
$ rpki-client -vvf rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/F14DD31CCA2D11EB8B7FE060C4F9AE02.roa
File: F14DD31CCA2D11EB8B7FE060C4F9AE02.roa (raw, json)
Hash identifier: /suHUESFROfiLir/eQsI7Wa5u/Am8Y+X3WM7oMGEhoI=
Subject key identifier: 29:28:A6:B6:5A:F0:65:11:BE:BF:A1:62:28:AE:AA:45:FF:A5:11:E6
Certificate issuer: /CN=A91383D8/serialNumber=4D27988B29E52B26503DCABC041AB3F61F241051
Certificate serial: 0646
Authority key identifier: 4D:27:98:8B:29:E5:2B:26:50:3D:CA:BC:04:1A:B3:F6:1F:24:10:51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/F14DD31CCA2D11EB8B7FE060C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:49:23 +0000
ROA not before: Mon 26 May 2025 23:54:21 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 142123
IP address blocks: 103.166.166.0/23 maxlen: 24
2407:5940::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.crl
rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:24:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1606 (0x646)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91383D8, serialNumber=4D27988B29E52B26503DCABC041AB3F61F241051
Validity
Not Before: May 26 23:54:21 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3fd93-5865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0d:c2:ab:d6:b2:3f:e7:10:78:77:cb:28:a1:
14:7c:14:87:24:67:9b:94:0f:54:51:fc:04:20:55:
0b:9e:4e:62:4e:b0:34:d6:08:23:a7:07:2b:ec:f8:
43:a5:03:02:32:50:28:a5:85:ad:75:b0:d7:ec:b4:
d2:92:81:25:07:2e:53:2c:92:ea:34:c5:48:c1:ff:
89:97:79:e5:4d:1c:fb:08:a8:c5:4a:de:bf:98:e1:
d7:5b:05:ef:c1:5c:b0:cc:8f:6b:32:78:26:5a:ad:
84:1a:7d:52:2b:36:48:26:0a:b8:dd:96:fb:38:09:
b5:69:29:7e:8b:95:e5:6e:ea:f2:2d:5d:2f:45:52:
4f:06:3f:2e:f6:b5:af:25:fd:02:87:d5:4a:20:f9:
4c:f6:06:ba:4a:15:0b:f4:39:72:ea:b2:83:94:1c:
a0:c4:6b:da:14:2e:ef:43:49:97:1d:a5:a0:5c:d7:
f7:9f:16:d3:39:dd:7a:aa:80:1e:33:27:87:d5:56:
b8:94:77:94:a8:07:5b:11:59:c3:9b:a7:13:65:d6:
61:b8:90:de:a2:9e:63:e4:51:6b:50:e1:5c:99:cd:
3c:18:01:63:6c:20:0c:25:67:31:17:1f:8b:11:d1:
ec:8e:14:ba:73:71:f1:21:3e:ef:25:11:72:7d:cd:
6c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:28:A6:B6:5A:F0:65:11:BE:BF:A1:62:28:AE:AA:45:FF:A5:11:E6
X509v3 Authority Key Identifier:
keyid:4D:27:98:8B:29:E5:2B:26:50:3D:CA:BC:04:1A:B3:F6:1F:24:10:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/F14DD31CCA2D11EB8B7FE060C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.166.166.0/23
IPv6:
2407:5940::/32
Signature Algorithm: sha256WithRSAEncryption
80:d7:6b:48:48:24:ef:a4:94:38:f4:47:cb:e4:34:73:bf:23:
d2:c3:a6:9c:e5:8a:b3:c5:6b:8f:57:84:ed:c2:da:4c:70:14:
12:0d:6d:9d:c0:fe:6e:16:fb:91:26:50:4a:4e:5f:2d:3a:dd:
ab:71:48:e2:47:af:bc:c6:37:10:98:93:52:24:d4:de:89:54:
51:e9:49:50:b4:7b:1b:f4:96:8b:04:9a:cb:9d:ee:02:61:f3:
a4:72:b2:de:6f:4a:40:bc:1f:ed:e8:34:f0:16:81:e3:b5:e0:
35:eb:4d:59:4d:f4:aa:cb:38:07:27:4d:39:fe:49:9c:24:dc:
9d:03:96:c3:90:38:1e:13:17:56:db:fc:d7:52:8e:9b:83:47:
7e:c5:51:ac:7e:02:f8:21:3f:07:80:05:cd:f5:f1:cf:0e:c8:
c0:68:22:ee:c7:c5:93:5b:2a:b2:5b:10:ad:58:be:16:4a:1d:
10:18:8f:b6:a3:77:3f:11:59:6c:95:38:66:d3:2a:d1:a2:23:
21:49:ba:74:02:27:2a:66:c0:03:7b:d5:24:1e:62:92:e4:4d:
cd:16:d1:a4:ed:9f:be:a0:8a:e0:38:80:b8:89:82:01:17:9f:
f4:59:42:4e:94:06:50:d9:0c:fd:f4:9e:6b:90:dd:96:fe:4d:
ad:3a:f0:ac
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICBkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzgzRDgxMTAvBgNVBAUTKDREMjc5ODhCMjlFNTJCMjY1MDNEQ0FCQzA0MUFCM0Y2
MUYyNDEwNTEwHhcNMjUwNTI2MjM1NDIxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZmQ5My01ODY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApw3Cq9ayP+cQeHfLKKEUfBSHJGeblA9UUfwEIFULnk5iTrA01ggjpwcr7PhD
pQMCMlAopYWtdbDX7LTSkoElBy5TLJLqNMVIwf+Jl3nlTRz7CKjFSt6/mOHXWwXv
wVywzI9rMngmWq2EGn1SKzZIJgq43Zb7OAm1aSl+i5XlburyLV0vRVJPBj8u9rWv
Jf0Ch9VKIPlM9ga6ShUL9Dly6rKDlBygxGvaFC7vQ0mXHaWgXNf3nxbTOd16qoAe
MyeH1Va4lHeUqAdbEVnDm6cTZdZhuJDeop5j5FFrUOFcmc08GAFjbCAMJWcxFx+L
EdHsjhS6c3HxIT7vJRFyfc1sbwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFCkoprZa
8GURvr+hYiiuqkX/pRHmMB8GA1UdIwQYMBaAFE0nmIsp5SsmUD3KvAQas/YfJBBR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNEOC8wOUNDMzYwQ0NB
MkIxMUVCQURGNTQ1NUVDNEY5QUUwMi9UU2VZaXlubEt5WlFQY3E4QkJxejloOGtF
RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RTZVlpeW5sS3laUVBjcThCQnF6OWg4a0VGRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzgzRDgvMDlDQzM2MENDQTJCMTFFQkFERjU0NTVFQzRGOUFFMDIvRjE0REQzMUND
QTJEMTFFQjhCN0ZFMDYwQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ6amMA0EAgACMAcDBQAkB1lAMA0GCSqGSIb3DQEBCwUAA4IBAQCA
12tISCTvpJQ49EfL5DRzvyPSw6ac5YqzxWuPV4TtwtpMcBQSDW2dwP5uFvuRJlBK
Tl8tOt2rcUjiR6+8xjcQmJNSJNTeiVRR6UlQtHsb9JaLBJrLne4CYfOkcrLeb0pA
vB/t6DTwFoHjteA1601ZTfSqyzgHJ005/kmcJNydA5bDkDgeExdW2/zXUo6bg0d+
xVGsfgL4IT8HgAXN9fHPDsjAaCLux8WTWyqyWxCtWL4WSh0QGI+2o3c/EVlslThm
0yrRoiMhSbp0AicqZsADe9UkHmKS5E3NFtGk7Z++oIrgOIC4iYIBF5/0WUJOlAZQ
2Qz99J5rkN2W/k2tOvCs
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:32:01 2026 by rpki-client