
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/A2835264049511ECB774BA31C4F9AE02.roa
File: A2835264049511ECB774BA31C4F9AE02.roa (raw, json)
Hash identifier: f4Fr0Wm4hRAjomJLBDiV5gFbrZywSJyJuObbSUgOIx0=
Subject key identifier: C3:2F:4A:50:92:D7:BF:4C:D6:5E:17:6F:21:A1:F6:54:FE:20:4E:50
Certificate issuer: /CN=A91FDD88/serialNumber=1410FD8787140FF9976FE9C1FA5844ED5DD1E3C5
Certificate serial: 05AD
Authority key identifier: 14:10:FD:87:87:14:0F:F9:97:6F:E9:C1:FA:58:44:ED:5D:D1:E3:C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/A2835264049511ECB774BA31C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:40:35 +0000
ROA not before: Fri 12 Dec 2025 22:39:19 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 141389
IP address blocks: 103.158.14.0/24 maxlen: 24
103.158.15.0/24 maxlen: 24
2406:ac40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.crl
rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1453 (0x5ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDD88, serialNumber=1410FD8787140FF9976FE9C1FA5844ED5DD1E3C5
Validity
Not Before: Dec 12 22:39:19 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a433c3-9d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:26:5b:3d:da:39:91:56:49:ef:7e:87:7e:
57:e4:b4:cd:17:3f:9c:f0:66:b5:75:36:b1:82:4c:
ad:17:e4:40:8e:a0:58:60:fa:3d:35:f2:82:1d:d1:
ef:fa:06:a4:67:9a:ad:b1:06:be:78:34:8f:f4:5f:
e0:b1:83:56:07:ab:cf:a1:a3:c8:53:c0:12:0f:26:
5a:cb:57:0b:81:64:5f:8f:f0:c0:4f:05:70:05:70:
38:1b:9f:3e:27:71:38:d8:4b:7b:42:e6:9a:4b:ae:
42:52:e6:97:91:24:69:8c:2f:a8:8c:90:cc:2c:25:
1a:d2:47:6c:fa:ae:d9:72:45:0c:4c:31:ec:3c:56:
fb:2b:a2:23:10:92:4a:94:27:73:ff:1a:d7:ad:54:
64:cd:e0:d5:82:40:a6:03:20:49:b6:f2:72:91:7f:
07:b4:3f:9f:b5:cf:66:76:a4:bb:47:b3:d5:0f:04:
35:b5:9d:bd:3c:3a:70:17:79:6f:24:60:12:4f:f4:
77:87:3d:e5:cf:98:38:f8:a2:b9:b6:b7:b7:31:5a:
29:22:e6:3f:e9:93:eb:e4:c1:bc:32:b2:2d:78:8d:
e5:45:d5:7f:7b:fc:2e:6d:2b:fb:2c:0b:63:3c:3f:
67:95:53:29:9d:2b:d3:f9:95:0f:fe:a9:33:91:b2:
ae:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2F:4A:50:92:D7:BF:4C:D6:5E:17:6F:21:A1:F6:54:FE:20:4E:50
X509v3 Authority Key Identifier:
keyid:14:10:FD:87:87:14:0F:F9:97:6F:E9:C1:FA:58:44:ED:5D:D1:E3:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/A2835264049511ECB774BA31C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.158.14.0/23
IPv6:
2406:ac40::/32
Signature Algorithm: sha256WithRSAEncryption
0d:17:89:7b:e7:8f:68:83:26:65:be:46:09:7a:90:fe:23:b1:
8a:a5:32:55:e5:5d:9b:f9:f6:b0:54:33:bd:5a:f7:b9:60:7b:
26:10:63:f7:17:31:47:ce:2c:3d:7e:40:df:8c:36:e2:90:66:
bf:86:50:86:b6:28:60:9d:bf:17:10:68:72:e8:2f:d2:66:91:
13:12:42:1b:54:b0:1b:d2:a9:25:08:a1:fe:ac:1b:c9:75:2e:
99:1e:0d:82:b9:da:d4:63:2a:fd:9a:0a:af:a2:a4:6f:bb:52:
4d:9a:01:82:fe:d9:93:9f:1d:a3:8f:16:a1:9a:f8:ae:08:c5:
49:a8:c0:19:41:97:f8:cf:4c:c1:17:6b:54:38:9d:8a:fb:e9:
bd:29:3a:96:8e:15:b3:11:70:10:54:7e:da:9f:c4:e8:1d:a1:
e1:97:6f:01:a9:f4:f1:2d:d1:a2:46:a6:d5:e6:42:c8:31:57:
d5:1d:e7:52:08:84:7f:b1:67:59:c3:ba:f7:25:0c:5d:32:8a:
90:bc:2f:ba:71:87:a1:02:ab:28:3f:01:33:5c:85:c7:45:75:
af:fd:dd:e6:c3:a0:84:c9:09:e7:b3:a2:a5:20:a9:0f:99:d3:
50:86:62:3f:73:6b:88:78:a7:60:9b:bd:83:88:4e:59:75:14:
47:c6:23:7a
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICBa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkREODgxMTAvBgNVBAUTKDE0MTBGRDg3ODcxNDBGRjk5NzZGRTlDMUZBNTg0NEVE
NUREMUUzQzUwHhcNMjUxMjEyMjIzOTE5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzNjMy05ZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu50mWz3aOZFWSe9+h35X5LTNFz+c8Ga1dTaxgkytF+RAjqBYYPo9NfKCHdHv
+gakZ5qtsQa+eDSP9F/gsYNWB6vPoaPIU8ASDyZay1cLgWRfj/DATwVwBXA4G58+
J3E42Et7QuaaS65CUuaXkSRpjC+ojJDMLCUa0kds+q7ZckUMTDHsPFb7K6IjEJJK
lCdz/xrXrVRkzeDVgkCmAyBJtvJykX8HtD+ftc9mdqS7R7PVDwQ1tZ29PDpwF3lv
JGAST/R3hz3lz5g4+KK5tre3MVopIuY/6ZPr5MG8MrIteI3lRdV/e/wubSv7LAtj
PD9nlVMpnSvT+ZUP/qkzkbKuKQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFMMvSlCS
179M1l4XbyGh9lT+IE5QMB8GA1UdIwQYMBaAFBQQ/YeHFA/5l2/pwfpYRO1d0ePF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ4OC9DODIzNkFDMjA0
OTAxMUVDOENDMUEzODZDNEY5QUUwMi9GQkQ5aDRjVURfbVhiLW5CLWxoRTdWM1I0
OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZCRDloNGNVRF9tWGItbkItbGhFN1YzUjQ4VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkREODgvQzgyMzZBQzIwNDkwMTFFQzhDQzFBMzg2QzRGOUFFMDIvQTI4MzUyNjQw
NDk1MTFFQ0I3NzRCQTMxQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ54OMA0EAgACMAcDBQAkBqxAMA0GCSqGSIb3DQEBCwUAA4IBAQAN
F4l7549ogyZlvkYJepD+I7GKpTJV5V2b+fawVDO9Wve5YHsmEGP3FzFHziw9fkDf
jDbikGa/hlCGtihgnb8XEGhy6C/SZpETEkIbVLAb0qklCKH+rBvJdS6ZHg2CudrU
Yyr9mgqvoqRvu1JNmgGC/tmTnx2jjxahmviuCMVJqMAZQZf4z0zBF2tUOJ2K++m9
KTqWjhWzEXAQVH7an8ToHaHhl28BqfTxLdGiRqbV5kLIMVfVHedSCIR/sWdZw7r3
JQxdMoqQvC+6cYehAqsoPwEzXIXHRXWv/d3mw6CEyQnns6KlIKkPmdNQhmI/c2uI
eKdgm72DiE5ZdRRHxiN6
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:29 2026 by rpki-client