
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/F0CA090EB94A11EBAF5BDD5AC4F9AE02.roa
File: F0CA090EB94A11EBAF5BDD5AC4F9AE02.roa (raw, json)
Hash identifier: sa52l895YIbToiWoNN1p5FrL7C9QUTLiJxWGZLkoKuw=
Subject key identifier: 1D:D2:77:FA:35:3D:22:AE:D3:6E:34:AF:D7:82:0A:6F:D2:E4:B2:FE
Certificate issuer: /CN=A91A36A7/serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648
Certificate serial: 0692
Authority key identifier: A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/F0CA090EB94A11EBAF5BDD5AC4F9AE02.roa
Signing time: Tue 28 Apr 2026 23:30:01 +0000
ROA not before: Tue 28 Apr 2026 23:30:01 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 141767
IP address blocks: 103.163.182.0/23 maxlen: 23
103.163.182.0/24 maxlen: 24
103.163.183.0/24 maxlen: 24
2001:df6:2380::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl
rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:33:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1682 (0x692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A36A7, serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648
Validity
Not Before: Apr 28 23:30:01 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69f142f9-5cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a6:52:b4:78:38:66:39:d4:a9:ae:81:c0:1f:
79:c9:44:a4:88:91:48:7c:3f:18:bc:0e:c4:2a:e7:
80:5d:62:45:f0:b3:11:94:45:bc:8d:30:a8:e8:76:
15:7d:81:96:03:f0:29:45:23:ec:86:2c:66:5f:a7:
91:6b:43:30:8b:18:9e:d6:71:56:3c:d5:24:85:33:
4a:4a:f2:06:35:30:b6:3c:65:02:72:13:71:31:ac:
99:0f:f7:cd:30:51:80:d6:e7:25:d1:6e:93:49:12:
77:85:11:e1:09:a0:a2:9e:c2:37:12:7b:d8:99:b6:
65:a8:4c:6e:fe:3a:1c:d7:f1:be:0f:b0:a5:fe:a5:
be:be:3c:6e:83:22:bd:2f:9e:10:93:d8:aa:8f:57:
eb:ef:33:a9:41:02:ad:49:8f:87:b9:09:3b:f1:cc:
94:de:c6:05:b4:48:b1:f4:32:7c:7e:a7:36:bb:ff:
0e:0a:b6:20:3c:40:12:e1:a5:89:b4:37:c5:5b:34:
28:bb:00:da:38:39:7f:7f:5e:7d:e0:55:fc:8a:94:
22:12:5d:84:af:a5:40:3c:7c:65:bd:22:e7:da:23:
88:90:46:7d:bf:83:e5:f2:cb:d6:bc:58:8f:ca:12:
9f:b8:7f:21:4f:4d:75:ce:96:89:09:67:32:8a:42:
b6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D2:77:FA:35:3D:22:AE:D3:6E:34:AF:D7:82:0A:6F:D2:E4:B2:FE
X509v3 Authority Key Identifier:
keyid:A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/F0CA090EB94A11EBAF5BDD5AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.163.182.0/23
IPv6:
2001:df6:2380::/48
Signature Algorithm: sha256WithRSAEncryption
ca:87:e7:05:f7:9b:58:2d:3a:cd:3e:b9:3f:c7:e5:8a:ae:17:
94:9e:00:66:2e:4f:5a:fa:20:3c:31:4e:e3:a6:54:ef:47:67:
74:8d:d6:bb:f8:68:0a:d5:12:49:fe:99:04:47:5c:c3:a8:36:
42:e7:77:2d:6e:a5:4e:2a:f7:b2:e6:c3:a2:40:15:02:9b:70:
7d:b6:eb:28:32:d9:7e:75:92:78:57:1a:e0:c5:fd:9b:4b:ed:
59:7f:e3:06:9f:1a:61:f9:13:90:c8:9f:4f:6a:4c:f7:1f:f9:
73:20:c7:e4:10:97:4f:f3:a9:67:53:9c:27:e3:79:14:c7:fe:
c7:c6:3b:5c:17:7a:07:91:23:18:f2:3a:d5:89:50:b0:c5:96:
54:1f:8a:78:72:b9:33:9e:f7:4a:96:1d:1b:8e:e2:d0:3e:7c:
8e:1d:fa:63:9a:4b:40:c5:6e:62:6d:91:8c:fa:f7:f7:a9:ac:
3c:c6:90:d5:d9:4a:f5:87:29:0d:ba:72:c6:40:ea:44:f8:b5:
35:80:ef:65:ab:69:10:e9:21:a4:0b:dc:1d:58:8d:97:24:83:
07:a1:a4:71:1c:f1:04:59:fc:56:c8:cc:26:cb:95:14:44:b2:
3b:f0:cd:f5:cd:45:a7:ce:ae:d3:d2:3b:f0:7d:e6:d3:16:db:
cd:d1:80:e8
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICBpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTM2QTcxMTAvBgNVBAUTKEEzNjUyRDlFNTRFOTY0NjhCMjMwNDc5MzczMTdGQTRF
Q0Q3QjM2NDgwHhcNMjYwNDI4MjMzMDAxWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWYxNDJmOS01Y2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq6ZStHg4ZjnUqa6BwB95yUSkiJFIfD8YvA7EKueAXWJF8LMRlEW8jTCo6HYV
fYGWA/ApRSPshixmX6eRa0Mwixie1nFWPNUkhTNKSvIGNTC2PGUCchNxMayZD/fN
MFGA1ucl0W6TSRJ3hRHhCaCinsI3EnvYmbZlqExu/joc1/G+D7Cl/qW+vjxugyK9
L54Qk9iqj1fr7zOpQQKtSY+HuQk78cyU3sYFtEix9DJ8fqc2u/8OCrYgPEAS4aWJ
tDfFWzQouwDaODl/f1594FX8ipQiEl2Er6VAPHxlvSLn2iOIkEZ9v4Pl8svWvFiP
yhKfuH8hT011zpaJCWcyikK2vwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFB3Sd/o1
PSKu0240r9eCCm/S5LL+MB8GA1UdIwQYMBaAFKNlLZ5U6WRosjBHk3MX+k7NezZI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzZBNy84QUE2NUFGQ0I5
NDkxMUVCQkJCMzI1NUFDNEY5QUUwMi9vMlV0bmxUcFpHaXlNRWVUY3hmNlRzMTdO
a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL28yVXRubFRwWkdpeU1FZVRjeGY2VHMxN05rZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTM2QTcvOEFBNjVBRkNCOTQ5MTFFQkJCQjMyNTVBQzRGOUFFMDIvRjBDQTA5MEVC
OTRBMTFFQkFGNUJERDVBQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ6O2MA8EAgACMAkDBwAgAQ32I4AwDQYJKoZIhvcNAQELBQADggEB
AMqH5wX3m1gtOs0+uT/H5YquF5SeAGYuT1r6IDwxTuOmVO9HZ3SN1rv4aArVEkn+
mQRHXMOoNkLndy1upU4q97Lmw6JAFQKbcH226ygy2X51knhXGuDF/ZtL7Vl/4waf
GmH5E5DIn09qTPcf+XMgx+QQl0/zqWdTnCfjeRTH/sfGO1wXegeRIxjyOtWJULDF
llQfinhyuTOe90qWHRuO4tA+fI4d+mOaS0DFbmJtkYz69/eprDzGkNXZSvWHKQ26
csZA6kT4tTWA72WraRDpIaQL3B1YjZckgwehpHEc8QRZ/FbIzCbLlRREsjvwzfXN
RafOrtPSO/B95tMW283RgOg=
-----END CERTIFICATE-----
Generated at Wed May 13 07:50:01 2026 by rpki-client