
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/0A90C738CFEE11F09D36C783C4F9AE02.roa
File: 0A90C738CFEE11F09D36C783C4F9AE02.roa (raw, json)
Hash identifier: mUzueILU6DMYRwrPcEFRa5VxiMRJrbIkqI08KQIEvug=
Subject key identifier: 92:62:F9:B3:C5:F9:A0:D5:F6:E5:D2:DD:1E:CB:11:91:25:B2:49:12
Certificate issuer: /CN=A917DD85/serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5
Certificate serial: 01E6
Authority key identifier: 94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/0A90C738CFEE11F09D36C783C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:16:43 +0000
ROA not before: Wed 03 Dec 2025 02:16:13 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 7483
IP address blocks: 103.126.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl
rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:42:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 486 (0x1e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DD85, serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5
Validity
Not Before: Dec 3 02:16:13 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4666b-ffdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:07:c3:0c:02:59:da:37:dd:34:28:a0:39:e5:
99:44:7a:62:0e:43:cd:51:9e:49:a7:f5:2e:9b:05:
b3:68:fa:b4:1d:15:bd:d5:1a:c8:50:7b:c5:c4:89:
98:d7:3a:00:3c:fb:ad:e6:04:59:56:28:5d:5f:76:
36:bd:d5:ae:9d:b4:e1:22:27:52:b8:7d:b3:79:37:
a7:b1:f9:9b:60:09:95:65:36:ba:3c:c8:50:0a:d4:
34:70:53:4b:04:90:97:87:34:97:11:6e:4a:ca:98:
7c:aa:e1:ed:ed:86:45:0e:9a:f2:a1:74:9f:5b:46:
27:56:26:53:f2:c0:cb:87:18:6c:40:20:f1:7f:67:
d9:c3:5a:c8:9e:44:7e:77:a7:26:fd:b3:d0:e0:21:
c0:9a:1b:4d:dd:04:4b:76:c5:a1:ec:43:01:77:bb:
70:79:c8:ab:cb:98:e2:2e:b3:49:d9:d0:f1:47:e3:
79:86:b0:be:77:16:af:f8:4a:22:7f:28:12:39:4f:
02:38:f5:d2:38:5e:9c:a3:cb:16:02:9a:41:2c:8f:
e6:ed:0d:62:af:e4:70:f3:e4:51:4e:02:a4:b5:a2:
5b:9b:c8:f7:24:42:54:d7:ce:67:6d:95:89:e1:6f:
9e:c5:9f:46:38:af:9c:15:f4:8e:e3:c4:c6:0b:0f:
5f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:62:F9:B3:C5:F9:A0:D5:F6:E5:D2:DD:1E:CB:11:91:25:B2:49:12
X509v3 Authority Key Identifier:
keyid:94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/0A90C738CFEE11F09D36C783C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.126.142.0/23
Signature Algorithm: sha256WithRSAEncryption
d8:27:0c:1e:e2:7d:41:b6:ce:70:bf:23:a3:08:b3:10:cf:07:
65:15:bd:be:55:33:a8:ba:93:8a:39:bb:f4:aa:0d:af:98:fe:
ee:80:da:38:cf:44:41:d7:40:b8:8c:4b:63:19:0a:ef:ec:7e:
ae:22:a5:d7:32:13:77:41:53:0d:5a:02:ac:7b:be:16:58:d0:
f2:7c:87:e9:3a:54:24:ff:a0:34:f4:8d:e4:18:89:69:97:8e:
02:30:cb:ff:47:dd:32:68:80:a2:37:12:ec:83:a2:e1:df:81:
20:22:3f:8e:ef:2d:10:91:20:b4:ca:85:22:6e:d8:e2:32:1c:
8d:25:98:65:81:bf:58:1f:27:11:ec:8d:c1:d2:52:2c:64:d0:
6c:0a:5b:4d:e2:b1:ce:ea:3e:e1:c8:0f:40:fa:c4:50:ca:a2:
ee:88:9b:85:35:27:b2:40:15:cb:c0:61:34:81:55:bd:94:5e:
02:55:17:32:15:bc:5b:b3:4b:fe:3b:92:ee:b8:ee:a0:5b:06:
e6:e4:09:e2:a7:0e:29:f3:de:77:d4:bd:72:34:06:0e:4c:99:
54:1a:35:dd:32:05:4c:0f:10:8d:88:94:65:b9:42:92:a9:08:
30:b3:70:d6:d0:90:d5:55:57:3c:97:89:96:c0:b5:60:45:62:
10:b1:eb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:24 2026 by rpki-client