
$ rpki-client -vvf rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/86BB53D0105611EB85F56114C4F9AE02.roa
File: 86BB53D0105611EB85F56114C4F9AE02.roa (raw, json)
Hash identifier: oW21vuwXHApb46NCVtWXlq5JlxGXz8d1dUclupA1alw=
Subject key identifier: 95:7C:88:C5:AA:2F:6F:BD:85:86:42:1C:8B:5E:2B:A5:0B:58:DF:D9
Certificate issuer: /CN=A913990E/serialNumber=F5D047490DE3A4EDCFDC37F6ECAB94938DA7C6F6
Certificate serial: 081F
Authority key identifier: F5:D0:47:49:0D:E3:A4:ED:CF:DC:37:F6:EC:AB:94:93:8D:A7:C6:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/86BB53D0105611EB85F56114C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:38:58 +0000
ROA not before: Sun 08 Jun 2025 21:28:58 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 136556
IP address blocks: 103.92.160.0/24 maxlen: 24
103.92.161.0/24 maxlen: 24
2001:df1:2500::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.crl
rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:28:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2079 (0x81f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913990E, serialNumber=F5D047490DE3A4EDCFDC37F6ECAB94938DA7C6F6
Validity
Not Before: Jun 8 21:28:58 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a40931-30c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:54:4d:d9:e2:00:e3:78:a8:f5:cf:5e:99:cd:
36:21:e7:fa:a4:47:9e:fd:6b:d2:e0:7d:21:3e:94:
e1:e7:1d:ba:6e:bd:18:46:0d:65:d4:8f:ea:38:73:
a5:e0:bf:c1:5d:77:f0:c7:41:9a:dc:11:9a:63:53:
2b:9e:c4:3e:df:ba:81:3f:54:2c:2b:f3:58:f4:db:
60:ec:41:bd:51:0a:ee:a5:29:a8:54:91:7e:8d:b4:
04:c2:9f:ec:ce:a0:6e:22:89:2a:fd:a6:20:5e:96:
b5:19:90:62:d5:e3:4e:97:93:9e:0c:3f:be:e4:9b:
8c:80:69:fa:75:d1:ed:d9:55:4b:34:14:3c:a1:9e:
d4:0d:60:c0:71:51:7b:eb:e2:48:68:37:4f:e9:fe:
bd:34:7f:90:98:e1:37:b4:44:5f:7a:1d:89:a8:88:
58:09:f8:14:f7:d7:45:b5:bc:29:76:08:c1:b7:ec:
32:58:bd:e8:a0:32:95:96:ab:a2:fd:9d:e8:92:9e:
92:0a:9e:83:4b:9e:06:49:40:82:7a:07:c0:25:a7:
2f:c0:b5:9b:81:c3:7c:91:c9:da:04:65:b3:82:08:
81:fc:98:b4:80:2b:b9:10:b5:1e:d3:d3:d0:52:9b:
cc:7c:dc:ee:53:23:d1:2a:33:94:a5:ee:14:63:81:
d8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7C:88:C5:AA:2F:6F:BD:85:86:42:1C:8B:5E:2B:A5:0B:58:DF:D9
X509v3 Authority Key Identifier:
keyid:F5:D0:47:49:0D:E3:A4:ED:CF:DC:37:F6:EC:AB:94:93:8D:A7:C6:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/86BB53D0105611EB85F56114C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.92.160.0/23
IPv6:
2001:df1:2500::/48
Signature Algorithm: sha256WithRSAEncryption
30:16:a3:bd:16:a1:6f:d0:1b:72:80:18:34:56:9b:68:c7:d4:
bd:30:ee:ea:2f:32:7a:bb:d1:ef:dd:e0:1e:6c:cc:13:34:66:
f9:31:45:b4:e4:2b:f5:dc:fb:6b:fb:0d:9b:fd:e3:04:f3:c0:
f0:d0:f7:28:02:71:34:7e:32:55:58:2b:56:a4:af:93:38:55:
93:1a:5d:06:a1:ca:c3:bb:4d:24:d4:07:bf:5a:0e:61:85:12:
d9:56:4d:0a:77:44:7d:90:5e:23:65:61:71:a5:a7:98:f8:97:
41:5d:dc:18:76:05:f5:25:38:71:6a:d3:dd:b9:7a:6b:66:47:
84:73:8f:fe:51:f6:9e:d6:2e:9e:6e:45:25:bf:cc:47:b8:b4:
e6:3a:ba:b8:22:8e:3c:42:3b:7a:79:d7:07:b2:95:79:be:7e:
4d:0e:8d:3d:06:07:cc:a1:0d:fc:df:aa:a0:5a:28:52:ae:8a:
c4:7b:96:05:fc:54:b6:4d:2e:40:30:a6:33:54:55:27:5e:0c:
a0:c6:0a:d3:fd:61:e9:cd:7f:d9:59:ac:2f:44:ac:76:77:1e:
6e:8e:75:64:0e:4c:b0:1a:37:1e:65:81:0c:1d:05:a7:bb:26:
e2:78:3b:c6:50:45:e9:46:85:c7:7f:54:cd:3c:c7:d9:70:05:
55:26:eb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:40:15 2026 by rpki-client