
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/C86831A80CB311EDB2750F60C4F9AE02.roa
File: C86831A80CB311EDB2750F60C4F9AE02.roa (raw, json)
Hash identifier: 5PsEYVqdLKSNHZI9sLRX1Oc9lcQCYnBoqVdi/mE1UTE=
Subject key identifier: FC:2A:A8:F3:B8:37:1B:F7:16:BC:B1:EC:67:B3:D9:A7:19:07:36:12
Certificate issuer: /CN=A91DC46A/serialNumber=F8D4A632D069964C61A33E41D6243D535B007D54
Certificate serial: 1EBF
Authority key identifier: F8:D4:A6:32:D0:69:96:4C:61:A3:3E:41:D6:24:3D:53:5B:00:7D:54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/C86831A80CB311EDB2750F60C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:40:45 +0000
ROA not before: Wed 22 Jan 2025 16:23:25 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 139346
IP address blocks: 103.243.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl
rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:36:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7871 (0x1ebf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC46A, serialNumber=F8D4A632D069964C61A33E41D6243D535B007D54
Validity
Not Before: Jan 22 16:23:25 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=69a441dd-783b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c8:8e:78:78:a6:3a:22:61:7d:82:09:b7:3b:
56:86:96:b0:16:e3:9d:23:f9:24:fa:e4:7d:12:88:
f5:55:d4:37:72:3b:07:4e:26:af:d4:5a:17:ac:04:
3b:49:4e:60:0f:58:2b:85:c8:0c:71:36:c5:8a:7b:
09:49:44:7c:99:91:49:69:c1:e4:58:13:4a:f6:1f:
65:79:5b:dc:5f:58:67:5b:ee:fb:32:d8:b6:b2:77:
76:ba:41:86:05:10:dd:0e:4d:58:e5:a1:bc:8e:8b:
1c:28:ed:55:a4:3c:35:04:f8:e3:58:6c:8e:e6:09:
5b:d0:4f:7a:af:1b:3a:ad:35:43:97:fd:22:51:1c:
b4:22:34:c6:40:6d:20:5f:5f:c2:06:b8:05:1b:0c:
33:e6:c4:ac:67:06:ef:f4:34:70:3b:cd:6b:37:60:
4c:7b:bd:cd:ee:b0:81:44:a2:e5:98:e3:16:f3:75:
d9:0f:44:e2:e9:fd:d3:22:f1:17:5e:7f:9a:8f:5b:
21:bd:3b:18:fa:70:1e:75:47:94:00:11:67:f1:13:
ce:8d:ba:75:65:4d:e6:79:02:31:c8:34:54:ef:be:
d7:36:5c:6b:da:1a:0a:31:5b:3f:47:ba:f3:af:45:
39:c7:8e:13:bf:d3:ee:0c:6a:b7:7a:b1:03:e5:cd:
02:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2A:A8:F3:B8:37:1B:F7:16:BC:B1:EC:67:B3:D9:A7:19:07:36:12
X509v3 Authority Key Identifier:
keyid:F8:D4:A6:32:D0:69:96:4C:61:A3:3E:41:D6:24:3D:53:5B:00:7D:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/C86831A80CB311EDB2750F60C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.243.192.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:d2:57:c6:e6:c3:80:ba:05:bf:04:e2:81:90:a7:71:58:df:
8a:e4:92:64:63:21:8f:e0:4d:bc:71:30:c9:2e:c5:91:7f:61:
5e:77:c6:0c:51:d7:10:0d:74:97:b1:68:80:fc:e2:24:23:77:
48:e5:56:ec:e0:9b:da:35:a6:7a:45:03:e2:35:33:39:d6:31:
72:bd:5b:7c:6a:2e:7e:6d:bf:5c:d4:f4:38:97:e3:af:96:d9:
a8:6a:6e:05:99:2c:5e:57:9b:13:b4:2a:05:c3:b0:2d:dc:ce:
78:dd:17:3b:7a:5d:93:6e:a6:b9:9a:22:a6:00:99:56:a7:a5:
12:cd:05:8b:04:84:80:5c:19:ec:87:75:a7:0b:b8:f3:06:82:
c3:54:26:f7:e5:81:5b:cc:e4:54:38:00:f6:6e:9d:ab:4a:49:
55:ed:54:75:16:0c:f2:c1:88:b4:bf:3b:2d:62:5c:ee:be:79:
f2:cd:79:a9:29:d5:1f:98:a9:4f:ea:d5:09:60:1d:42:ba:09:
80:c7:20:63:f5:1d:f3:00:eb:e1:90:76:a8:8a:90:3c:66:df:
fb:1c:53:1a:8f:68:fb:3c:12:ce:de:61:d2:8d:93:0b:94:01:
96:2d:bc:a7:da:f8:63:4e:f9:97:38:53:42:d0:3f:77:82:ca:
f3:c1:6f:67
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICHr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REM0NkExMTAvBgNVBAUTKEY4RDRBNjMyRDA2OTk2NEM2MUEzM0U0MUQ2MjQzRDUz
NUIwMDdENTQwHhcNMjUwMTIyMTYyMzI1WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDFkZC03ODNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw8iOeHimOiJhfYIJtztWhpawFuOdI/kk+uR9Eoj1VdQ3cjsHTiav1FoXrAQ7
SU5gD1grhcgMcTbFinsJSUR8mZFJacHkWBNK9h9leVvcX1hnW+77Mti2snd2ukGG
BRDdDk1Y5aG8joscKO1VpDw1BPjjWGyO5glb0E96rxs6rTVDl/0iURy0IjTGQG0g
X1/CBrgFGwwz5sSsZwbv9DRwO81rN2BMe73N7rCBRKLlmOMW83XZD0Ti6f3TIvEX
Xn+aj1shvTsY+nAedUeUABFn8RPOjbp1ZU3meQIxyDRU777XNlxr2hoKMVs/R7rz
r0U5x44Tv9PuDGq3erED5c0CgQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPwqqPO4
Nxv3Fryx7Gez2acZBzYSMB8GA1UdIwQYMBaAFPjUpjLQaZZMYaM+QdYkPVNbAH1U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzQ2QS8wMDUwMDE2NDk0
MzIxMUU2OEMxQjgyNEFDNEY5QUUwMi8tTlNtTXRCcGxreGhvejVCMWlROVUxc0Fm
VlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1OU21NdEJwbGt4aG96NUIxaVE5VTFzQWZWUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REM0NkEvMDA1MDAxNjQ5NDMyMTFFNjhDMUI4MjRBQzRGOUFFMDIvQzg2ODMxQTgw
Q0IzMTFFREIyNzUwRjYwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ/PAMA0GCSqGSIb3DQEBCwUAA4IBAQB90lfG5sOAugW/BOKBkKdx
WN+K5JJkYyGP4E28cTDJLsWRf2Fed8YMUdcQDXSXsWiA/OIkI3dI5Vbs4JvaNaZ6
RQPiNTM51jFyvVt8ai5+bb9c1PQ4l+Ovltmoam4FmSxeV5sTtCoFw7At3M543Rc7
el2Tbqa5miKmAJlWp6USzQWLBISAXBnsh3WnC7jzBoLDVCb35YFbzORUOAD2bp2r
SklV7VR1FgzywYi0vzstYlzuvnnyzXmpKdUfmKlP6tUJYB1CugmAxyBj9R3zAOvh
kHaoipA8Zt/7HFMaj2j7PBLO3mHSjZMLlAGWLbyn2vhjTvmXOFNC0D93gsrzwW9n
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:25 2026 by rpki-client