
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/410F8C0EDBC611EEA717194DC4F9AE02.roa
File: 410F8C0EDBC611EEA717194DC4F9AE02.roa (raw, json)
Hash identifier: zzXvOA3n0XL26um5myog94HDs9qJeV0AH7BZVHkqiz0=
Subject key identifier: 5D:8A:43:EC:DA:AF:0D:69:DA:0E:32:27:03:0A:5B:16:87:8E:C4:96
Certificate issuer: /CN=A91FD90A/serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2
Certificate serial: 0692
Authority key identifier: 4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/410F8C0EDBC611EEA717194DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:46:15 +0000
ROA not before: Wed 24 Dec 2025 22:19:23 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 140607
IP address blocks: 103.145.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl
rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:51:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1682 (0x692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD90A, serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2
Validity
Not Before: Dec 24 22:19:23 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a45f47-2f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1e:e5:32:87:0d:5e:05:f7:f2:72:c4:80:29:
4b:ed:e0:15:1f:59:69:d1:5b:de:b5:f9:d2:09:55:
5e:f1:f2:78:77:65:f4:22:a5:cf:4a:64:ad:10:f2:
eb:a2:10:01:e6:05:78:ac:2d:12:0c:32:5f:50:c5:
13:f5:5c:c8:74:29:7c:74:cd:d2:91:92:3c:d2:4c:
7c:6f:3a:06:e7:02:2b:d9:b2:00:fb:09:4b:a8:dc:
80:b4:e4:10:20:6d:0d:ad:eb:44:b7:06:6c:4b:61:
01:af:0f:90:36:2e:f5:90:76:2f:91:5d:60:f0:f8:
ff:bc:b8:c0:83:df:f4:3c:f9:02:6f:2d:78:ec:5d:
b0:ee:1d:10:68:26:5a:95:02:b1:99:ad:69:d3:51:
15:98:64:78:b8:e7:61:aa:ad:5d:b6:c4:38:65:71:
f9:b5:2d:83:59:57:a1:35:58:65:0f:e2:13:24:1b:
92:82:59:83:7a:90:39:3f:dc:ef:ce:2d:c9:15:21:
cc:fc:15:b6:20:4d:57:11:ec:5a:b9:b6:87:8c:aa:
43:4e:61:68:6d:85:db:82:a5:35:bd:3b:0b:2f:68:
3e:d5:ae:41:b7:6d:e1:f4:43:1a:41:12:35:6c:eb:
35:72:d1:2c:3f:90:41:ed:30:25:05:5a:ac:5d:8c:
fd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8A:43:EC:DA:AF:0D:69:DA:0E:32:27:03:0A:5B:16:87:8E:C4:96
X509v3 Authority Key Identifier:
keyid:4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/410F8C0EDBC611EEA717194DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.145.185.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:d1:d8:60:6f:0a:04:53:a0:2c:8a:fe:b7:2d:d0:f8:d5:04:
28:f2:2e:76:0a:68:a0:e9:3f:8e:fc:a1:17:34:5e:5b:49:1f:
a7:97:27:c9:86:a4:bb:f5:ec:a1:05:c0:8a:af:6f:0d:a5:99:
36:45:e8:b2:12:9f:dd:e1:62:ad:e3:46:98:69:1f:0c:ea:ec:
0b:a6:5b:8e:97:cc:8e:ea:c0:c4:ae:4a:c1:74:b2:43:be:fb:
ab:3f:db:e0:32:7b:6a:ac:23:e2:0a:c6:37:ea:b0:ae:3f:bc:
bf:e4:4d:16:48:73:52:cb:78:64:7b:a6:4b:50:6b:8c:58:40:
cf:b0:d0:f6:76:16:8e:b4:79:b9:79:f9:d1:22:8c:d4:4b:6c:
4e:7d:a9:cf:2a:9a:95:8a:1e:32:6f:77:5f:d7:89:94:04:7a:
9c:7b:5a:38:d2:48:ff:7c:4c:bb:65:2b:a8:cb:2f:4a:80:b9:
17:77:19:a6:ee:42:d1:0e:05:f1:d4:70:4e:bd:e4:12:09:d5:
f2:50:5b:5d:96:f9:6e:2b:ce:59:89:9f:ef:16:61:1b:93:98:
3b:64:3a:0e:af:eb:44:75:76:90:5f:10:d9:98:d6:e6:35:0e:
bc:a9:69:05:8f:a3:d6:ab:88:b2:13:5f:2e:47:f9:94:20:3c:
be:a2:42:2e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkQ5MEExMTAvBgNVBAUTKDRCOUE2Mzg4MUE4NTU2MDIxMDU0RTk0QkRDMzIyNzRF
QzdCN0RERjIwHhcNMjUxMjI0MjIxOTIzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWY0Ny0yZjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAux7lMocNXgX38nLEgClL7eAVH1lp0VvetfnSCVVe8fJ4d2X0IqXPSmStEPLr
ohAB5gV4rC0SDDJfUMUT9VzIdCl8dM3SkZI80kx8bzoG5wIr2bIA+wlLqNyAtOQQ
IG0NretEtwZsS2EBrw+QNi71kHYvkV1g8Pj/vLjAg9/0PPkCby147F2w7h0QaCZa
lQKxma1p01EVmGR4uOdhqq1dtsQ4ZXH5tS2DWVehNVhlD+ITJBuSglmDepA5P9zv
zi3JFSHM/BW2IE1XEexaubaHjKpDTmFobYXbgqU1vTsLL2g+1a5Bt23h9EMaQRI1
bOs1ctEsP5BB7TAlBVqsXYz9HQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFF2KQ+za
rw1p2g4yJwMKWxaHjsSWMB8GA1UdIwQYMBaAFEuaY4gahVYCEFTpS9wyJ07Ht93y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDkwQS8xN0UyQ0Y1MEI1
QzUxMUVCQjU0RTAxNDZDNEY5QUUwMi9TNXBqaUJxRlZnSVFWT2xMM0RJblRzZTMz
ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1M1cGppQnFGVmdJUVZPbEwzREluVHNlMzNmSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkQ5MEEvMTdFMkNGNTBCNUM1MTFFQkI1NEUwMTQ2QzRGOUFFMDIvNDEwRjhDMEVE
QkM2MTFFRUE3MTcxOTREQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ5G5MA0GCSqGSIb3DQEBCwUAA4IBAQBa0dhgbwoEU6Asiv63LdD4
1QQo8i52Cmig6T+O/KEXNF5bSR+nlyfJhqS79eyhBcCKr28NpZk2ReiyEp/d4WKt
40aYaR8M6uwLpluOl8yO6sDErkrBdLJDvvurP9vgMntqrCPiCsY36rCuP7y/5E0W
SHNSy3hke6ZLUGuMWEDPsND2dhaOtHm5efnRIozUS2xOfanPKpqVih4yb3df14mU
BHqce1o40kj/fEy7ZSuoyy9KgLkXdxmm7kLRDgXx1HBOveQSCdXyUFtdlvluK85Z
iZ/vFmEbk5g7ZDoOr+tEdXaQXxDZmNbmNQ68qWkFj6PWq4iyE18uR/mUIDy+okIu
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:15 2026 by rpki-client