
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/09CEF4D0708411E9AC9EA90EC4F9AE02.roa
File: 09CEF4D0708411E9AC9EA90EC4F9AE02.roa (raw, json)
Hash identifier: A310nw+HBdmD2Vm0fwB8/UcSYJSgJIQKg2KUNoEhLSw=
Subject key identifier: C4:87:22:07:42:05:73:34:EE:4C:A3:10:EE:38:4E:66:33:40:FF:B6
Certificate issuer: /CN=A91F2230/serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F
Certificate serial: 1000
Authority key identifier: 17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/09CEF4D0708411E9AC9EA90EC4F9AE02.roa
Signing time: Sun 31 May 2026 18:05:28 +0000
ROA not before: Sun 31 May 2026 18:05:27 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 136480
IP address blocks: 43.227.12.0/22 maxlen: 22
43.227.12.0/24 maxlen: 24
43.227.13.0/24 maxlen: 24
43.227.14.0/24 maxlen: 24
43.227.15.0/24 maxlen: 24
103.89.176.0/22 maxlen: 22
103.89.176.0/24 maxlen: 24
103.89.177.0/24 maxlen: 24
103.89.178.0/24 maxlen: 24
103.89.179.0/24 maxlen: 24
2400:f1c0::/32 maxlen: 32
2400:f1c0::/48 maxlen: 48
2400:f1c0:1::/48 maxlen: 48
2400:f1c0:2::/48 maxlen: 48
2400:f1c0:3::/48 maxlen: 48
2400:f1c0:4::/48 maxlen: 48
2400:f1c0:5::/48 maxlen: 48
2400:f1c0:6::/48 maxlen: 48
2400:f1c0:7::/48 maxlen: 48
2400:f1c0:8::/48 maxlen: 48
2400:f1c0:9::/48 maxlen: 48
2400:f1c0:a::/48 maxlen: 48
2400:f1c0:b::/48 maxlen: 48
2400:f1c0:c::/48 maxlen: 48
2400:f1c0:d::/48 maxlen: 48
2400:f1c0:e::/48 maxlen: 48
2400:f1c0:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl
rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4096 (0x1000)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2230, serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F
Validity
Not Before: May 31 18:05:27 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c7867-8c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:56:58:4b:16:54:c7:80:10:5b:20:f2:54:38:
c6:2a:1a:55:46:cc:14:8b:a2:36:f8:2d:6f:cf:a2:
e2:db:af:d4:0b:f1:c4:73:06:a3:8e:24:cb:f1:79:
38:83:9b:02:81:0f:33:81:e1:e3:84:03:3d:bc:ac:
4f:e6:d7:b5:aa:d4:e8:6f:2a:2c:73:a5:ef:f8:70:
5f:00:39:01:91:c6:1e:b4:b5:b2:e0:7d:fb:8f:c0:
99:d5:f5:3d:0e:6d:11:29:f0:11:86:dc:52:7c:66:
14:75:04:cb:62:42:da:0c:c4:0c:86:c3:1a:91:e6:
2a:e6:ac:24:40:92:0c:b9:f0:06:1e:44:83:28:e1:
51:88:b3:84:ca:3c:d9:b8:f7:03:13:4a:cf:ec:96:
a0:f7:00:dd:fb:1c:67:c1:bd:fb:c5:e4:a8:b1:54:
93:2d:e9:71:99:76:ac:36:83:34:30:2d:36:dc:50:
e9:55:05:4b:80:f1:02:93:a6:8c:c8:8e:83:fa:2c:
4c:de:81:b1:72:36:1c:8b:44:ee:e8:7b:bb:28:db:
fe:98:0e:b1:28:a8:fa:90:f0:af:12:b8:1a:f3:6d:
a0:62:48:e9:df:c7:86:b1:5b:d1:88:33:23:82:4b:
72:20:d4:bf:bb:85:a3:ed:ca:62:d3:59:0e:b2:18:
7f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:87:22:07:42:05:73:34:EE:4C:A3:10:EE:38:4E:66:33:40:FF:B6
X509v3 Authority Key Identifier:
keyid:17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/09CEF4D0708411E9AC9EA90EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.227.12.0/22
103.89.176.0/22
IPv6:
2400:f1c0::/32
Signature Algorithm: sha256WithRSAEncryption
35:5e:d0:81:87:62:65:03:b1:bf:27:88:f1:62:6a:4e:6e:a2:
a2:0c:5d:e9:f1:e2:26:38:76:34:be:51:b5:ce:87:11:3c:19:
27:a7:eb:da:f8:ba:23:99:ba:2f:10:55:37:4b:19:e1:9a:ce:
80:4f:47:92:3f:e0:87:b4:24:9c:4b:86:60:8d:19:81:f5:88:
15:90:a2:aa:af:04:eb:cf:a3:43:01:71:f4:c5:35:f6:28:25:
38:0e:da:31:c4:eb:05:c8:b1:d8:b5:1a:c1:ee:4e:82:04:76:
89:f6:24:68:e2:1a:b9:50:b2:99:57:73:d6:a2:ac:d3:67:90:
67:1b:0e:4b:15:fb:5b:5c:b0:71:5f:88:c9:bc:61:d2:16:29:
8f:d3:2f:68:9e:0e:aa:30:06:72:86:71:92:87:f6:78:4d:05:
b0:ba:41:12:d8:84:ee:ea:a1:89:35:72:b5:99:dc:c9:3b:35:
ae:12:cd:aa:cd:51:41:12:ad:b0:06:69:51:f8:50:b0:01:12:
5d:0c:87:a5:fd:9e:71:10:67:eb:49:4d:0c:60:c3:31:97:1d:
28:ef:4c:ae:0c:5c:73:2a:65:91:00:4e:93:2b:1d:56:91:74:
52:a7:3f:20:6c:14:b6:1c:f2:d6:ae:a5:1e:20:ca:f5:a8:ff:
82:87:74:f0
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgICEAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjIyMzAxMTAvBgNVBAUTKDE3NkE0RTAzQjU0MEFGMjUxNEE4QkM3MTlDMkJBMEY5
Rjc2RkZCMkYwHhcNMjYwNTMxMTgwNTI3WhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFjNzg2Ny04YzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzlZYSxZUx4AQWyDyVDjGKhpVRswUi6I2+C1vz6Li26/UC/HEcwajjiTL8Xk4
g5sCgQ8zgeHjhAM9vKxP5te1qtTobyosc6Xv+HBfADkBkcYetLWy4H37j8CZ1fU9
Dm0RKfARhtxSfGYUdQTLYkLaDMQMhsMakeYq5qwkQJIMufAGHkSDKOFRiLOEyjzZ
uPcDE0rP7Jag9wDd+xxnwb37xeSosVSTLelxmXasNoM0MC023FDpVQVLgPECk6aM
yI6D+ixM3oGxcjYci0Tu6Hu7KNv+mA6xKKj6kPCvErga822gYkjp38eGsVvRiDMj
gktyINS/u4Wj7cpi01kOshh/DQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFMSHIgdC
BXM07kyjEO44TmYzQP+2MB8GA1UdIwQYMBaAFBdqTgO1QK8lFKi8cZwroPn3b/sv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjIzMC9BREZBNTU0Qzcw
ODIxMUU5QjdCQzM5MEFDNEY5QUUwMi9GMnBPQTdWQXJ5VVVxTHh4bkN1Zy1mZHYt
eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0YycE9BN1ZBcnlVVXFMeHhuQ3VnLWZkdi15OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjIyMzAvQURGQTU1NEM3MDgyMTFFOUI3QkMzOTBBQzRGOUFFMDIvMDlDRUY0RDA3
MDg0MTFFOUFDOUVBOTBFQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQCK+MMAwQCZ1mwMA0EAgACMAcDBQAkAPHAMA0GCSqGSIb3DQEBCwUA
A4IBAQA1XtCBh2JlA7G/J4jxYmpObqKiDF3p8eImOHY0vlG1zocRPBknp+va+Loj
mbovEFU3Sxnhms6AT0eSP+CHtCScS4ZgjRmB9YgVkKKqrwTrz6NDAXH0xTX2KCU4
DtoxxOsFyLHYtRrB7k6CBHaJ9iRo4hq5ULKZV3PWoqzTZ5BnGw5LFftbXLBxX4jJ
vGHSFimP0y9ong6qMAZyhnGSh/Z4TQWwukES2ITu6qGJNXK1mdzJOzWuEs2qzVFB
Eq2wBmlR+FCwARJdDIel/Z5xEGfrSU0MYMMxlx0o70yuDFxzKmWRAE6TKx1WkXRS
pz8gbBS2HPLWrqUeIMr1qP+Ch3Tw
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:47:03 2026 by rpki-client