
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/A5D6438038C011ED8D00366CC4F9AE02.roa
File: A5D6438038C011ED8D00366CC4F9AE02.roa (raw, json)
Hash identifier: IyTEBSq+h6NoQhhHzczMCk59IciuuwHY1nkOvHooqW8=
Subject key identifier: 9A:86:E3:88:FA:20:AE:E8:38:FB:B2:44:C1:9D:C0:3A:52:E8:E7:77
Certificate issuer: /CN=A91BF849/serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55
Certificate serial: 02A6
Authority key identifier: 80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/A5D6438038C011ED8D00366CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:08:50 +0000
ROA not before: Mon 11 Aug 2025 02:40:31 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 135549
IP address blocks: 103.65.184.0/22 maxlen: 22
103.65.184.0/23 maxlen: 23
103.65.184.0/24 maxlen: 24
103.65.185.0/24 maxlen: 24
103.65.186.0/23 maxlen: 23
103.65.186.0/24 maxlen: 24
103.65.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl
rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 678 (0x2a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF849, serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55
Validity
Not Before: Aug 11 02:40:31 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a40222-8dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8b:b6:6d:ad:30:28:0e:7c:d0:c9:8d:56:6b:
df:f2:82:db:9e:b6:59:c6:de:22:02:51:f4:05:47:
14:58:c8:2b:91:2a:52:4a:2d:f8:6d:f7:7a:c9:10:
59:3b:21:ce:83:6a:c7:3f:5f:96:fb:9c:3b:cd:5f:
44:06:8f:02:3a:81:70:34:67:43:90:18:a5:54:f8:
1f:9b:a0:57:67:21:04:39:e6:73:cc:c7:c9:36:df:
17:7d:90:74:54:34:dd:d6:7e:47:09:7a:92:aa:5a:
78:d7:e3:04:96:55:02:05:77:9b:59:25:a8:58:d0:
ea:5c:3a:12:f0:61:a2:b1:c9:63:f0:20:b8:04:fc:
29:cd:84:02:e6:eb:2c:5e:55:66:44:96:b7:b8:c1:
95:07:a8:00:00:aa:b2:f9:03:87:4f:e9:f4:c3:5c:
e9:31:d9:f2:f4:f6:1d:c5:f8:64:19:74:48:02:4d:
4f:aa:15:25:a0:f4:5d:7d:b3:f5:fd:8a:0a:cd:dd:
ed:9e:db:39:b0:38:b0:fa:22:19:40:c2:6d:04:21:
bb:52:cb:69:38:b4:68:9b:77:8b:26:28:7f:17:b5:
f3:0a:09:3a:81:db:4d:b9:e5:3a:02:20:cf:e8:62:
b5:bb:7d:dc:d6:48:b9:0b:09:b3:ae:47:8b:4c:f7:
0d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:86:E3:88:FA:20:AE:E8:38:FB:B2:44:C1:9D:C0:3A:52:E8:E7:77
X509v3 Authority Key Identifier:
keyid:80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/A5D6438038C011ED8D00366CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.65.184.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:53:d2:35:a6:82:de:e3:22:90:52:70:1a:34:c8:16:07:11:
19:4e:a6:46:01:cb:97:85:fe:85:bd:9b:22:5f:7d:d4:70:37:
86:99:7f:20:b8:c5:65:70:af:16:ac:f1:37:ac:c1:ed:6e:ca:
08:d4:36:45:7b:df:10:68:5c:f8:0d:91:9b:9e:86:ed:53:d4:
c8:7c:bb:66:94:1c:3d:50:bc:63:da:0c:1f:8c:df:ba:83:f9:
20:e9:bc:90:d7:43:c7:65:79:08:94:26:ad:c0:95:26:ae:a0:
10:10:24:00:b8:63:3f:1c:96:19:88:b2:ac:4f:1b:bc:66:63:
e5:9f:ec:36:1f:99:c8:e5:53:07:49:c7:fe:7c:3c:ce:84:dd:
4e:28:83:3e:80:d7:01:86:b2:9c:39:98:8f:f8:6a:34:27:76:
3b:ca:25:a0:8b:73:f7:1e:90:2e:63:99:ca:6f:d2:02:8a:a2:
7b:b9:1b:0a:3b:da:01:ac:49:b9:0d:3a:18:01:fe:2a:e8:5f:
e1:a3:40:a5:16:3e:8b:57:56:d6:9f:65:9e:a8:43:30:40:18:
15:f5:be:5c:04:0b:51:86:c6:c6:08:4b:7a:a7:3e:ed:c5:67:
30:0c:af:4e:5a:f2:ac:c9:92:6f:f3:83:87:6c:ad:66:b0:d6:
22:1c:6e:ea
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkY4NDkxMTAvBgNVBAUTKDgwMUJBRDhDQjIyNjQxRERFREU0REJEMzlGNEJFN0Y0
RDhDQUVBNTUwHhcNMjUwODExMDI0MDMxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDIyMi04ZGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApou2ba0wKA580MmNVmvf8oLbnrZZxt4iAlH0BUcUWMgrkSpSSi34bfd6yRBZ
OyHOg2rHP1+W+5w7zV9EBo8COoFwNGdDkBilVPgfm6BXZyEEOeZzzMfJNt8XfZB0
VDTd1n5HCXqSqlp41+MEllUCBXebWSWoWNDqXDoS8GGisclj8CC4BPwpzYQC5uss
XlVmRJa3uMGVB6gAAKqy+QOHT+n0w1zpMdny9PYdxfhkGXRIAk1PqhUloPRdfbP1
/YoKzd3tnts5sDiw+iIZQMJtBCG7UstpOLRom3eLJih/F7XzCgk6gdtNueU6AiDP
6GK1u33c1ki5CwmzrkeLTPcNQwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJqG44j6
IK7oOPuyRMGdwDpS6Od3MB8GA1UdIwQYMBaAFIAbrYyyJkHd7eTb059L5/TYyupV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjg0OS9DNDJBNEFEODM4
QkMxMUVEQjBBRkI4NjRDNEY5QUUwMi9nQnV0akxJbVFkM3Q1TnZUbjB2bjlOaks2
bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dCdXRqTEltUWQzdDVOdlRuMHZuOU5qSzZsVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkY4NDkvQzQyQTRBRDgzOEJDMTFFREIwQUZCODY0QzRGOUFFMDIvQTVENjQzODAz
OEMwMTFFRDhEMDAzNjZDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ0G4MA0GCSqGSIb3DQEBCwUAA4IBAQAvU9I1poLe4yKQUnAaNMgW
BxEZTqZGAcuXhf6FvZsiX33UcDeGmX8guMVlcK8WrPE3rMHtbsoI1DZFe98QaFz4
DZGbnobtU9TIfLtmlBw9ULxj2gwfjN+6g/kg6byQ10PHZXkIlCatwJUmrqAQECQA
uGM/HJYZiLKsTxu8ZmPln+w2H5nI5VMHScf+fDzOhN1OKIM+gNcBhrKcOZiP+Go0
J3Y7yiWgi3P3HpAuY5nKb9ICiqJ7uRsKO9oBrEm5DToYAf4q6F/ho0ClFj6LV1bW
n2WeqEMwQBgV9b5cBAtRhsbGCEt6pz7txWcwDK9OWvKsyZJv84OHbK1msNYiHG7q
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:03 2026 by rpki-client