
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/452D9EF494F811ED85ADE381C4F9AE02.roa
File: 452D9EF494F811ED85ADE381C4F9AE02.roa (raw, json)
Hash identifier: R8W+EB/lWtg47U+uGGO0EmzVBnrfGUiY2Axcuo+zvzU=
Subject key identifier: 9B:62:89:64:72:13:65:FD:72:D8:26:07:A6:0F:41:87:55:DF:4E:F2
Certificate issuer: /CN=A91C8066/serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E
Certificate serial: 0247
Authority key identifier: 16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/452D9EF494F811ED85ADE381C4F9AE02.roa
Signing time: Wed 11 Feb 2026 02:21:53 +0000
ROA not before: Wed 11 Feb 2026 02:21:53 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 137406
IP address blocks: 103.107.156.0/22 maxlen: 24
2403:8c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl
rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:04:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 583 (0x247)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8066, serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E
Validity
Not Before: Feb 11 02:21:53 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=698be7c1-da03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a1:84:34:e7:9e:7a:b2:12:fc:e3:6f:22:4b:
41:07:34:91:e7:1b:7e:f4:d4:c3:11:51:dc:bc:db:
19:0e:7b:6b:eb:b8:b9:70:13:d4:07:38:d8:60:b1:
e9:3c:bb:1e:47:9c:04:9a:cf:aa:60:5e:a7:39:6a:
ab:6c:84:3f:a7:7b:06:fa:70:03:d5:76:b6:65:5a:
f3:ed:52:c4:e6:d0:39:10:1f:ff:dd:0f:71:9a:a5:
94:55:26:23:d0:1a:5d:c7:f9:11:a8:d1:35:30:57:
a9:f9:55:d2:31:63:05:78:5b:af:47:98:2c:83:df:
10:e8:27:f8:eb:5a:68:d1:ce:a6:06:ab:95:58:7a:
57:90:fc:f5:61:a4:4f:68:44:38:02:1a:9c:42:26:
e5:c8:92:4f:f4:ea:e3:6a:0e:5c:db:ae:c0:05:11:
7a:85:3a:3c:14:0f:a4:a9:f8:bf:4b:88:c2:41:c0:
64:66:a8:8d:00:d4:45:60:ea:03:9c:12:fd:6f:2d:
dd:fd:09:2a:5a:e4:5f:4c:a8:cc:e1:f5:a7:49:48:
c5:4f:50:de:bc:63:1d:41:aa:9d:97:5e:37:e6:cf:
1f:80:b0:eb:83:27:c5:e6:c2:d1:02:95:3b:38:85:
9e:05:eb:48:65:83:af:00:4c:f2:35:41:99:93:2e:
43:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:62:89:64:72:13:65:FD:72:D8:26:07:A6:0F:41:87:55:DF:4E:F2
X509v3 Authority Key Identifier:
keyid:16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/452D9EF494F811ED85ADE381C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.107.156.0/22
IPv6:
2403:8c0::/32
Signature Algorithm: sha256WithRSAEncryption
58:fd:42:98:59:c6:71:31:03:10:44:ff:03:7a:6e:8b:dc:27:
1f:e1:38:46:00:cb:85:94:b8:9a:d6:89:c7:b9:ca:56:b9:b5:
39:fa:55:1d:1f:2f:f0:1d:66:83:c0:1d:d1:6c:38:11:38:a6:
8b:1e:bf:f6:ff:18:78:3f:c1:0a:44:d9:1d:a1:f9:b7:6b:e7:
d5:e0:13:b8:01:66:44:80:e2:bd:a5:62:de:ae:f0:4c:80:f4:
87:2e:63:7d:cd:cb:be:36:e3:14:4c:d9:b0:56:78:8e:3e:8d:
92:94:6d:4c:9b:be:18:9a:b2:ff:26:51:ab:31:ef:e5:19:d0:
70:68:92:5b:95:63:7f:26:02:6e:ee:33:d3:7e:e7:00:ed:6b:
61:de:98:82:97:d6:e7:b2:7c:e7:82:84:df:6e:0b:b1:e4:cc:
62:06:f7:b0:57:05:a0:b8:cc:55:e3:82:f1:fc:c5:08:68:6d:
b9:b3:ee:24:f4:b7:3b:ae:f4:d4:14:41:66:c9:38:ee:58:e6:
27:d7:95:8b:6f:3b:2b:7a:65:b6:ca:6a:ab:6b:b2:e4:13:0d:
fd:e3:5f:29:09:92:3d:66:8f:d0:1d:24:be:4a:76:a5:38:1f:
50:4d:62:82:53:11:54:7b:3d:cf:3a:9e:55:94:0e:ea:26:a4:
d9:7d:65:51
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QzgwNjYxMTAvBgNVBAUTKDE2MEM3MkNDNTc3QkQ4REU1M0EyRUNCMDA5OEMyMkYz
NUE1MUFBOUUwHhcNMjYwMjExMDIyMTUzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OThiZTdjMS1kYTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnaGENOeeerIS/ONvIktBBzSR5xt+9NTDEVHcvNsZDntr67i5cBPUBzjYYLHp
PLseR5wEms+qYF6nOWqrbIQ/p3sG+nAD1Xa2ZVrz7VLE5tA5EB//3Q9xmqWUVSYj
0Bpdx/kRqNE1MFep+VXSMWMFeFuvR5gsg98Q6Cf461po0c6mBquVWHpXkPz1YaRP
aEQ4AhqcQiblyJJP9Orjag5c267ABRF6hTo8FA+kqfi/S4jCQcBkZqiNANRFYOoD
nBL9by3d/QkqWuRfTKjM4fWnSUjFT1DevGMdQaqdl1435s8fgLDrgyfF5sLRApU7
OIWeBetIZYOvAEzyNUGZky5DRQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJtiiWRy
E2X9ctgmB6YPQYdV307yMB8GA1UdIwQYMBaAFBYMcsxXe9jeU6LssAmMIvNaUaqe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODA2Ni8xOEE1MTI0ODk0
RjUxMUVEQjEwQkMyN0RDNEY5QUUwMi9GZ3h5ekZkNzJONVRvdXl3Q1l3aTgxcFJx
cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZneHl6RmQ3Mk41VG91eXdDWXdpODFwUnFwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzgwNjYvMThBNTEyNDg5NEY1MTFFREIxMEJDMjdEQzRGOUFFMDIvNDUyRDlFRjQ5
NEY4MTFFRDg1QURFMzgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJna5wwDQQCAAIwBwMFACQDCMAwDQYJKoZIhvcNAQELBQAD
ggEBAFj9QphZxnExAxBE/wN6bovcJx/hOEYAy4WUuJrWice5yla5tTn6VR0fL/Ad
ZoPAHdFsOBE4posev/b/GHg/wQpE2R2h+bdr59XgE7gBZkSA4r2lYt6u8EyA9Icu
Y33Ny7424xRM2bBWeI4+jZKUbUybvhiasv8mUasx7+UZ0HBokluVY38mAm7uM9N+
5wDta2HemIKX1ueyfOeChN9uC7HkzGIG97BXBaC4zFXjgvH8xQhobbmz7iT0tzuu
9NQUQWbJOO5Y5ifXlYtvOyt6ZbbKaqtrsuQTDf3jXykJkj1mj9AdJL5KdqU4H1BN
YoJTEVR7Pc86nlWUDuompNl9ZVE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:22:17 2026 by rpki-client