
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/190C2054FC4511F0B3BAE0E1466F56BC.roa
File: 190C2054FC4511F0B3BAE0E1466F56BC.roa (raw, json)
Hash identifier: EugNDSEUcv8s0/hdkai7icbbEYSczSe5xjpiA4JXe7c=
Subject key identifier: AA:F6:82:09:CF:E1:AE:77:7B:53:F4:7F:2A:74:9E:53:03:A3:07:67
Certificate issuer: /CN=A9191BBF/serialNumber=BF4D8013DB97B8EF00F8CE8C6DBEAFB051E194BC
Certificate serial: 06DD
Authority key identifier: BF:4D:80:13:DB:97:B8:EF:00:F8:CE:8C:6D:BE:AF:B0:51:E1:94:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/190C2054FC4511F0B3BAE0E1466F56BC.roa
Signing time: Sun 26 Apr 2026 22:28:44 +0000
ROA not before: Sun 26 Apr 2026 22:28:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139691
IP address blocks: 103.166.40.0/24 maxlen: 24
2001:df6:7c80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl
rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:21:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1757 (0x6dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191BBF, serialNumber=BF4D8013DB97B8EF00F8CE8C6DBEAFB051E194BC
Validity
Not Before: Apr 26 22:28:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69ee919b-97b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:01:db:91:39:54:75:7f:ec:ab:bc:a4:ac:94:
0c:36:cf:ee:a7:46:6e:09:15:80:72:0f:cb:5e:36:
b1:b9:ab:94:5e:c4:0b:13:f7:8f:0f:80:7e:10:cd:
55:e5:4d:7d:a6:8a:03:89:df:22:62:04:4e:02:5c:
e6:3b:3b:57:65:eb:ca:a9:e9:3e:fc:a8:3d:94:86:
f6:12:44:cc:a0:fe:19:71:4d:88:b4:af:02:11:d1:
2d:1c:5e:b9:fa:2c:d9:1d:dc:bd:7f:13:9b:28:a5:
cc:03:53:b2:de:ee:f7:bc:dd:87:61:5c:4b:dc:58:
e3:40:d6:9f:8b:d6:ec:28:30:d0:e2:e4:79:30:12:
f0:07:e9:a2:6f:40:90:32:91:d2:b1:b8:6f:8a:21:
86:62:e1:d9:80:dd:d7:52:b7:41:8a:9b:28:2f:52:
5f:08:8e:bc:6e:3b:4c:4c:79:10:c3:bc:d1:28:0c:
7f:df:5c:28:eb:73:e5:50:62:93:27:6b:c6:57:54:
9b:38:38:f7:96:bb:dd:0c:68:c7:01:1c:db:7a:5a:
7a:7c:ec:4f:e9:1e:92:eb:cb:39:a0:f5:b0:18:90:
08:9c:c9:73:45:36:d7:d0:4b:bf:d1:8a:a6:bb:ce:
83:82:24:b4:d1:3c:3e:bb:02:f6:60:3c:e7:f7:4d:
4a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F6:82:09:CF:E1:AE:77:7B:53:F4:7F:2A:74:9E:53:03:A3:07:67
X509v3 Authority Key Identifier:
keyid:BF:4D:80:13:DB:97:B8:EF:00:F8:CE:8C:6D:BE:AF:B0:51:E1:94:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/190C2054FC4511F0B3BAE0E1466F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.166.40.0/24
IPv6:
2001:df6:7c80::/48
Signature Algorithm: sha256WithRSAEncryption
32:f6:8c:77:17:2a:15:2d:10:a9:5d:e1:8d:ab:2e:d9:38:0b:
48:ef:8c:bb:16:89:c5:8c:04:f6:ba:bc:e8:09:1b:b7:82:ce:
8a:c9:23:33:b3:58:01:bd:d8:c8:ad:e7:33:5d:b0:8c:a8:c1:
3d:9f:1c:44:65:0d:7a:de:e8:25:90:90:d0:3e:09:df:5f:a6:
9e:87:11:92:aa:15:1e:f0:6a:66:5b:8d:06:18:85:7e:4c:a1:
1d:a4:8e:a3:7a:29:b9:c4:18:91:97:0b:cd:d4:05:e4:92:56:
52:70:02:0f:ac:d8:00:01:11:fa:7b:ed:31:d2:9e:aa:ee:13:
d8:bc:94:ac:35:a2:ff:f8:93:23:d3:e3:37:46:ae:14:3e:35:
56:d9:a8:9a:2d:03:89:ae:87:17:54:8e:a2:d5:d7:32:b4:5c:
e4:3f:73:b4:5f:32:e4:14:f0:0b:c5:15:86:18:94:c0:30:dd:
bc:48:97:b8:3b:d0:62:5f:f2:7f:22:0d:75:6f:62:b6:a7:46:
a0:b8:0e:ae:14:0b:0c:3f:24:ed:11:f8:5e:ac:59:e4:37:2a:
e4:66:32:d0:24:a6:0e:2a:7a:8d:3a:63:e8:4c:8c:27:50:84:
ff:f8:30:49:d9:eb:a8:c9:80:8a:e1:23:a3:57:3d:ad:2e:23:
ee:4d:a9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:02:08 2026 by rpki-client