
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/B8FC2F342E4311F1A2579C1594833773.roa
File: B8FC2F342E4311F1A2579C1594833773.roa (raw, json)
Hash identifier: pjauDszwaF/mopQYyjDIvAGHDO32bERoI1rKGNgCq5c=
Subject key identifier: 03:7F:5B:7E:7E:09:17:33:0E:06:1B:8B:F2:51:EE:D8:F0:D0:9C:FE
Certificate issuer: /CN=A91C8BAB/serialNumber=168D67D8E525898BFD0DDF2EF7CC41B89EB93C4E
Certificate serial: 09
Authority key identifier: 16:8D:67:D8:E5:25:89:8B:FD:0D:DF:2E:F7:CC:41:B8:9E:B9:3C:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fo1n2OUliYv9Dd8u98xBuJ65PE4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/B8FC2F342E4311F1A2579C1594833773.roa
Signing time: Thu 09 Apr 2026 09:43:19 +0000
ROA not before: Thu 09 Apr 2026 09:43:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134110
IP address blocks: 103.53.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.crl
rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fo1n2OUliYv9Dd8u98xBuJ65PE4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:51:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8BAB, serialNumber=168D67D8E525898BFD0DDF2EF7CC41B89EB93C4E
Validity
Not Before: Apr 9 09:43:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69d774b7-240f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:13:c9:2a:6e:15:7d:f0:3b:92:e1:3d:3f:8c:
b6:5c:fc:b0:f2:ee:b4:1c:cd:dc:28:4d:34:a7:ab:
7a:9a:dd:6c:fb:d2:15:f3:31:dc:8d:99:34:f5:c7:
05:a9:bf:f4:04:7f:79:b3:10:eb:24:ae:44:8a:21:
b1:76:bb:e2:e6:fe:78:d1:c8:4b:90:9d:41:0f:55:
12:08:26:4c:39:a7:c6:74:b4:5e:56:10:9f:82:f9:
69:fc:99:ed:0b:e3:2d:11:0c:2c:a2:ba:dc:c0:8f:
67:c1:9e:7c:7a:bf:1c:8b:fd:ae:a4:7a:62:7e:2f:
83:69:d9:79:35:b1:92:41:a5:ff:d2:06:9a:04:09:
60:f0:f5:53:32:51:39:a7:40:1e:c1:43:c0:9d:06:
69:f9:69:e0:39:f4:ad:d3:ec:27:ca:e7:c1:65:f4:
43:67:1d:3b:c4:5b:ef:5c:38:ac:07:9b:c7:72:af:
76:4f:6b:b9:46:28:bb:82:22:83:00:49:f6:9d:f7:
b4:e2:65:58:c7:11:c7:0a:df:15:20:53:56:eb:49:
2a:38:ed:26:2b:ee:39:e1:b6:df:2a:6f:67:64:dc:
84:5f:37:46:d9:81:1c:1b:7b:68:f0:a6:24:a5:ca:
d6:0e:3f:e0:22:47:8e:fd:39:46:74:82:7b:85:f9:
7d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7F:5B:7E:7E:09:17:33:0E:06:1B:8B:F2:51:EE:D8:F0:D0:9C:FE
X509v3 Authority Key Identifier:
keyid:16:8D:67:D8:E5:25:89:8B:FD:0D:DF:2E:F7:CC:41:B8:9E:B9:3C:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fo1n2OUliYv9Dd8u98xBuJ65PE4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/B8FC2F342E4311F1A2579C1594833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.53.148.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:1b:72:97:b9:40:1a:22:ba:ff:f1:52:63:ba:b8:72:10:7f:
d6:b5:a9:e2:24:2b:83:df:59:b8:87:78:47:3e:a8:13:dd:e0:
7c:69:46:2c:b1:34:34:17:57:83:c7:5f:6c:a2:bb:4e:1e:ae:
85:71:c0:0f:a7:ac:b9:ea:31:6f:a4:2e:53:3a:c8:6f:5e:ee:
18:5c:a6:70:12:50:d5:11:ec:2c:66:a2:f5:ef:2a:bd:aa:35:
3c:f7:4d:ad:52:db:71:e3:14:96:aa:22:72:fc:e3:69:bb:06:
e3:a6:66:6c:30:23:e6:03:6d:13:4a:25:14:4c:34:3a:89:6b:
0c:bc:c3:4c:f2:22:b6:3d:3b:37:7a:24:9d:3e:df:b4:59:ed:
6c:09:16:45:aa:32:3f:84:81:bd:77:c1:7e:d9:36:66:79:de:
c3:e3:5b:65:07:e4:b2:12:e0:ad:e8:09:08:99:e2:da:8e:c2:
11:40:ff:32:ce:aa:45:9e:4b:fd:47:13:7f:c8:0b:41:39:67:
ac:59:d6:d7:ec:90:26:e2:63:ed:d4:d6:4f:30:24:fe:bf:a5:
47:0e:eb:d8:32:4b:98:30:20:8d:77:76:ed:8d:e1:3a:34:4e:
be:79:2f:2b:ab:7f:30:05:24:a5:13:3b:31:2b:26:41:70:0d:
84:e2:ef:7e
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
OEJBQjExMC8GA1UEBRMoMTY4RDY3RDhFNTI1ODk4QkZEMERERjJFRjdDQzQxQjg5
RUI5M0M0RTAeFw0yNjA0MDkwOTQzMTlaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5ZDc3NGI3LTI0MGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCLE8kqbhV98DuS4T0/jLZc/LDy7rQczdwoTTSnq3qa3Wz70hXzMdyNmTT1xwWp
v/QEf3mzEOskrkSKIbF2u+Lm/njRyEuQnUEPVRIIJkw5p8Z0tF5WEJ+C+Wn8me0L
4y0RDCyiutzAj2fBnnx6vxyL/a6kemJ+L4Np2Xk1sZJBpf/SBpoECWDw9VMyUTmn
QB7BQ8CdBmn5aeA59K3T7CfK58Fl9ENnHTvEW+9cOKwHm8dyr3ZPa7lGKLuCIoMA
Sfad97TiZVjHEccK3xUgU1brSSo47SYr7jnhtt8qb2dk3IRfN0bZgRwbe2jwpiSl
ytYOP+AiR479OUZ0gnuF+X0jAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUA39bfn4J
FzMOBhuL8lHu2PDQnP4wHwYDVR0jBBgwFoAUFo1n2OUliYv9Dd8u98xBuJ65PE4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4QkFCLzE3ODQ5RTQ0MkU0
MjExRjFBRDk5MDdCMzkzODMzNzczL0ZvMW4yT1VsaVl2OURkOHU5OHhCdUo2NVBF
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRm8xbjJPVWxpWXY5RGQ4dTk4eEJ1SjY1UEU0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OEJBQi8xNzg0OUU0NDJFNDIxMUYxQUQ5OTA3QjM5MzgzMzc3My9COEZDMkYzNDJF
NDMxMUYxQTI1NzlDMTU5NDgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJnNZQwDQYJKoZIhvcNAQELBQADggEBALcbcpe5QBoiuv/xUmO6uHIQ
f9a1qeIkK4PfWbiHeEc+qBPd4HxpRiyxNDQXV4PHX2yiu04eroVxwA+nrLnqMW+k
LlM6yG9e7hhcpnASUNUR7CxmovXvKr2qNTz3Ta1S23HjFJaqInL842m7BuOmZmww
I+YDbRNKJRRMNDqJawy8w0zyIrY9Ozd6JJ0+37RZ7WwJFkWqMj+Egb13wX7ZNmZ5
3sPjW2UH5LIS4K3oCQiZ4tqOwhFA/zLOqkWeS/1HE3/IC0E5Z6xZ1tfskCbiY+3U
1k8wJP6/pUcO69gyS5gwII13du2N4To0Tr55LyurfzAFJKUTOzErJkFwDYTi734=
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:19:13 2026 by rpki-client