
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/4F445CCE1FF311F0833FC50BC4F9AE02.roa
File: 4F445CCE1FF311F0833FC50BC4F9AE02.roa (raw, json)
Hash identifier: 9o2NDhKahcG7+3rV1ZRCTakFUHbZfa3Ire911jjrqQg=
Subject key identifier: 55:B0:4B:D2:6D:22:3B:71:11:18:54:D7:D1:A2:A2:23:35:7D:48:98
Certificate issuer: /CN=A91DB6FB/serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
Certificate serial: 0248
Authority key identifier: 6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/4F445CCE1FF311F0833FC50BC4F9AE02.roa
Signing time: Sat 17 Oct 2026 03:52:02 +0000
ROA not before: Sat 17 Oct 2026 03:52:02 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 19905
IP address blocks: 103.131.106.0/24 maxlen: 24
103.142.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl
rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Nov 2026 02:59:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 584 (0x248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB6FB, serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
Validity
Not Before: Oct 17 03:52:02 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ad2f0e2-0dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:63:b6:f0:58:45:4f:28:b8:66:57:97:f3:60:
6c:cd:3d:00:8d:50:9b:c6:13:11:c3:c6:e1:91:28:
06:1c:8d:dc:2e:05:61:06:42:02:75:f5:8c:f5:fe:
88:7e:ef:52:9d:60:f7:02:e3:3e:20:f5:ad:a8:21:
26:26:ad:56:7b:19:69:f0:3a:fb:49:ff:6b:a9:2f:
a2:ae:41:a7:b0:33:ce:2a:aa:70:bb:6a:6c:f5:f0:
91:2a:d7:23:04:fd:8a:4f:50:57:0c:b5:b1:5f:06:
36:da:6c:61:8d:e5:31:e2:c9:62:d9:a5:87:78:39:
32:12:f6:b9:4f:ea:b3:c7:ac:f3:62:f6:9b:94:e6:
16:f0:77:85:f8:89:a0:ad:33:97:9f:3a:39:4b:0c:
05:ce:ca:3d:ca:9e:dd:61:c8:f3:cd:42:15:70:92:
8f:30:f0:49:a4:9e:95:e6:f0:72:b4:8f:45:63:4d:
9c:01:12:56:3e:43:cb:41:df:95:a3:05:f7:21:77:
6c:67:c1:d2:61:7a:13:c4:73:09:66:ba:d8:51:05:
61:f9:d9:98:44:7c:61:ea:ff:d7:51:20:9e:db:50:
12:c9:d5:ed:e9:12:fe:43:83:d0:bc:42:f8:d8:06:
98:45:4f:9b:9e:1d:54:ac:93:0f:c6:59:fe:16:bf:
2f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B0:4B:D2:6D:22:3B:71:11:18:54:D7:D1:A2:A2:23:35:7D:48:98
X509v3 Authority Key Identifier:
keyid:6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/4F445CCE1FF311F0833FC50BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.131.106.0/24
103.142.160.0/24
Signature Algorithm: sha256WithRSAEncryption
12:c7:cc:6f:8b:10:09:4d:96:3b:cc:ed:84:7a:ee:4b:44:67:
42:0d:bf:25:9d:70:50:e7:72:9f:46:c3:65:d5:03:fd:a4:75:
12:ac:28:86:49:e4:d8:e4:6c:ce:60:24:99:e2:a1:b7:50:26:
a2:e6:11:9a:da:94:e8:cc:34:1b:d0:48:a4:55:3c:15:a0:db:
e9:34:66:34:61:12:db:03:f0:8c:0d:f3:cb:a2:15:a0:0d:0b:
f9:5d:2d:00:3a:1d:4c:af:38:6c:e2:04:c3:c8:e7:01:7a:b4:
d1:db:1e:ec:a4:7c:82:34:ce:17:77:5d:25:1b:53:9e:bd:7a:
e8:23:c0:ed:e4:08:6b:e3:c3:e4:f8:8a:db:9f:9d:07:e7:3b:
23:e1:97:d5:b4:7d:61:90:5c:83:ab:ec:2b:9f:05:04:9f:bc:
70:44:4a:de:b7:3f:a1:52:3c:f3:92:92:95:ce:46:ee:54:0e:
8a:2c:18:78:0f:ec:c9:6e:ba:a1:86:37:b1:42:7a:b8:ea:75:
29:0a:92:4b:22:f6:d5:7a:5e:93:f7:69:90:b3:7d:92:84:88:
b4:63:bd:e4:7c:1f:9c:80:4a:0e:cc:0f:c7:08:d3:b8:fd:ab:
de:e1:a0:f0:13:db:da:e6:45:dc:f3:53:f0:83:08:64:ab:34:
65:b2:de:b1
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI2RkIxMTAvBgNVBAUTKDZGOUMyM0U0MDM3NzhGRTAxQzdCQzk1MDg4QkZEMUU2
QjMyOEFBOUIwHhcNMjYxMDE3MDM1MjAyWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWQyZjBlMi0wZGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxWO28FhFTyi4ZleX82BszT0AjVCbxhMRw8bhkSgGHI3cLgVhBkICdfWM9f6I
fu9SnWD3AuM+IPWtqCEmJq1Wexlp8Dr7Sf9rqS+irkGnsDPOKqpwu2ps9fCRKtcj
BP2KT1BXDLWxXwY22mxhjeUx4sli2aWHeDkyEva5T+qzx6zzYvablOYW8HeF+Img
rTOXnzo5SwwFzso9yp7dYcjzzUIVcJKPMPBJpJ6V5vBytI9FY02cARJWPkPLQd+V
owX3IXdsZ8HSYXoTxHMJZrrYUQVh+dmYRHxh6v/XUSCe21ASydXt6RL+Q4PQvEL4
2AaYRU+bnh1UrJMPxln+Fr8v1QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFFWwS9Jt
IjtxERhU19GioiM1fUiYMB8GA1UdIwQYMBaAFG+cI+QDd4/gHHvJUIi/0eazKKqb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGQi8xMUNEMUI2RTY4
QkMxMUVFOTIwRURCNERDNEY5QUUwMi9iNXdqNUFOM2otQWNlOGxRaUxfUjVyTW9x
cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I1d2o1QU4zai1BY2U4bFFpTF9SNXJNb3Fwcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REI2RkIvMTFDRDFCNkU2OEJDMTFFRTkyMEVEQjREQzRGOUFFMDIvNEY0NDVDQ0Ux
RkYzMTFGMDgzM0ZDNTBCQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ4NqAwQAZ46gMA0GCSqGSIb3DQEBCwUAA4IBAQASx8xvixAJTZY7
zO2Eeu5LRGdCDb8lnXBQ53KfRsNl1QP9pHUSrCiGSeTY5GzOYCSZ4qG3UCai5hGa
2pTozDQb0EikVTwVoNvpNGY0YRLbA/CMDfPLohWgDQv5XS0AOh1Mrzhs4gTDyOcB
erTR2x7spHyCNM4Xd10lG1OevXroI8Dt5Ahr48Pk+Irbn50H5zsj4ZfVtH1hkFyD
q+wrnwUEn7xwREretz+hUjzzkpKVzkbuVA6KLBh4D+zJbrqhhjexQnq46nUpCpJL
IvbVel6T92mQs32ShIi0Y73kfB+cgEoOzA/HCNO4/ave4aDwE9va5kXc81Pwgwhk
qzRlst6x
-----END CERTIFICATE-----
Generated at Sun Nov 8 08:09:54 2026 by rpki-client