3enQi3LpeYBMwuZmHFI8oEXphM/2RZzsqnnLO9DwQI/ko07WvHX0mULi8wMG
gKojdNBZ19LwVGsn/YC4T2XGdy+lcXn4LI0A2xK41fQFgHPgPtFmkBL40rAhrMqk
LnvcFQO93QpfEFOpkvj5K11X9XZT3a+0nAmP1kqhBGLVv7zOPRkfJKWRMup9fg+H
xf2Nnal4
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:17:03 2026 by rpki-client