
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/E200A7ECBBE311F18C1B74F96A11F970.roa
File: E200A7ECBBE311F18C1B74F96A11F970.roa (raw, json)
Hash identifier: IGmTzUC34d5O2lEjDD4aUAEBwYGk2cc6lOoh+DSQlGw=
Subject key identifier: 40:46:03:C2:AC:88:FC:00:BD:3E:88:49:FA:69:98:DB:55:6D:1C:EE
Certificate issuer: /CN=A91C17A9/serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6
Certificate serial: 0654
Authority key identifier: 53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/E200A7ECBBE311F18C1B74F96A11F970.roa
Signing time: Tue 29 Sep 2026 08:58:06 +0000
ROA not before: Tue 29 Sep 2026 08:58:06 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 139088
IP address blocks: 103.167.162.0/24 maxlen: 24
103.167.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl
rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Oct 2026 23:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1620 (0x654)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C17A9, serialNumber=5394E57D285777FD751428D15CB0FB2FC592C7A6
Validity
Not Before: Sep 29 08:58:06 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6abb7d9d-b319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:db:cf:ec:6f:92:c1:30:3d:b9:58:3d:93:
c9:0a:24:0c:f6:79:eb:1f:73:a3:09:59:e1:de:3f:
f5:76:8c:1d:b0:22:41:85:53:ad:38:45:b7:79:31:
d3:34:70:37:47:21:41:0d:41:79:36:bf:46:7e:7a:
a2:3c:70:a3:4c:ea:47:45:94:a3:f0:27:a4:97:49:
14:0b:48:bd:95:e5:cc:66:15:17:c2:ec:4f:f3:a0:
b8:ee:cd:27:a9:3a:41:eb:2e:27:16:f7:30:eb:55:
ef:81:8e:b5:f7:f0:1c:1e:d3:aa:b5:d8:25:f0:fb:
60:e3:a5:48:50:36:f1:0a:3c:99:23:ad:dc:4b:2f:
31:25:89:3a:15:d5:dd:59:01:d5:f4:e0:4a:8f:6f:
f8:b6:0f:dc:ee:7f:32:9a:e8:36:00:bd:84:6a:d9:
22:b5:1b:70:15:10:cd:1c:b4:37:e4:f5:15:7b:5a:
53:1d:5a:d6:5c:d9:77:c9:78:72:53:9e:19:f8:6c:
9a:25:5e:af:e4:0b:0d:f6:2c:85:0d:aa:db:55:7d:
99:03:a6:8a:55:0f:ec:c7:a8:8d:04:7f:39:36:c9:
ba:09:41:0a:91:db:ea:aa:1e:14:54:e5:bc:49:da:
47:d3:cc:99:fc:c9:ed:2b:9e:59:d9:67:73:4d:db:
96:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:46:03:C2:AC:88:FC:00:BD:3E:88:49:FA:69:98:DB:55:6D:1C:EE
X509v3 Authority Key Identifier:
keyid:53:94:E5:7D:28:57:77:FD:75:14:28:D1:5C:B0:FB:2F:C5:92:C7:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/U5TlfShXd_11FCjRXLD7L8WSx6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5TlfShXd_11FCjRXLD7L8WSx6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C17A9/5F89F6ECFB3111EB8FBFA559C4F9AE02/E200A7ECBBE311F18C1B74F96A11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.167.162.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:d2:e1:da:d1:ab:de:48:18:22:16:87:a4:4e:69:c2:63:39:
9b:27:80:b6:d0:83:a9:78:3a:9b:6e:38:d2:9a:af:99:67:92:
5e:15:6f:20:ef:f9:23:0d:f0:03:f4:27:80:73:1e:eb:85:9f:
1a:cf:06:b7:ec:cf:ca:5d:a8:12:a9:13:a1:09:66:4a:50:c9:
9c:af:ff:0e:9a:08:cf:01:d0:8d:79:da:1e:58:a0:48:59:d3:
3c:0e:af:65:94:1a:94:5d:45:60:c9:3a:46:df:92:51:37:1a:
c8:e2:d1:93:4b:1b:e3:cd:e1:57:4b:3e:df:f8:c6:47:2d:bd:
f4:49:bf:9c:35:03:44:34:00:c0:0a:a2:74:39:86:27:f9:6a:
d0:ca:6d:3f:c2:bf:9a:0f:a9:78:e8:94:c7:25:e1:b4:e7:fe:
54:31:0c:e1:4a:4f:5b:c1:e0:e9:4d:9e:37:ba:1e:b5:9b:9f:
59:8c:98:1d:39:91:d6:63:46:6e:ad:3f:31:52:c6:0c:69:90:
1f:3e:62:de:fe:1f:d7:6d:38:bc:e2:84:fd:ff:19:a8:45:c8:
7b:f8:4c:ff:a1:7d:9c:a2:cf:ed:d0:d8:1a:09:84:7a:68:8d:
16:bf:ae:a7:a6:d5:5e:79:08:cf:c7:cb:4e:77:22:7f:51:2f:
33:9f:6d:c9
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzE3QTkxMTAvBgNVBAUTKDUzOTRFNTdEMjg1Nzc3RkQ3NTE0MjhEMTVDQjBGQjJG
QzU5MkM3QTYwHhcNMjYwOTI5MDg1ODA2WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJiN2Q5ZC1iMzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsNrbz+xvksEwPblYPZPJCiQM9nnrH3OjCVnh3j/1dowdsCJBhVOtOEW3eTHT
NHA3RyFBDUF5Nr9GfnqiPHCjTOpHRZSj8Cekl0kUC0i9leXMZhUXwuxP86C47s0n
qTpB6y4nFvcw61XvgY619/AcHtOqtdgl8Ptg46VIUDbxCjyZI63cSy8xJYk6FdXd
WQHV9OBKj2/4tg/c7n8ymug2AL2EatkitRtwFRDNHLQ35PUVe1pTHVrWXNl3yXhy
U54Z+GyaJV6v5AsN9iyFDarbVX2ZA6aKVQ/sx6iNBH85Nsm6CUEKkdvqqh4UVOW8
SdpH08yZ/MntK55Z2WdzTduW0wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEBGA8Ks
iPwAvT6ISfppmNtVbRzuMB8GA1UdIwQYMBaAFFOU5X0oV3f9dRQo0Vyw+y/Fksem
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTdBOS81Rjg5RjZFQ0ZC
MzExMUVCOEZCRkE1NTlDNEY5QUUwMi9VNVRsZlNoWGRfMTFGQ2pSWExEN0w4V1N4
NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1U1VGxmU2hYZF8xMUZDalJYTEQ3TDhXU3g2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzE3QTkvNUY4OUY2RUNGQjMxMTFFQjhGQkZBNTU5QzRGOUFFMDIvRTIwMEE3RUNC
QkUzMTFGMThDMUI3NEY5NkExMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ6eiMA0GCSqGSIb3DQEBCwUAA4IBAQBs0uHa0aveSBgiFoekTmnC
YzmbJ4C20IOpeDqbbjjSmq+ZZ5JeFW8g7/kjDfAD9CeAcx7rhZ8azwa37M/KXagS
qROhCWZKUMmcr/8OmgjPAdCNedoeWKBIWdM8Dq9llBqUXUVgyTpG35JRNxrI4tGT
SxvjzeFXSz7f+MZHLb30Sb+cNQNENADACqJ0OYYn+WrQym0/wr+aD6l46JTHJeG0
5/5UMQzhSk9bweDpTZ43uh61m59ZjJgdOZHWY0ZurT8xUsYMaZAfPmLe/h/XbTi8
4oT9/xmoRch7+Ez/oX2cos/t0NgaCYR6aI0Wv66nptVeeQjPx8tOdyJ/US8zn23J
-----END CERTIFICATE-----
Generated at Fri Oct 2 11:18:18 2026 by rpki-client