
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/A862F866AA3111EA9E08C324C4F9AE02.roa
File: A862F866AA3111EA9E08C324C4F9AE02.roa (raw, json)
Hash identifier: ugSUEDm51JpwxsKQw3/Ce/i8kMyJ/T7+EguAolkLIDY=
Subject key identifier: 2E:62:B2:F2:24:47:E6:61:C3:40:C8:E4:92:4D:E7:3A:08:7E:7E:D8
Certificate issuer: /CN=A91E4BD2/serialNumber=5DCA4528B9E40C88E467A43FDC12B78F2B3545E3
Certificate serial: 098A
Authority key identifier: 5D:CA:45:28:B9:E4:0C:88:E4:67:A4:3F:DC:12:B7:8F:2B:35:45:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/A862F866AA3111EA9E08C324C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:51:12 +0000
ROA not before: Tue 24 Jun 2025 20:36:26 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 139292
IP address blocks: 103.140.216.0/23 maxlen: 23
103.140.216.0/24 maxlen: 24
103.140.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.crl
rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:33:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2442 (0x98a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4BD2, serialNumber=5DCA4528B9E40C88E467A43FDC12B78F2B3545E3
Validity
Not Before: Jun 24 20:36:26 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a42830-1954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4b:71:66:40:9b:eb:1a:37:42:1f:fb:15:5e:
a4:45:c1:11:51:20:0c:59:37:e9:12:ca:45:d2:5a:
9e:4f:98:48:0e:52:d7:00:8d:9b:41:6e:be:6b:a5:
8f:a4:b0:d7:3a:bb:0a:37:43:1b:5d:12:7e:ac:bc:
d4:1d:27:35:00:49:f5:6d:79:31:de:21:bb:de:96:
18:fa:f7:f7:45:85:5b:8c:cd:99:58:c2:54:07:d1:
67:79:36:94:14:61:e6:fd:01:9f:17:f0:86:cc:61:
83:77:80:0f:49:dd:e3:28:2b:db:3f:ee:9c:54:c0:
ab:05:94:77:ae:82:c2:34:88:ae:89:62:a7:dc:ce:
cd:fc:53:81:52:0b:dd:93:7d:87:06:39:c5:7a:93:
1b:1b:78:96:f1:f9:82:24:b9:80:40:d9:68:2e:b3:
8a:cf:3f:46:6b:39:ab:46:da:f3:f0:c0:05:50:61:
6c:02:e2:58:f6:78:d4:6b:eb:65:2c:f7:ca:1f:67:
51:d7:65:2c:48:03:c2:9f:f8:aa:29:60:bc:cb:a1:
8b:4a:24:34:f5:d4:c5:66:1c:06:14:81:83:96:f5:
54:b5:fd:f0:4b:17:59:ff:e6:25:c4:3e:29:83:c5:
38:38:ec:53:51:2f:63:18:a1:8f:65:4a:9c:21:d0:
ff:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:62:B2:F2:24:47:E6:61:C3:40:C8:E4:92:4D:E7:3A:08:7E:7E:D8
X509v3 Authority Key Identifier:
keyid:5D:CA:45:28:B9:E4:0C:88:E4:67:A4:3F:DC:12:B7:8F:2B:35:45:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/A862F866AA3111EA9E08C324C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.140.216.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:ab:06:be:32:8a:58:bb:89:9c:b6:54:67:d9:b3:f6:f3:3a:
77:ac:8b:ea:80:22:c0:ac:78:d9:ec:8a:89:32:73:38:1a:7b:
51:77:b3:17:86:c6:b9:f3:c2:08:fa:f2:bb:cc:7c:cc:ec:6a:
ac:5f:d5:50:40:9a:1d:a6:dc:95:c1:49:e1:90:5c:59:77:78:
37:21:ff:ef:dd:09:49:1b:bb:d1:26:20:b5:ae:bc:90:34:e8:
92:4e:45:3f:c3:77:bb:cd:1e:08:bc:37:90:4b:55:76:dc:75:
36:87:23:57:96:ad:b0:46:f0:29:e2:ad:00:be:57:96:48:5d:
a5:cd:a1:25:11:89:84:af:65:d4:11:e3:90:d2:3c:62:d5:ce:
ee:87:33:23:6f:50:03:ca:fd:2e:1c:16:e7:d8:43:28:d2:b5:
fb:b6:70:2b:b5:42:bb:5f:09:51:36:33:51:85:5f:a4:d3:e0:
ee:7c:6d:fc:c8:fc:09:9a:c0:4d:f1:66:5d:b1:a1:fd:02:f7:
08:38:73:15:f8:0d:2d:ef:7d:2d:2d:72:cd:19:d3:18:d8:81:
47:4d:23:b7:87:6a:1c:ce:e0:68:6e:f8:c1:a9:a5:cd:4b:dc:
7e:f2:3f:62:8d:73:ab:9e:1f:42:78:b2:52:e1:37:08:65:34:
39:d0:b8:2d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTRCRDIxMTAvBgNVBAUTKDVEQ0E0NTI4QjlFNDBDODhFNDY3QTQzRkRDMTJCNzhG
MkIzNTQ1RTMwHhcNMjUwNjI0MjAzNjI2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MjgzMC0xOTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtUtxZkCb6xo3Qh/7FV6kRcERUSAMWTfpEspF0lqeT5hIDlLXAI2bQW6+a6WP
pLDXOrsKN0MbXRJ+rLzUHSc1AEn1bXkx3iG73pYY+vf3RYVbjM2ZWMJUB9FneTaU
FGHm/QGfF/CGzGGDd4APSd3jKCvbP+6cVMCrBZR3roLCNIiuiWKn3M7N/FOBUgvd
k32HBjnFepMbG3iW8fmCJLmAQNloLrOKzz9GazmrRtrz8MAFUGFsAuJY9njUa+tl
LPfKH2dR12UsSAPCn/iqKWC8y6GLSiQ09dTFZhwGFIGDlvVUtf3wSxdZ/+YlxD4p
g8U4OOxTUS9jGKGPZUqcIdD/DwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFC5isvIk
R+Zhw0DI5JJN5zoIfn7YMB8GA1UdIwQYMBaAFF3KRSi55AyI5GekP9wSt48rNUXj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEJEMi9GNDBCMTE2QUFB
MkYxMUVBOUMyOTU5MUVDNEY5QUUwMi9YY3BGS0xua0RJamtaNlFfM0JLM2p5czFS
ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hjcEZLTG5rRElqa1o2UV8zQkszanlzMVJlTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTRCRDIvRjQwQjExNkFBQTJGMTFFQTlDMjk1OTFFQzRGOUFFMDIvQTg2MkY4NjZB
QTMxMTFFQTlFMDhDMzI0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ4zYMA0GCSqGSIb3DQEBCwUAA4IBAQCMqwa+MopYu4mctlRn2bP2
8zp3rIvqgCLArHjZ7IqJMnM4GntRd7MXhsa588II+vK7zHzM7GqsX9VQQJodptyV
wUnhkFxZd3g3If/v3QlJG7vRJiC1rryQNOiSTkU/w3e7zR4IvDeQS1V23HU2hyNX
lq2wRvAp4q0AvleWSF2lzaElEYmEr2XUEeOQ0jxi1c7uhzMjb1ADyv0uHBbn2EMo
0rX7tnArtUK7XwlRNjNRhV+k0+DufG38yPwJmsBN8WZdsaH9AvcIOHMV+A0t730t
LXLNGdMY2IFHTSO3h2oczuBobvjBqaXNS9x+8j9ijXOrnh9CeLJS4TcIZTQ50Lgt
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:10:38 2026 by rpki-client