
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/1E1E9122565411EBA14ED510C4F9AE02.roa
File: 1E1E9122565411EBA14ED510C4F9AE02.roa (raw, json)
Hash identifier: +PXK5bAQHl5n5sjoaxb3xlyTYiUqPD5GYXTU3OO67/s=
Subject key identifier: 42:BA:2C:B0:FA:13:E4:D5:9D:F2:7A:66:4C:3E:F4:F4:28:AB:F6:D8
Certificate issuer: /CN=A91E12AD/serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546
Certificate serial: 0BE2
Authority key identifier: B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/1E1E9122565411EBA14ED510C4F9AE02.roa
Signing time: Wed 02 Sep 2026 19:39:14 +0000
ROA not before: Wed 02 Sep 2026 19:39:14 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 140866
IP address blocks: 103.141.84.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl
rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 18:51:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3042 (0xbe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E12AD, serialNumber=B38D2B8F4D5BB6A53E9B4192610481A5D8816546
Validity
Not Before: Sep 2 19:39:14 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a987b61-c2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6c:3b:fb:3a:8e:50:8f:78:cd:a8:11:53:4f:
3f:d4:9c:83:00:da:9a:31:c3:40:4d:43:b5:b3:8d:
75:ab:66:67:c8:a7:39:5a:5d:f4:c3:76:b4:67:b2:
3f:6e:a2:46:8f:37:76:ff:35:ac:b6:38:da:82:29:
b1:e2:63:8b:9c:24:53:ee:5b:6b:a2:0e:a5:54:72:
2f:1b:59:d1:9b:56:2b:d5:f8:59:2e:b8:fb:9a:56:
35:84:4b:d8:85:cf:b0:67:ba:75:bf:2a:29:c1:27:
e5:22:22:31:69:df:47:aa:2b:8b:e5:02:0c:ba:ad:
a5:f3:7b:84:e9:4f:25:f1:80:e1:17:65:4c:e8:0b:
c5:11:cd:ad:3d:ba:71:ce:74:6a:ca:ab:c0:96:09:
84:d6:08:59:8e:4a:3e:78:d0:47:83:1a:9d:05:62:
4f:96:55:82:46:f6:28:95:e3:1a:2d:dc:89:5b:3e:
59:a7:c3:d0:03:c5:93:dc:fc:67:c8:c1:81:90:30:
c5:0e:8d:57:6d:53:cf:52:57:ae:90:9d:f2:60:7f:
75:46:52:2c:e6:8e:bf:98:55:39:34:dc:e4:41:99:
cd:88:de:5d:f7:31:92:97:9b:fb:9d:9e:c6:d4:ec:
48:f8:c8:d3:b8:9c:e7:34:2d:d5:98:5c:b2:02:46:
58:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BA:2C:B0:FA:13:E4:D5:9D:F2:7A:66:4C:3E:F4:F4:28:AB:F6:D8
X509v3 Authority Key Identifier:
keyid:B3:8D:2B:8F:4D:5B:B6:A5:3E:9B:41:92:61:04:81:A5:D8:81:65:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/s40rj01btqU-m0GSYQSBpdiBZUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s40rj01btqU-m0GSYQSBpdiBZUY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E12AD/38DAA06C4B2111EAB7A00558C4F9AE02/1E1E9122565411EBA14ED510C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.141.84.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:4e:66:1f:68:43:0e:5f:db:e3:0e:3a:ac:6b:bb:40:db:93:
27:47:ae:c8:44:e9:74:a5:ea:1a:8a:72:ae:df:24:40:be:e8:
87:eb:af:73:5a:3b:8b:f4:56:e5:88:5f:61:20:10:15:db:84:
d2:47:36:52:9f:ab:63:48:fb:6c:6d:2e:bf:9e:6e:0a:9f:cc:
c2:69:5a:2a:eb:0a:61:37:36:6c:6c:db:7e:d9:76:06:7b:ef:
a2:6f:4a:b4:6a:45:52:41:b6:b4:da:4e:da:31:47:bd:17:c7:
4f:8d:33:84:f3:ef:ef:7f:63:08:30:a0:fb:0b:ea:1b:41:0a:
f9:0f:b5:b0:22:ba:e5:b3:54:f5:28:08:92:7f:d6:f9:67:8b:
46:49:77:46:f5:fb:53:a9:71:91:92:35:c7:5d:5a:34:5a:76:
42:fa:9f:66:86:dc:c8:92:51:d0:9e:a6:86:91:09:f1:7b:58:
1f:48:5f:ad:e0:04:ce:dd:34:80:b5:5e:d6:f3:d7:c9:64:60:
d0:49:36:93:28:83:84:bb:8e:38:57:4d:0d:a0:61:35:c4:e5:
a8:11:58:d1:5b:9a:f5:81:7c:c7:88:98:df:a7:e5:5c:7d:c7:
0f:b5:90:3a:d3:6b:aa:4c:71:87:f3:77:f6:86:50:19:13:0e:
bc:2e:37:eb
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICC+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTEyQUQxMTAvBgNVBAUTKEIzOEQyQjhGNEQ1QkI2QTUzRTlCNDE5MjYxMDQ4MUE1
RDg4MTY1NDYwHhcNMjYwOTAyMTkzOTE0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk4N2I2MS1jMmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA02w7+zqOUI94zagRU08/1JyDANqaMcNATUO1s411q2ZnyKc5Wl30w3a0Z7I/
bqJGjzd2/zWstjjagimx4mOLnCRT7ltrog6lVHIvG1nRm1Yr1fhZLrj7mlY1hEvY
hc+wZ7p1vyopwSflIiIxad9HqiuL5QIMuq2l83uE6U8l8YDhF2VM6AvFEc2tPbpx
znRqyqvAlgmE1ghZjko+eNBHgxqdBWJPllWCRvYoleMaLdyJWz5Zp8PQA8WT3Pxn
yMGBkDDFDo1XbVPPUleukJ3yYH91RlIs5o6/mFU5NNzkQZnNiN5d9zGSl5v7nZ7G
1OxI+MjTuJznNC3VmFyyAkZYgQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEK6LLD6
E+TVnfJ6Zkw+9PQoq/bYMB8GA1UdIwQYMBaAFLONK49NW7alPptBkmEEgaXYgWVG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTJBRC8zOERBQTA2QzRC
MjExMUVBQjdBMDA1NThDNEY5QUUwMi9zNDByajAxYnRxVS1tMEdTWVFTQnBkaUJa
VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3M0MHJqMDFidHFVLW0wR1NZUVNCcGRpQlpVWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTEyQUQvMzhEQUEwNkM0QjIxMTFFQUI3QTAwNTU4QzRGOUFFMDIvMUUxRTkxMjI1
NjU0MTFFQkExNEVENTEwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ41UMA0GCSqGSIb3DQEBCwUAA4IBAQCKTmYfaEMOX9vjDjqsa7tA
25MnR67IROl0peoainKu3yRAvuiH669zWjuL9FbliF9hIBAV24TSRzZSn6tjSPts
bS6/nm4Kn8zCaVoq6wphNzZsbNt+2XYGe++ib0q0akVSQba02k7aMUe9F8dPjTOE
8+/vf2MIMKD7C+obQQr5D7WwIrrls1T1KAiSf9b5Z4tGSXdG9ftTqXGRkjXHXVo0
WnZC+p9mhtzIklHQnqaGkQnxe1gfSF+t4ATO3TSAtV7W89fJZGDQSTaTKIOEu444
V00NoGE1xOWoEVjRW5r1gXzHiJjfp+VcfccPtZA602uqTHGH83f2hlAZEw68Ljfr
-----END CERTIFICATE-----
Generated at Wed Sep 23 12:49:38 2026 by rpki-client