
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/4153181E1D4211ED99608059C4F9AE02.roa
File: 4153181E1D4211ED99608059C4F9AE02.roa (raw, json)
Hash identifier: jD+RZZ+awTn3b0dsK5nF4kAR3h29O9n6oxGPNxy3s7w=
Subject key identifier: 80:AD:D1:48:28:A8:64:AA:78:77:75:66:DA:97:18:3A:B4:B6:2E:7D
Certificate issuer: /CN=A91FE295/serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04
Certificate serial: 0423
Authority key identifier: 11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/4153181E1D4211ED99608059C4F9AE02.roa
Signing time: Mon 02 Mar 2026 05:01:08 +0000
ROA not before: Fri 16 Sep 2022 16:23:50 +0000
ROA not after: Mon 01 May 2028 00:00:00 +0000
asID: 132599
IP address blocks: 103.16.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl
rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1059 (0x423)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE295, serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04
Validity
Not Before: Sep 16 16:23:50 2022 GMT
Not After : May 1 00:00:00 2028 GMT
Subject: CN=69a51994-ee02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:60:5f:0c:fa:85:85:71:2a:53:9f:04:d2:5c:
ad:93:2b:2c:b0:ea:0e:11:eb:3c:d8:7a:e4:46:29:
6f:a1:2d:c0:a7:da:10:7d:58:78:73:7b:91:bd:30:
23:db:fd:df:17:e7:ef:52:09:70:84:7a:b9:1f:a6:
93:53:86:50:52:07:22:8e:4c:b1:3d:01:b1:ae:89:
e7:92:42:62:22:cf:67:65:55:32:ad:a7:10:84:9d:
60:39:77:b6:5d:0a:13:87:ca:30:eb:49:de:bf:0d:
f3:96:6a:03:b1:25:fd:32:8c:76:d5:92:1a:52:11:
09:55:cd:39:4f:f5:a2:15:f8:27:de:13:d0:ec:73:
dc:43:3d:82:4d:c6:5b:8e:0b:79:74:e1:7e:06:cf:
82:f2:fd:db:93:8f:27:63:90:52:a8:ba:b8:c9:bc:
5d:1b:b6:8d:63:3b:b0:30:73:9e:58:4a:7e:0e:3c:
91:7c:4e:33:1b:28:8e:ba:1e:96:a2:81:82:0f:f5:
1d:27:4b:f9:9a:a8:01:e9:03:73:7f:c8:1f:10:97:
de:46:03:3f:04:0c:c6:55:3b:15:b3:71:84:da:b0:
45:ea:6f:bd:3a:2b:52:67:75:20:e3:6c:f4:f9:e8:
82:43:2e:01:e7:9d:3d:c5:d9:23:b7:62:07:ec:e7:
64:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AD:D1:48:28:A8:64:AA:78:77:75:66:DA:97:18:3A:B4:B6:2E:7D
X509v3 Authority Key Identifier:
keyid:11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/4153181E1D4211ED99608059C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.16.60.0/22
Signature Algorithm: sha256WithRSAEncryption
45:2e:b7:54:c8:e4:de:61:a3:d3:ea:b0:c9:3c:a3:05:1e:40:
e8:be:a5:fd:17:e2:af:d8:3f:4b:ce:0a:1e:9f:3f:13:5f:5e:
4b:22:c5:39:b3:50:45:0e:29:5a:24:cd:12:06:bc:8e:68:10:
a8:94:a4:d9:34:bc:24:93:29:2a:4a:49:2d:10:3c:ce:44:c3:
ee:fe:45:82:3d:78:b1:03:c5:40:dd:3d:42:b9:d6:74:ea:98:
2a:a6:d9:bf:28:f1:06:b5:15:6a:47:94:74:da:17:ae:e7:ff:
a4:2c:df:a7:b4:8a:c6:ea:b1:73:55:2e:3e:03:f1:08:55:70:
1f:53:35:92:06:1b:64:bc:9f:90:a4:9f:20:0c:a3:9e:12:90:
f9:52:70:77:57:3a:85:42:0d:7c:52:4f:d2:42:a1:24:be:a2:
bd:ea:2f:fa:4b:5f:a8:6a:b1:ec:36:9a:12:51:23:38:15:b7:
34:1c:db:cb:a3:27:10:fe:a9:01:b7:e0:c3:72:47:7f:f8:90:
44:a7:4c:61:48:c2:65:6f:a7:d7:3b:ab:6e:5d:30:85:4f:4c:
fc:eb:8f:39:fc:d2:5e:59:d6:33:cf:56:d8:04:64:27:d4:e9:
dc:dd:ab:57:9e:8e:74:f6:2a:91:9e:10:bd:25:2c:63:d1:ca:
1f:10:41:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:53:48 2026 by rpki-client