
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/317095E0A28911ECBC355360C4F9AE02.roa
File: 317095E0A28911ECBC355360C4F9AE02.roa (raw, json)
Hash identifier: ebFlaRUmZcQJUtMsrS9rZ+TKHMBWxmuEuoPHS8qzaoo=
Subject key identifier: 51:B2:BE:92:80:02:E8:3F:FB:2B:C6:C7:DD:C0:06:02:9B:D6:18:AF
Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial: 081C
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/317095E0A28911ECBC355360C4F9AE02.roa
Signing time: Fri 20 Mar 2026 12:46:12 +0000
ROA not before: Fri 20 Mar 2026 12:46:12 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 6453
IP address blocks: 166.81.6.0/24 maxlen: 24
166.81.51.0/24 maxlen: 24
166.81.52.0/24 maxlen: 24
166.81.54.0/24 maxlen: 24
166.81.55.0/24 maxlen: 24
166.81.56.0/24 maxlen: 24
166.81.57.0/24 maxlen: 24
166.81.61.0/24 maxlen: 24
166.81.62.0/24 maxlen: 24
166.81.63.0/24 maxlen: 24
166.81.81.0/24 maxlen: 24
166.81.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2076 (0x81c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Validity
Not Before: Mar 20 12:46:12 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69bd4193-c16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ac:c9:09:a6:d1:29:90:83:1b:9c:5c:0c:0b:
8d:75:ef:b3:9f:52:58:48:35:d1:5d:07:77:2f:75:
ef:aa:bb:b1:06:56:27:ab:0d:56:66:89:e2:90:4a:
55:24:b3:fc:2a:86:6c:72:9d:d8:ad:cd:d5:39:b6:
0e:db:e3:b0:b2:27:02:dd:91:b0:be:5b:c3:94:85:
28:71:e6:7e:81:15:41:a8:f4:35:f4:0e:90:f1:c6:
b1:1d:76:46:d4:d5:0e:b2:2f:8a:65:ad:a5:7a:25:
27:7e:78:a8:e2:4d:a1:8b:56:62:29:b6:12:24:da:
b5:8a:2d:d5:b2:a5:d1:4e:d1:1f:fc:31:c1:97:6b:
bb:bc:f5:d3:c1:79:95:27:e0:e2:c0:5f:9a:36:68:
98:38:55:70:00:79:10:16:97:e1:dc:23:97:fb:87:
f5:a0:50:ad:6f:5c:55:74:41:cb:03:cd:85:b4:45:
35:35:d7:27:10:92:52:8c:a9:56:4f:79:82:ce:3e:
63:48:76:81:db:66:23:75:42:54:51:1b:cc:a3:8e:
1b:ff:f3:61:61:2f:b4:9e:fd:8a:2c:49:ef:cd:39:
bb:0b:0e:8c:d4:99:3e:64:ee:10:9a:d4:2c:3a:53:
1b:d9:8e:1a:ae:b5:47:9f:9a:42:ed:ab:3a:59:16:
72:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B2:BE:92:80:02:E8:3F:FB:2B:C6:C7:DD:C0:06:02:9B:D6:18:AF
X509v3 Authority Key Identifier:
keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/317095E0A28911ECBC355360C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
166.81.6.0/24
166.81.51.0-166.81.52.255
166.81.54.0-166.81.57.255
166.81.61.0-166.81.63.255
166.81.81.0/24
166.81.84.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:2f:93:ca:b8:77:3a:0f:bc:2a:f1:71:81:b5:74:ea:57:4d:
04:0b:bf:13:dd:0a:7a:53:ce:8f:a4:11:4e:56:fd:56:a3:60:
e2:17:90:ec:be:b4:5e:f8:f2:a9:3b:33:d6:f1:5a:62:8d:cb:
92:4c:24:94:3c:54:ea:70:12:f2:89:47:89:e5:94:17:94:5c:
7e:ba:d1:72:ff:26:85:b2:eb:e6:c0:3b:c0:20:34:7a:61:65:
f6:5c:f1:ee:96:41:27:8a:81:cf:f7:da:7b:83:87:57:08:c1:
24:ba:f7:f4:6f:65:a1:86:fb:f3:a4:ae:c3:b1:6d:d5:d1:23:
a6:b4:05:30:72:ff:05:90:d5:a8:ce:d6:2f:01:f8:29:1e:26:
c8:b6:6a:28:18:f5:bd:86:d2:96:18:98:11:a1:56:a4:db:17:
fc:0c:05:c0:af:ff:e3:7f:83:f2:b9:c0:8f:a7:55:b3:94:a1:
55:35:70:93:4a:49:c4:11:38:fa:7d:1f:78:df:d4:7e:82:da:
11:29:61:6e:70:23:72:43:ff:16:11:66:4d:13:8b:f9:86:63:
b3:0f:47:6c:4b:3d:7e:ec:5c:89:83:9a:ed:4c:38:86:6a:b3:
9c:46:05:fb:61:7d:08:08:e0:4e:c7:5c:5b:33:42:ce:36:7f:
0c:53:1e:99
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgICCBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REMzMUIxMTAvBgNVBAUTKDhCOEFENUNBMUMzRThCOENGNDY4QjVGNDk2QTkxQUJC
MEU0OENGQTgwHhcNMjYwMzIwMTI0NjEyWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWJkNDE5My1jMTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnKzJCabRKZCDG5xcDAuNde+zn1JYSDXRXQd3L3XvqruxBlYnqw1WZonikEpV
JLP8KoZscp3Yrc3VObYO2+OwsicC3ZGwvlvDlIUoceZ+gRVBqPQ19A6Q8caxHXZG
1NUOsi+KZa2leiUnfnio4k2hi1ZiKbYSJNq1ii3VsqXRTtEf/DHBl2u7vPXTwXmV
J+DiwF+aNmiYOFVwAHkQFpfh3COX+4f1oFCtb1xVdEHLA82FtEU1NdcnEJJSjKlW
T3mCzj5jSHaB22YjdUJUURvMo44b//NhYS+0nv2KLEnvzTm7Cw6M1Jk+ZO4QmtQs
OlMb2Y4arrVHn5pC7as6WRZy1QIDAQABo4ICljCCApIwHQYDVR0OBBYEFFGyvpKA
Aug/+yvGx93ABgKb1hivMB8GA1UdIwQYMBaAFIuK1cocPouM9Gi19JapGrsOSM+o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMxQi9EMEVDQ0Q0ODg5
M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0ejBhTFgwbHFrYXV3NUl6
NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2k0clZ5aHctaTR6MGFMWDBscWthdXc1SXo2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REMzMUIvRDBFQ0NENDg4OTNEMTFFQjkxNkRGMDIyQzRGOUFFMDIvMzE3MDk1RTBB
Mjg5MTFFQ0JDMzU1MzYwQzRGOUFFMDIucm9hMFUGCCsGAQUFBwEHAQH/BEYwRDBC
BAIAATA8AwQAplEGMAwDBACmUTMDBACmUTQwDAMEAaZRNgMEAaZRODAMAwQAplE9
AwQGplEAAwQAplFRAwQAplFUMA0GCSqGSIb3DQEBCwUAA4IBAQBLL5PKuHc6D7wq
8XGBtXTqV00EC78T3Qp6U86PpBFOVv1Wo2DiF5DsvrRe+PKpOzPW8VpijcuSTCSU
PFTqcBLyiUeJ5ZQXlFx+utFy/yaFsuvmwDvAIDR6YWX2XPHulkEnioHP99p7g4dX
CMEkuvf0b2WhhvvzpK7DsW3V0SOmtAUwcv8FkNWoztYvAfgpHibItmooGPW9htKW
GJgRoVak2xf8DAXAr//jf4PyucCPp1WzlKFVNXCTSknEETj6fR9439R+gtoRKWFu
cCNyQ/8WEWZNE4v5hmOzD0dsSz1+7FyJg5rtTDiGarOcRgX7YX0ICOBOx1xbM0LO
Nn8MUx6Z
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:49:50 2026 by rpki-client