
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/52333EB4CFAE11EEB928CD25C4F9AE02.roa
File: 52333EB4CFAE11EEB928CD25C4F9AE02.roa (raw, json)
Hash identifier: ddr6rcuB/if8U4W4LMkgWUDhUuSvIUyegUgFAFAAT30=
Subject key identifier: 4F:C7:28:7F:68:F2:98:20:AF:36:EF:51:28:72:B7:15:E1:C0:5C:49
Certificate issuer: /CN=A91C0EDF/serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C
Certificate serial: 01E6
Authority key identifier: 8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/52333EB4CFAE11EEB928CD25C4F9AE02.roa
Signing time: Sat 29 Aug 2026 03:53:38 +0000
ROA not before: Sat 29 Aug 2026 03:53:38 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 137846
IP address blocks: 103.191.110.0/23 maxlen: 23
103.191.110.0/24 maxlen: 24
103.191.111.0/24 maxlen: 24
2001:df0:fec0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl
rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:19:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 486 (0x1e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0EDF, serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C
Validity
Not Before: Aug 29 03:53:38 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a9257c2-70be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:ce:07:b0:78:ed:cc:0b:0c:67:20:2b:e7:
f3:50:88:73:3a:13:4c:cb:d9:95:33:bd:d8:d7:a4:
c2:39:1c:17:58:ae:87:69:82:33:fe:d0:de:9f:e4:
63:eb:65:83:70:4d:14:bf:d0:6e:e7:82:6c:fd:5e:
b7:5a:f8:7b:70:6e:f3:f2:fd:44:b6:92:24:ef:ce:
de:11:e1:07:3a:06:22:20:7b:d4:4d:53:0e:f6:b4:
5e:d6:d2:35:5e:ea:6a:4c:29:39:f7:f9:23:ff:c8:
1f:f5:01:8f:1a:1e:81:d6:9d:ac:fe:9f:cf:d2:af:
a6:d9:99:23:e7:7f:f2:06:49:13:3d:ba:58:fa:cd:
32:2f:18:66:44:40:10:e6:86:2e:1d:57:a3:f5:23:
7b:b6:69:b0:7d:32:5f:5a:61:a0:c5:fe:29:98:6e:
5f:73:a9:48:75:2e:cb:8d:83:25:54:e6:38:43:18:
59:3f:47:6b:c6:50:ae:5f:b0:60:70:ee:16:e2:b2:
5f:4e:8c:ab:5d:8e:b0:b3:8f:34:a4:0a:1f:a3:26:
e7:11:67:85:c7:54:15:3c:c6:1e:4c:3e:a1:3c:24:
f4:81:f3:99:0b:6c:5e:00:00:ee:20:0f:43:f9:95:
d4:0c:25:2a:fc:fa:2f:7f:19:83:05:33:34:7c:ad:
23:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C7:28:7F:68:F2:98:20:AF:36:EF:51:28:72:B7:15:E1:C0:5C:49
X509v3 Authority Key Identifier:
keyid:8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/52333EB4CFAE11EEB928CD25C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.191.110.0/23
IPv6:
2001:df0:fec0::/48
Signature Algorithm: sha256WithRSAEncryption
19:54:4e:1e:a7:4c:98:52:1d:99:86:19:97:07:61:2c:00:3d:
f4:57:2b:11:02:e2:11:e2:13:48:cf:47:2e:33:07:b3:aa:43:
52:26:7d:32:e2:86:c9:59:cc:a2:f4:ef:cd:6d:67:de:0b:22:
26:2c:a7:28:50:ff:d7:dc:f3:31:92:2b:f0:6d:76:dc:f7:81:
f6:e6:cd:a8:e1:a3:b2:c7:b6:8f:6a:70:51:9a:53:86:11:10:
f1:86:0a:fd:32:f0:8a:50:77:59:af:ae:78:19:08:6a:7e:bf:
fe:72:f9:fc:78:b0:07:f5:58:34:24:7a:e3:6c:21:83:02:a5:
bb:f9:81:83:73:a0:c0:71:32:0d:0d:d2:12:64:62:eb:85:bd:
87:a5:33:3d:b2:5d:5f:25:2e:1e:f8:cf:7c:38:98:31:e1:9c:
fa:f3:f0:9c:75:b0:ae:f2:95:c4:4f:df:52:6a:d8:ee:08:99:
0f:1d:de:f1:fe:e9:39:ba:94:7c:00:ec:18:91:9a:45:7f:72:
85:60:b0:41:f1:b1:53:bd:67:b7:3b:91:10:6f:80:e1:4f:25:
18:c0:2e:72:5a:4d:eb:9a:2b:bb:97:44:a4:2f:38:a0:9f:d2:
13:69:12:10:2a:46:d4:3a:8c:53:c4:38:56:2e:3b:b1:ea:6d:
4b:e5:51:9b
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzBFREYxMTAvBgNVBAUTKDhCNjQxOTY4NjkxMTdCOTlCODc5QjREQ0JBRjA0Mjkw
QkMxNjgxMEMwHhcNMjYwODI5MDM1MzM4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTkyNTdjMi03MGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtuLOB7B47cwLDGcgK+fzUIhzOhNMy9mVM73Y16TCORwXWK6HaYIz/tDen+Rj
62WDcE0Uv9Bu54Js/V63Wvh7cG7z8v1EtpIk787eEeEHOgYiIHvUTVMO9rRe1tI1
XupqTCk59/kj/8gf9QGPGh6B1p2s/p/P0q+m2Zkj53/yBkkTPbpY+s0yLxhmREAQ
5oYuHVej9SN7tmmwfTJfWmGgxf4pmG5fc6lIdS7LjYMlVOY4QxhZP0drxlCuX7Bg
cO4W4rJfToyrXY6ws480pAofoybnEWeFx1QVPMYeTD6hPCT0gfOZC2xeAADuIA9D
+ZXUDCUq/PovfxmDBTM0fK0jFQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFE/HKH9o
8pggrzbvUShytxXhwFxJMB8GA1UdIwQYMBaAFItkGWhpEXuZuHm03LrwQpC8FoEM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEVERi8zREUzOUU4MkNG
QUQxMUVFQUNGQTQyNjhDNEY5QUUwMi9pMlFaYUdrUmU1bTRlYlRjdXZCQ2tMd1dn
UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2kyUVphR2tSZTVtNGViVGN1dkJDa0x3V2dRdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzBFREYvM0RFMzlFODJDRkFEMTFFRUFDRkE0MjY4QzRGOUFFMDIvNTIzMzNFQjRD
RkFFMTFFRUI5MjhDRDI1QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ79uMA8EAgACMAkDBwAgAQ3w/sAwDQYJKoZIhvcNAQELBQADggEB
ABlUTh6nTJhSHZmGGZcHYSwAPfRXKxEC4hHiE0jPRy4zB7OqQ1ImfTLihslZzKL0
781tZ94LIiYspyhQ/9fc8zGSK/Btdtz3gfbmzajho7LHto9qcFGaU4YREPGGCv0y
8IpQd1mvrngZCGp+v/5y+fx4sAf1WDQkeuNsIYMCpbv5gYNzoMBxMg0N0hJkYuuF
vYelMz2yXV8lLh74z3w4mDHhnPrz8Jx1sK7ylcRP31Jq2O4ImQ8d3vH+6Tm6lHwA
7BiRmkV/coVgsEHxsVO9Z7c7kRBvgOFPJRjALnJaTeuaK7uXRKQvOKCf0hNpEhAq
RtQ6jFPEOFYuO7HqbUvlUZs=
-----END CERTIFICATE-----
Generated at Wed Sep 23 11:02:31 2026 by rpki-client