
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/3E1ABB8C816E11F0A5992F28C4F9AE02.roa
File: 3E1ABB8C816E11F0A5992F28C4F9AE02.roa (raw, json)
Hash identifier: uyOU7OWturYo16z8/9jzgKBsXU3ESi7wumKHXnMPiW4=
Subject key identifier: 7B:9E:0D:55:81:3C:51:74:AC:F3:BE:E0:13:4A:2C:B8:9B:90:98:2A
Certificate issuer: /CN=A91BF6CD/serialNumber=B4FBE34AB76612A9D20AE52B0ADB41FCF80A12FF
Certificate serial: 6A
Authority key identifier: B4:FB:E3:4A:B7:66:12:A9:D2:0A:E5:2B:0A:DB:41:FC:F8:0A:12:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/3E1ABB8C816E11F0A5992F28C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:18:28 +0000
ROA not before: Sat 27 Dec 2025 06:25:32 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 149014
IP address blocks: 103.160.44.0/23 maxlen: 23
103.160.44.0/24 maxlen: 24
103.160.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.crl
rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF6CD, serialNumber=B4FBE34AB76612A9D20AE52B0ADB41FCF80A12FF
Validity
Not Before: Dec 27 06:25:32 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a43ca4-df38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:7d:b4:1b:97:88:eb:7d:1d:5a:6f:f1:ce:
30:2f:b1:4d:95:2d:f5:34:73:be:fc:3f:ba:38:ce:
2a:88:a9:47:0b:57:87:0f:c9:61:8f:8a:12:1f:2d:
b4:b1:da:ee:44:30:49:57:44:5a:49:38:05:ec:63:
a4:e7:f2:de:30:54:06:cb:24:59:6c:2b:61:f0:f7:
93:cf:8a:5c:78:34:8c:0b:c1:cf:c1:1b:5a:3a:f5:
8d:97:fe:dd:ec:29:0f:34:f1:63:34:07:d2:31:80:
d4:02:51:20:08:2c:45:19:6c:bf:eb:9d:9a:65:b0:
47:42:0d:98:f5:ba:76:22:df:ac:33:0f:02:5f:e5:
19:9e:17:4c:84:cd:25:7e:ad:43:b2:63:b2:80:8d:
c0:bf:3e:5d:17:cd:1b:d8:59:11:24:12:5b:ea:55:
a5:00:fc:c8:8b:bf:66:87:7a:bf:63:c9:56:2d:1b:
94:48:47:2b:12:26:a5:fe:76:b5:a5:a3:1c:f9:ca:
b3:8c:06:b6:9d:a3:45:48:2d:4a:e2:cf:2e:7c:81:
ed:1f:65:a0:64:7a:12:e4:a1:93:86:62:03:90:89:
7b:97:8a:f5:5f:c3:c4:94:83:9f:38:a8:87:42:30:
a9:70:a1:d3:ba:ec:33:e5:01:56:98:84:d5:6d:61:
f5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9E:0D:55:81:3C:51:74:AC:F3:BE:E0:13:4A:2C:B8:9B:90:98:2A
X509v3 Authority Key Identifier:
keyid:B4:FB:E3:4A:B7:66:12:A9:D2:0A:E5:2B:0A:DB:41:FC:F8:0A:12:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/3E1ABB8C816E11F0A5992F28C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.160.44.0/23
Signature Algorithm: sha256WithRSAEncryption
83:49:17:da:93:2b:a2:5c:06:cf:5f:9e:ca:d5:31:96:5a:53:
2c:8f:fc:b6:7e:6d:46:f2:e5:e9:e8:6f:89:f3:c2:f4:19:a3:
c6:f5:45:02:d6:34:37:02:9c:2e:0b:f0:42:aa:ea:fa:66:0b:
76:14:d5:e3:88:74:c4:7e:bf:86:6e:1c:de:24:1d:63:a9:86:
ad:00:d8:d3:6b:dd:2a:a0:64:01:37:d8:04:84:12:4f:a2:5d:
fa:f7:09:6b:32:fb:99:b9:bd:77:a1:b3:be:97:51:cd:fc:1f:
01:c8:9f:fb:bc:e8:c1:8e:fc:d9:df:fc:b0:05:fc:f7:00:21:
98:19:99:02:50:83:e7:3e:b1:df:ff:da:bc:70:9d:06:b5:55:
3d:e7:b9:6a:44:dd:2b:2d:10:e6:68:a8:d7:7e:d5:18:d0:9a:
65:0b:1a:6d:b4:33:cc:35:a7:2a:cf:0c:1b:df:e6:8c:12:1c:
70:20:54:f9:9d:38:42:12:1f:1f:e4:e2:41:df:4b:4e:98:6d:
bd:dc:85:10:41:84:c0:85:fe:32:95:a7:1c:8c:6f:fd:68:ee:
e8:d6:97:1c:4d:5a:62:9d:04:ea:39:80:9e:24:ae:e6:41:d9:
a3:65:68:f0:d2:8c:88:b4:fd:fa:04:ef:20:27:be:5e:ce:2c:
77:5b:a9:46
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
RjZDRDExMC8GA1UEBRMoQjRGQkUzNEFCNzY2MTJBOUQyMEFFNTJCMEFEQjQxRkNG
ODBBMTJGRjAeFw0yNTEyMjcwNjI1MzJaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTQzY2E0LWRmMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvv320G5eI630dWm/xzjAvsU2VLfU0c778P7o4ziqIqUcLV4cPyWGPihIfLbSx
2u5EMElXRFpJOAXsY6Tn8t4wVAbLJFlsK2Hw95PPilx4NIwLwc/BG1o69Y2X/t3s
KQ808WM0B9IxgNQCUSAILEUZbL/rnZplsEdCDZj1unYi36wzDwJf5RmeF0yEzSV+
rUOyY7KAjcC/Pl0XzRvYWREkElvqVaUA/MiLv2aHer9jyVYtG5RIRysSJqX+drWl
oxz5yrOMBrado0VILUrizy58ge0fZaBkehLkoZOGYgOQiXuXivVfw8SUg584qIdC
MKlwodO67DPlAVaYhNVtYfUnAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUe54NVYE8
UXSs877gE0osuJuQmCowHwYDVR0jBBgwFoAUtPvjSrdmEqnSCuUrCttB/PgKEv8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGNkNELzMzM0JDNjA4ODE2
RDExRjBBOTA2NkQyNUM0RjlBRTAyL3RQdmpTcmRtRXFuU0N1VXJDdHRCX1BnS0V2
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdFB2alNyZG1FcW5TQ3VVckN0dEJfUGdLRXY4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjZDRC8zMzNCQzYwODgxNkQxMUYwQTkwNjZEMjVDNEY5QUUwMi8zRTFBQkI4Qzgx
NkUxMUYwQTU5OTJGMjhDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAFnoCwwDQYJKoZIhvcNAQELBQADggEBAINJF9qTK6JcBs9fnsrVMZZa
UyyP/LZ+bUby5enob4nzwvQZo8b1RQLWNDcCnC4L8EKq6vpmC3YU1eOIdMR+v4Zu
HN4kHWOphq0A2NNr3SqgZAE32ASEEk+iXfr3CWsy+5m5vXehs76XUc38HwHIn/u8
6MGO/Nnf/LAF/PcAIZgZmQJQg+c+sd//2rxwnQa1VT3nuWpE3SstEOZoqNd+1RjQ
mmULGm20M8w1pyrPDBvf5owSHHAgVPmdOEISHx/k4kHfS06Ybb3chRBBhMCF/jKV
pxyMb/1o7ujWlxxNWmKdBOo5gJ4kruZB2aNlaPDSjIi0/foE7yAnvl7OLHdbqUY=
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:51 2026 by rpki-client