
$ rpki-client -vvf rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/5E9461285DB711EF8AB66F0EC4F9AE02.roa
File: 5E9461285DB711EF8AB66F0EC4F9AE02.roa (raw, json)
Hash identifier: VxdztqIyeKdq6Y1gZHMxA5mA6eKYSPyJZb/jS0HIv30=
Subject key identifier: BD:C9:B0:AF:17:89:4E:DC:46:26:3D:81:4E:E5:15:0A:5C:1A:36:CB
Certificate issuer: /CN=A91610DD/serialNumber=D8BD676518366034B888848B3B5718FA9070E192
Certificate serial: 014C
Authority key identifier: D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/5E9461285DB711EF8AB66F0EC4F9AE02.roa
Signing time: Tue 03 Mar 2026 05:45:46 +0000
ROA not before: Tue 03 Mar 2026 05:45:46 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 9313
IP address blocks: 103.21.144.0/24 maxlen: 24
103.21.145.0/24 maxlen: 24
103.21.146.0/24 maxlen: 24
103.21.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl
rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:28:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 332 (0x14c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91610DD, serialNumber=D8BD676518366034B888848B3B5718FA9070E192
Validity
Not Before: Mar 3 05:45:46 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a6758a-e077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:05:0d:45:43:c1:5d:f8:2f:36:d9:72:35:c3:
d7:28:ba:54:a8:69:6a:3f:50:60:8e:52:aa:39:b6:
a8:3b:62:5c:64:1f:6c:43:a4:e5:ea:c6:79:82:c3:
2a:49:71:76:3b:9b:8e:a8:52:26:25:e0:dd:01:ad:
26:de:f8:6f:42:83:aa:fe:b0:4e:94:e8:d9:15:80:
83:a4:16:2d:5d:27:ea:8f:af:7b:9b:2f:81:89:b8:
f4:12:07:d4:95:a7:7c:1a:4f:8c:a2:2c:c2:33:c3:
af:08:3e:8c:3d:b0:f5:10:02:8d:41:69:1a:e6:42:
ba:15:1c:96:fa:32:29:cc:37:7f:2d:3e:ce:7d:03:
5e:1c:c7:5e:d1:80:54:af:14:51:f2:39:a2:cf:9b:
d2:7e:6f:af:28:50:39:f9:03:24:ed:3f:55:e9:aa:
c6:cc:0f:96:95:fe:27:4a:92:ca:b3:6b:03:8d:ba:
d3:b6:0a:fc:13:2b:f4:c2:bd:1d:f0:12:d5:05:a7:
97:4f:1c:8f:f9:44:20:34:27:b8:12:32:a7:3f:ee:
be:e8:ed:85:bb:c5:d1:00:53:91:ca:61:16:48:31:
98:95:24:60:3d:f6:75:49:e9:73:80:7c:07:cb:07:
b6:8f:f3:70:49:7a:f7:d4:11:44:b7:4c:c3:3c:58:
93:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C9:B0:AF:17:89:4E:DC:46:26:3D:81:4E:E5:15:0A:5C:1A:36:CB
X509v3 Authority Key Identifier:
keyid:D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/5E9461285DB711EF8AB66F0EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.21.144.0/22
Signature Algorithm: sha256WithRSAEncryption
92:d6:00:7b:10:a5:60:80:31:d0:2a:85:3a:75:18:22:0d:90:
69:2f:49:8b:d4:f6:f6:21:8f:fb:20:15:67:95:5c:26:d4:88:
d7:a3:7e:ce:70:c8:65:a9:93:ee:1c:07:1a:f4:cb:e9:57:3b:
f2:bd:0a:b9:1a:20:dc:f3:5c:07:86:30:85:56:0a:ae:62:b2:
d4:f7:4e:2e:b4:0d:1f:86:c1:f7:f1:8b:43:89:ae:1b:e9:bd:
7b:ff:1b:4e:9a:08:a5:1c:d1:ef:b3:3e:9a:50:cb:cf:7b:f0:
be:60:58:ac:be:fb:57:01:c1:7c:8d:24:c4:99:70:1e:85:bc:
81:b1:05:55:2b:02:dc:08:50:b8:9b:a2:a4:c2:69:4b:9b:c9:
e2:2f:6f:fc:f0:06:0b:6b:7d:9d:8a:cc:a5:90:cb:f9:74:1b:
75:46:6b:92:d5:a0:24:42:67:2a:e1:82:d0:48:81:9e:01:63:
80:0f:35:6e:57:82:a8:78:2d:cc:74:7d:c8:b1:70:a0:90:5b:
78:01:74:de:3a:e7:00:71:24:dc:83:4f:d8:6a:3b:09:58:59:
79:af:10:23:47:6d:7e:c7:0d:ec:9a:eb:6b:e2:8e:91:77:7f:
26:ec:fe:ff:77:e0:26:81:1e:8a:9b:67:1f:6e:8b:5b:7d:53:
d7:f9:0a:45
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjEwREQxMTAvBgNVBAUTKEQ4QkQ2NzY1MTgzNjYwMzRCODg4ODQ4QjNCNTcxOEZB
OTA3MEUxOTIwHhcNMjYwMzAzMDU0NTQ2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2NzU4YS1lMDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwgUNRUPBXfgvNtlyNcPXKLpUqGlqP1BgjlKqObaoO2JcZB9sQ6Tl6sZ5gsMq
SXF2O5uOqFImJeDdAa0m3vhvQoOq/rBOlOjZFYCDpBYtXSfqj697my+Bibj0EgfU
lad8Gk+MoizCM8OvCD6MPbD1EAKNQWka5kK6FRyW+jIpzDd/LT7OfQNeHMde0YBU
rxRR8jmiz5vSfm+vKFA5+QMk7T9V6arGzA+Wlf4nSpLKs2sDjbrTtgr8Eyv0wr0d
8BLVBaeXTxyP+UQgNCe4EjKnP+6+6O2Fu8XRAFORymEWSDGYlSRgPfZ1SelzgHwH
ywe2j/NwSXr31BFEt0zDPFiTQwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFL3JsK8X
iU7cRiY9gU7lFQpcGjbLMB8GA1UdIwQYMBaAFNi9Z2UYNmA0uIiEiztXGPqQcOGS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTBERC82NTYzMjRGNDM4
RUExMUVGQjBGQjIxN0RDNEY5QUUwMi8yTDFuWlJnMllEUzRpSVNMTzFjWS1wQnc0
WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJMMW5aUmcyWURTNGlJU0xPMWNZLXBCdzRaSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjEwREQvNjU2MzI0RjQzOEVBMTFFRkIwRkIyMTdEQzRGOUFFMDIvNUU5NDYxMjg1
REI3MTFFRjhBQjY2RjBFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZxWQMA0GCSqGSIb3DQEBCwUAA4IBAQCS1gB7EKVggDHQKoU6dRgi
DZBpL0mL1Pb2IY/7IBVnlVwm1IjXo37OcMhlqZPuHAca9MvpVzvyvQq5GiDc81wH
hjCFVgquYrLU904utA0fhsH38YtDia4b6b17/xtOmgilHNHvsz6aUMvPe/C+YFis
vvtXAcF8jSTEmXAehbyBsQVVKwLcCFC4m6KkwmlLm8niL2/88AYLa32disylkMv5
dBt1RmuS1aAkQmcq4YLQSIGeAWOADzVuV4KoeC3MdH3IsXCgkFt4AXTeOucAcSTc
g0/YajsJWFl5rxAjR21+xw3smutr4o6Rd38m7P7/d+AmgR6Km2cfbotbfVPX+QpF
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:14:34 2026 by rpki-client