
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D2EC9F1685DF11F1B95C681C8EEE528E.roa
File: D2EC9F1685DF11F1B95C681C8EEE528E.roa (raw, json)
Hash identifier: hrklLDxO8KNJUrRX3/zSbFoIw2eNkgF13SjAcLQoHBE=
Subject key identifier: E6:77:1C:83:17:08:27:8F:DC:65:BC:50:29:5A:A6:D9:B5:8B:F9:A3
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6CF9
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D2EC9F1685DF11F1B95C681C8EEE528E.roa
Signing time: Wed 22 Jul 2026 15:12:59 +0000
ROA not before: Wed 22 Jul 2026 15:12:59 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 135981
IP address blocks: 103.141.142.0/23 maxlen: 23
103.168.52.0/24 maxlen: 24
2405:1a40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27897 (0x6cf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Jul 22 15:12:59 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a60ddfb-5966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:aa:b9:d4:63:a2:d2:d4:a5:c5:99:d7:8c:dc:
0c:2a:e3:ad:36:40:60:95:d8:48:c1:84:06:65:a6:
78:49:a2:4e:57:17:e3:25:26:45:d0:74:c8:4b:ee:
bd:c4:82:43:ef:40:8b:7b:4e:9d:16:3d:22:be:d6:
1f:43:96:f0:11:0f:31:37:b2:23:8f:ec:8e:ee:48:
fb:ee:3c:01:cf:01:05:75:fe:43:c5:05:dc:fc:58:
a6:ef:62:4d:04:be:66:ec:81:7f:ba:e0:ae:d1:00:
18:7c:1e:62:00:c3:99:e1:5f:c7:3f:c5:8f:3e:ac:
c0:ba:29:bc:fe:5e:85:3c:6d:c2:b3:bf:f6:ab:a5:
f1:aa:31:84:cd:51:12:8f:41:04:4b:36:df:ab:af:
7d:23:23:d6:c3:bf:53:48:c3:01:9e:6e:45:af:a6:
3c:f8:21:91:e9:b9:f2:47:5b:5d:7d:79:ba:6e:4e:
86:0a:f9:59:14:33:5b:52:3f:cd:69:af:43:11:34:
49:57:6f:60:76:a0:01:de:99:bc:70:3f:72:ae:8c:
19:76:d4:2c:bd:09:f8:3e:8a:b4:dd:d7:ae:5c:f0:
e6:0a:bc:79:55:82:72:a3:7d:f3:e2:57:0f:94:44:
0c:9d:e7:82:f8:35:40:a8:ed:84:6c:01:db:fb:05:
3e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:77:1C:83:17:08:27:8F:DC:65:BC:50:29:5A:A6:D9:B5:8B:F9:A3
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D2EC9F1685DF11F1B95C681C8EEE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
103.141.142.0/23
103.168.52.0/24
IPv6:
2405:1a40::/48
Signature Algorithm: sha256WithRSAEncryption
bd:3e:1b:bb:84:13:ad:83:02:7e:70:03:e1:17:45:23:b1:d9:
16:b0:00:32:32:70:d5:94:ff:04:1c:5e:e2:fd:9c:d9:1f:b1:
be:50:c4:eb:17:77:67:a3:f7:c9:c4:61:85:fa:95:71:33:51:
ba:d6:9e:a2:c7:a3:08:fe:f3:32:bb:db:79:d1:0a:b6:d5:7d:
c3:36:0c:3a:c4:e9:94:13:32:23:b4:98:17:fb:b1:56:22:e1:
65:ae:6f:84:ef:7d:1d:da:44:b5:f6:51:b8:a3:c7:df:ad:75:
c0:52:73:c0:f5:e0:a4:9f:88:a8:c6:20:aa:7d:97:c9:99:42:
c2:d8:b6:e1:01:46:02:95:23:76:40:2c:90:66:9e:f5:50:01:
1e:e9:c6:0c:34:cd:a6:10:cc:6c:47:29:82:8b:5e:14:0f:48:
78:f1:cd:e9:c5:4b:eb:4a:80:1b:f6:dd:db:2b:83:83:47:4d:
55:ab:63:ed:87:93:7d:02:ed:d3:c9:00:a9:c7:0c:e1:77:5b:
58:ef:cc:6e:6d:9f:e4:79:10:ea:d8:e3:53:82:05:7a:74:66:
44:d5:80:37:9f:0d:7e:66:66:5e:ea:2f:43:84:ae:02:5a:f9:
40:18:d0:47:c2:18:36:7f:db:b3:d1:71:a8:8a:c3:46:1c:0e:
c4:94:e1:99
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgICbPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYwNzIyMTUxMjU5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTYwZGRmYi01OTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxKq51GOi0tSlxZnXjNwMKuOtNkBgldhIwYQGZaZ4SaJOVxfjJSZF0HTIS+69
xIJD70CLe06dFj0ivtYfQ5bwEQ8xN7Ijj+yO7kj77jwBzwEFdf5DxQXc/Fim72JN
BL5m7IF/uuCu0QAYfB5iAMOZ4V/HP8WPPqzAuim8/l6FPG3Cs7/2q6XxqjGEzVES
j0EESzbfq699IyPWw79TSMMBnm5Fr6Y8+CGR6bnyR1tdfXm6bk6GCvlZFDNbUj/N
aa9DETRJV29gdqAB3pm8cD9yrowZdtQsvQn4Poq03deuXPDmCrx5VYJyo33z4lcP
lEQMneeC+DVAqO2EbAHb+wU+WQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFOZ3HIMX
CCeP3GW8UClaptm1i/mjMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRDJFQzlGMTY4
NURGMTFGMUI5NUM2ODFDOEVFRTUyOEUucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS
BAIAATAMAwQBZ42OAwQAZ6g0MA8EAgACMAkDBwAkBRpAAAAwDQYJKoZIhvcNAQEL
BQADggEBAL0+G7uEE62DAn5wA+EXRSOx2RawADIycNWU/wQcXuL9nNkfsb5QxOsX
d2ej98nEYYX6lXEzUbrWnqLHowj+8zK723nRCrbVfcM2DDrE6ZQTMiO0mBf7sVYi
4WWub4TvfR3aRLX2Ubijx9+tdcBSc8D14KSfiKjGIKp9l8mZQsLYtuEBRgKVI3ZA
LJBmnvVQAR7pxgw0zaYQzGxHKYKLXhQPSHjxzenFS+tKgBv23dsrg4NHTVWrY+2H
k30C7dPJAKnHDOF3W1jvzG5tn+R5EOrY41OCBXp0ZkTVgDefDX5mZl7qL0OErgJa
+UAY0EfCGDZ/27PRcaiKw0YcDsSU4Zk=
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:09 2026 by rpki-client