
$ rpki-client -vvf rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/1295ACC8511811F0BC16C641C4F9AE02.roa
File: 1295ACC8511811F0BC16C641C4F9AE02.roa (raw, json)
Hash identifier: sxrPqnbF6T43GAzl7GDJj3PzJSHlDC7K4T4ROo3CtKo=
Subject key identifier: FC:20:E8:8E:5F:44:8F:CC:54:39:BA:5F:67:38:72:04:C0:C9:50:5A
Certificate issuer: /CN=A91590E3/serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52
Certificate serial: 1992
Authority key identifier: BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/1295ACC8511811F0BC16C641C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:30:35 +0000
ROA not before: Fri 26 Sep 2025 16:45:42 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 139875
IP address blocks: 103.99.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl
rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:39:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6546 (0x1992)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91590E3, serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52
Validity
Not Before: Sep 26 16:45:42 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a45b9b-cff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cd:ef:7b:cd:1b:1d:cf:c1:71:3c:a1:d9:56:
88:d6:ad:b1:fe:c9:9e:8c:03:10:04:2c:11:0a:67:
ae:6c:1e:47:09:88:63:97:0e:5a:d0:dc:a8:2e:3b:
d8:b9:4f:91:56:14:d6:2e:f8:a5:6b:ee:4c:06:1d:
fb:ba:46:a2:5f:b9:4a:aa:ce:52:75:40:43:4a:74:
01:39:23:92:ed:82:78:32:f7:a3:c3:e4:e2:d4:2c:
36:12:9d:be:72:50:f1:88:35:21:78:8a:be:e9:46:
66:dd:d1:29:7b:bb:49:41:10:6f:06:70:cb:3b:be:
3b:1d:88:2b:89:e6:7b:63:b7:61:b3:c0:29:3d:24:
26:83:34:d9:6e:09:16:20:c9:40:44:6b:29:c4:c0:
24:05:2d:f9:7a:95:03:62:69:1f:59:17:bf:1a:f1:
c0:7a:fd:01:bc:ba:67:75:10:dc:45:cd:28:97:fb:
d2:fc:d7:34:29:64:0c:ac:6f:71:5d:d2:89:3c:72:
26:b2:1d:61:5c:60:20:27:aa:28:e3:24:54:dd:c1:
dd:d4:55:54:35:ca:70:74:b3:07:bc:19:ea:7d:5e:
1c:2a:1e:95:3d:85:08:5f:a9:22:13:c3:d8:0c:60:
f1:14:a7:0e:ac:70:e2:ed:f2:43:67:96:6e:ea:ac:
71:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:20:E8:8E:5F:44:8F:CC:54:39:BA:5F:67:38:72:04:C0:C9:50:5A
X509v3 Authority Key Identifier:
keyid:BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/1295ACC8511811F0BC16C641C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.99.248.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b8:17:7a:a6:73:32:8e:63:c6:e8:dd:27:44:09:09:8e:8b:
83:16:a4:d6:5d:2f:c2:0a:6e:73:28:c6:3a:a1:39:0b:45:22:
53:d2:67:99:80:4a:e8:a1:8f:10:f0:bf:1a:37:51:0d:2e:82:
cd:d6:40:34:0f:7a:5d:7c:01:e6:78:c7:8b:a8:b7:76:19:98:
08:38:1c:17:1b:36:27:86:2b:b1:38:78:36:6b:c7:9d:52:a7:
bb:2b:72:6c:d8:75:99:f9:73:e3:02:a4:42:e5:a1:37:39:39:
40:86:19:19:af:03:90:18:ef:56:a0:19:14:8e:0a:2f:c2:0c:
08:06:9f:e3:02:23:7c:16:9e:63:d5:fe:2b:a8:aa:55:21:f3:
e5:1b:9a:ac:59:e6:bd:9b:8f:cf:4e:91:d0:56:ed:b2:ff:2a:
f4:67:ef:36:13:5f:a7:ae:af:12:f2:6a:15:c7:77:29:a7:30:
fb:05:3d:06:3c:23:b2:d6:8b:25:a0:41:a8:47:df:15:ef:15:
c8:e3:c2:6c:6b:45:6c:23:b9:79:ee:8c:e6:5d:a9:b9:67:75:
a1:2a:d2:f3:1e:1e:76:6c:e7:a5:73:21:1e:d4:53:ff:90:9c:
ec:03:5f:32:66:4a:3a:11:41:12:22:fb:64:eb:b9:a6:c4:17:
01:7d:68:5e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICGZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTkwRTMxMTAvBgNVBAUTKEJCOTc2QTU5OEU1RUNCMDVFMzdGQUMwMEE1Qjc4ODhF
NTdGNTFDNTIwHhcNMjUwOTI2MTY0NTQyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWI5Yi1jZmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmM3ve80bHc/BcTyh2VaI1q2x/smejAMQBCwRCmeubB5HCYhjlw5a0NyoLjvY
uU+RVhTWLvila+5MBh37ukaiX7lKqs5SdUBDSnQBOSOS7YJ4Mvejw+Ti1Cw2Ep2+
clDxiDUheIq+6UZm3dEpe7tJQRBvBnDLO747HYgrieZ7Y7dhs8ApPSQmgzTZbgkW
IMlARGspxMAkBS35epUDYmkfWRe/GvHAev0BvLpndRDcRc0ol/vS/Nc0KWQMrG9x
XdKJPHImsh1hXGAgJ6oo4yRU3cHd1FVUNcpwdLMHvBnqfV4cKh6VPYUIX6kiE8PY
DGDxFKcOrHDi7fJDZ5Zu6qxxSQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPwg6I5f
RI/MVDm6X2c4cgTAyVBaMB8GA1UdIwQYMBaAFLuXalmOXssF43+sAKW3iI5X9RxS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTBFMy9EQTE4QjE4NDlB
NDkxMUU3OUE5RjMwMzBDNEY5QUUwMi91NWRxV1k1ZXl3WGpmNndBcGJlSWpsZjFI
RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3U1ZHFXWTVleXdYamY2d0FwYmVJamxmMUhGSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTkwRTMvREExOEIxODQ5QTQ5MTFFNzlBOUYzMDMwQzRGOUFFMDIvMTI5NUFDQzg1
MTE4MTFGMEJDMTZDNjQxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ2P4MA0GCSqGSIb3DQEBCwUAA4IBAQAHuBd6pnMyjmPG6N0nRAkJ
jouDFqTWXS/CCm5zKMY6oTkLRSJT0meZgErooY8Q8L8aN1ENLoLN1kA0D3pdfAHm
eMeLqLd2GZgIOBwXGzYnhiuxOHg2a8edUqe7K3Js2HWZ+XPjAqRC5aE3OTlAhhkZ
rwOQGO9WoBkUjgovwgwIBp/jAiN8Fp5j1f4rqKpVIfPlG5qsWea9m4/PTpHQVu2y
/yr0Z+82E1+nrq8S8moVx3cppzD7BT0GPCOy1osloEGoR98V7xXI48Jsa0VsI7l5
7ozmXam5Z3WhKtLzHh52bOelcyEe1FP/kJzsA18yZko6EUESIvtk67mmxBcBfWhe
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:32:44 2026 by rpki-client