
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/3A4918D41DED11F18280100E163D8C67.roa
File: 3A4918D41DED11F18280100E163D8C67.roa (raw, json)
Hash identifier: Juhjiq7zpIGJ2ca6uyWvgKrk4pkgUf8b9Px9rrY5jmY=
Subject key identifier: AD:4A:85:35:A5:68:D4:92:95:08:9E:4D:06:4D:29:DA:4B:BD:84:CB
Certificate issuer: /CN=A91C91A6/serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7
Certificate serial: 08C2
Authority key identifier: CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/3A4918D41DED11F18280100E163D8C67.roa
Signing time: Thu 12 Mar 2026 08:26:55 +0000
ROA not before: Thu 12 Mar 2026 08:26:55 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 140980
IP address blocks: 103.154.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl
rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2242 (0x8c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C91A6, serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7
Validity
Not Before: Mar 12 08:26:55 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69b278cf-a9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b5:be:4b:6e:6f:fd:af:48:31:e4:00:e7:fc:
2f:7b:07:2a:45:55:ac:1f:c2:3b:70:93:e2:d4:c7:
30:ba:d5:69:b7:e1:66:a1:13:f9:04:3d:33:69:db:
e9:ed:f7:f5:be:93:a7:1c:af:7b:1b:6a:14:af:21:
d3:6e:b4:85:68:85:21:d7:ea:1c:11:82:04:e0:51:
1a:9a:ad:9b:11:0d:dd:bf:b8:f4:77:ca:79:ed:c9:
0a:50:61:7b:54:29:88:0d:ac:21:0a:f5:d9:e8:40:
d5:32:ec:ce:99:08:25:99:15:2b:5d:ec:0a:f2:89:
32:15:ac:ba:1b:01:2b:1b:1f:c0:2e:c4:cc:48:2f:
f7:25:a4:70:cf:ac:ca:e1:9b:ef:c8:9c:f8:0e:fc:
d6:a4:3a:c0:ba:c8:bd:b2:67:f7:70:e8:d3:e5:4c:
7a:1a:34:fa:a7:35:7d:7e:65:e9:0a:96:a9:a4:b6:
4a:ec:68:dc:2b:ea:1c:38:c8:f8:f9:73:2e:36:71:
02:29:d4:34:30:7f:06:23:ef:c8:48:7a:ca:29:41:
bb:15:9c:5c:34:57:96:ad:63:05:f9:c3:10:9f:fd:
5c:d9:64:08:80:40:29:6a:52:f5:1d:d3:89:8c:68:
d4:38:e8:be:2d:f8:8f:3c:f1:6f:fc:89:45:47:cc:
a0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4A:85:35:A5:68:D4:92:95:08:9E:4D:06:4D:29:DA:4B:BD:84:CB
X509v3 Authority Key Identifier:
keyid:CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/3A4918D41DED11F18280100E163D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.154.16.0/24
Signature Algorithm: sha256WithRSAEncryption
76:a8:8f:33:ad:79:41:96:62:c2:78:3f:05:5c:48:b1:40:c4:
fa:88:78:dd:a7:da:ae:f3:c1:0a:df:ba:19:c0:97:1b:37:65:
cf:e3:b4:0e:f4:86:1e:3c:9b:d1:3f:ae:98:40:24:68:85:ec:
97:fc:eb:1a:d4:52:ba:69:9c:93:c2:28:d8:3b:f7:0b:6b:5f:
28:bb:ce:8a:96:81:0b:86:0b:db:34:4a:a8:23:16:96:62:a6:
89:d7:36:70:c2:07:0a:5a:ed:ae:16:69:11:fe:71:39:3c:36:
07:3d:81:99:ef:40:28:9e:a4:06:9b:c8:fe:4b:af:02:72:61:
51:e0:d3:97:e6:33:88:79:1e:05:11:a8:db:31:57:c5:c6:bf:
cc:2d:02:26:ce:c8:80:60:20:b2:01:65:20:36:44:33:1b:32:
ce:dd:16:7a:53:53:45:71:10:62:3e:52:3e:a7:9f:55:a5:ff:
03:40:e3:53:9a:31:bc:b7:d2:c7:10:31:5c:c5:a3:2e:a8:15:
8b:35:eb:99:90:de:8f:52:78:07:a3:cf:18:51:d3:47:ff:94:
87:fe:4c:de:ac:bb:40:82:b8:e4:e3:ff:6e:2b:af:a5:a8:e0:
c6:0a:77:bf:de:c9:dc:7a:d5:f1:d8:aa:fe:89:30:6e:aa:a4:
09:5a:f2:c4
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzkxQTYxMTAvBgNVBAUTKENDNUQ1Q0UwREMxODIxMDkwQ0JDNzUzOEQ3QkI3MTIz
NzE5MDgyRTcwHhcNMjYwMzEyMDgyNjU1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWIyNzhjZi1hOWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwbW+S25v/a9IMeQA5/wvewcqRVWsH8I7cJPi1McwutVpt+FmoRP5BD0zadvp
7ff1vpOnHK97G2oUryHTbrSFaIUh1+ocEYIE4FEamq2bEQ3dv7j0d8p57ckKUGF7
VCmIDawhCvXZ6EDVMuzOmQglmRUrXewK8okyFay6GwErGx/ALsTMSC/3JaRwz6zK
4ZvvyJz4DvzWpDrAusi9smf3cOjT5Ux6GjT6pzV9fmXpCpappLZK7GjcK+ocOMj4
+XMuNnECKdQ0MH8GI+/ISHrKKUG7FZxcNFeWrWMF+cMQn/1c2WQIgEApalL1HdOJ
jGjUOOi+LfiPPPFv/IlFR8yg3QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFK1KhTWl
aNSSlQieTQZNKdpLvYTLMB8GA1UdIwQYMBaAFMxdXODcGCEJDLx1ONe7cSNxkILn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTFBNi9CQTRDQ0UwRUQ3
MkIxMUVBOEMxQkJENERDNEY5QUUwMi96RjFjNE53WUlRa012SFU0MTd0eEkzR1Fn
dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pGMWM0TndZSVFrTXZIVTQxN3R4STNHUWd1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzkxQTYvQkE0Q0NFMEVENzJCMTFFQThDMUJCRDREQzRGOUFFMDIvM0E0OTE4RDQx
REVEMTFGMTgyODAxMDBFMTYzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ5oQMA0GCSqGSIb3DQEBCwUAA4IBAQB2qI8zrXlBlmLCeD8FXEix
QMT6iHjdp9qu88EK37oZwJcbN2XP47QO9IYePJvRP66YQCRoheyX/Osa1FK6aZyT
wijYO/cLa18ou86KloELhgvbNEqoIxaWYqaJ1zZwwgcKWu2uFmkR/nE5PDYHPYGZ
70AonqQGm8j+S68CcmFR4NOX5jOIeR4FEajbMVfFxr/MLQImzsiAYCCyAWUgNkQz
GzLO3RZ6U1NFcRBiPlI+p59Vpf8DQONTmjG8t9LHEDFcxaMuqBWLNeuZkN6PUngH
o88YUdNH/5SH/kzerLtAgrjk4/9uK6+lqODGCne/3sncetXx2Kr+iTBuqqQJWvLE
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:40:25 2026 by rpki-client