
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/3DA5441A070611F1ACA42273223D8C67.roa
File: 3DA5441A070611F1ACA42273223D8C67.roa (raw, json)
Hash identifier: n+Kx5YLJVSW5gosUnIscCwbaC3lMeiZQn4J/zNSLjd4=
Subject key identifier: A2:0F:7D:EF:A3:EE:89:98:20:3F:FA:1F:86:06:59:AF:F7:BC:DF:D6
Certificate issuer: /CN=A91F9E9D/serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B
Certificate serial: 01C5
Authority key identifier: BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/3DA5441A070611F1ACA42273223D8C67.roa
Signing time: Sun 01 Mar 2026 16:53:36 +0000
ROA not before: Wed 11 Feb 2026 04:58:01 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 141457
IP address blocks: 103.159.236.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl
rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:42:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9E9D, serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B
Validity
Not Before: Feb 11 04:58:01 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a46f10-f61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5e:dd:33:41:18:a9:c9:30:c6:0c:44:38:0e:
bd:67:f3:f8:af:2a:0e:0b:bf:02:69:81:ab:81:0a:
e3:cd:1b:94:b6:a4:4c:ac:77:78:9a:d9:a5:b0:b8:
7c:4c:04:f2:cd:ed:a6:a6:e1:13:95:4d:a8:52:f4:
15:a5:f1:f5:2e:3f:d4:b5:c7:8b:06:08:84:10:28:
21:17:27:3c:53:97:98:8c:fc:15:93:09:c1:cb:fe:
6f:b0:cb:ae:18:d4:08:2c:bd:a7:81:0b:c9:1c:a4:
51:77:ed:75:74:25:f2:71:06:6b:90:f0:3b:f4:ef:
c4:7f:49:b9:7d:84:19:61:70:95:3f:ec:46:ad:42:
df:cb:4e:2d:29:22:5d:28:b9:ba:50:8d:e8:dd:fe:
11:de:5f:40:6d:61:a1:ac:5f:73:16:11:3f:eb:b6:
f6:3e:49:af:63:77:53:0c:d3:76:c0:ca:5f:1b:75:
94:a8:e0:25:7b:61:e9:31:1a:af:b8:0e:cf:13:6c:
ad:3c:28:20:24:72:15:d3:53:05:0e:a1:5c:d1:df:
f9:8c:9a:32:0c:cd:74:b1:26:b8:00:7b:23:7c:24:
c1:fa:e1:e6:23:59:d8:94:11:dc:ea:b2:22:21:58:
25:38:89:da:5c:89:91:c5:23:61:91:c0:f2:e1:28:
69:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0F:7D:EF:A3:EE:89:98:20:3F:FA:1F:86:06:59:AF:F7:BC:DF:D6
X509v3 Authority Key Identifier:
keyid:BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/3DA5441A070611F1ACA42273223D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.159.236.0/23
Signature Algorithm: sha256WithRSAEncryption
99:00:f4:13:c1:53:87:1d:0f:df:b3:f5:3a:09:26:e0:3d:02:
e5:9c:e9:fa:61:ea:e8:45:1e:a4:5c:04:47:31:d7:36:94:a6:
2f:80:c8:13:29:32:1c:d9:79:a1:0b:b0:0e:32:f8:72:bf:3b:
dd:8e:a2:60:4f:bc:59:07:84:d3:2b:75:3b:dd:64:63:f0:c0:
88:3a:59:ab:a0:fd:8e:5b:40:67:5c:49:25:d3:0a:fd:44:c9:
33:24:cc:fa:b0:5b:39:65:e0:c1:d0:bb:b8:c8:ed:06:5c:bb:
cc:f2:f7:13:76:60:83:21:b3:3e:67:0a:8e:2c:83:88:82:db:
d2:f9:57:28:63:f8:4f:7c:57:93:a5:fd:ba:ff:4f:7b:dc:49:
bd:22:be:66:af:6d:08:4c:a3:39:85:12:51:63:87:e2:bf:a8:
6e:bb:de:84:50:d0:7b:89:ce:3c:e4:34:fe:75:36:15:a1:82:
a2:b3:e8:d0:c5:75:ff:03:ff:a0:ac:9d:dc:2b:b2:5f:81:6d:
ed:fb:96:41:3c:e5:6e:71:59:89:27:09:b8:53:66:73:28:75:
a5:11:55:79:fd:6e:03:4b:0f:aa:93:e8:fb:4e:3f:f0:ad:e6:
0f:a4:55:11:2e:93:d4:f5:23:d2:f5:b4:cc:9a:78:aa:59:3a:
be:51:9d:ef
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjlFOUQxMTAvBgNVBAUTKEJFMDE5MTM3QTgxRDdFOUNEOUFGNTZDRDkxQzU4N0My
RUYwNkU5M0IwHhcNMjYwMjExMDQ1ODAxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NmYxMC1mNjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArV7dM0EYqckwxgxEOA69Z/P4ryoOC78CaYGrgQrjzRuUtqRMrHd4mtmlsLh8
TATyze2mpuETlU2oUvQVpfH1Lj/UtceLBgiEECghFyc8U5eYjPwVkwnBy/5vsMuu
GNQILL2ngQvJHKRRd+11dCXycQZrkPA79O/Ef0m5fYQZYXCVP+xGrULfy04tKSJd
KLm6UI3o3f4R3l9AbWGhrF9zFhE/67b2PkmvY3dTDNN2wMpfG3WUqOAle2HpMRqv
uA7PE2ytPCggJHIV01MFDqFc0d/5jJoyDM10sSa4AHsjfCTB+uHmI1nYlBHc6rIi
IVglOInaXImRxSNhkcDy4Shp+QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKIPfe+j
7omYID/6H4YGWa/3vN/WMB8GA1UdIwQYMBaAFL4BkTeoHX6c2a9WzZHFh8LvBuk7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUU5RC81MjgyOEIyQTdC
ODcxMUVFQTg0MEYyMUVDNEY5QUUwMi92Z0dSTjZnZGZwelpyMWJOa2NXSHd1OEc2
VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZnR1JONmdkZnB6WnIxYk5rY1dId3U4RzZUcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjlFOUQvNTI4MjhCMkE3Qjg3MTFFRUE4NDBGMjFFQzRGOUFFMDIvM0RBNTQ0MUEw
NzA2MTFGMUFDQTQyMjczMjIzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5/sMA0GCSqGSIb3DQEBCwUAA4IBAQCZAPQTwVOHHQ/fs/U6CSbg
PQLlnOn6YeroRR6kXARHMdc2lKYvgMgTKTIc2XmhC7AOMvhyvzvdjqJgT7xZB4TT
K3U73WRj8MCIOlmroP2OW0BnXEkl0wr9RMkzJMz6sFs5ZeDB0Lu4yO0GXLvM8vcT
dmCDIbM+ZwqOLIOIgtvS+VcoY/hPfFeTpf26/0973Em9Ir5mr20ITKM5hRJRY4fi
v6huu96EUNB7ic485DT+dTYVoYKis+jQxXX/A/+grJ3cK7JfgW3t+5ZBPOVucVmJ
Jwm4U2ZzKHWlEVV5/W4DSw+qk+j7Tj/wreYPpFURLpPU9SPS9bTMmniqWTq+UZ3v
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:54:02 2026 by rpki-client