
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/5B92665E9ADD11ECA5401423C4F9AE02.roa
File: 5B92665E9ADD11ECA5401423C4F9AE02.roa (raw, json)
Hash identifier: Nb29Wu1CDYoesjc8FMHKjysC8EpiLHTgbPxZYxl0RNM=
Subject key identifier: B0:A5:D8:C6:09:2C:C9:39:CF:71:D9:1C:76:08:6E:D6:69:E6:68:EC
Certificate issuer: /CN=A91A3A64/serialNumber=907BB262B571623E34B2E20C60A718C1739CC3BD
Certificate serial: 0437
Authority key identifier: 90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/5B92665E9ADD11ECA5401423C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:23:48 +0000
ROA not before: Wed 07 Jan 2026 00:19:43 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 135885
IP address blocks: 103.229.1.0/24 maxlen: 24
2001:df4:5800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.crl
rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:25:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1079 (0x437)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3A64, serialNumber=907BB262B571623E34B2E20C60A718C1739CC3BD
Validity
Not Before: Jan 7 00:19:43 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a44bf4-00d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:de:bf:85:93:69:b0:45:73:8f:f4:d3:da:60:
d8:50:5e:91:8e:84:d2:2c:8d:87:4c:b7:11:6c:dd:
a3:52:ce:42:25:3a:b7:6c:da:3e:87:7d:32:47:e4:
7d:23:4d:57:2e:be:81:70:36:48:fa:57:50:38:0e:
74:8a:20:a5:a4:c5:22:4d:a0:66:dd:64:e6:9e:49:
87:51:dd:d0:69:5a:84:d2:31:a3:9b:3e:c0:c8:06:
29:04:75:18:37:1d:97:30:23:53:83:4c:f5:fd:e6:
f2:c1:a8:9a:51:34:d0:91:a7:0b:78:a5:6d:3f:e0:
6c:21:28:2b:83:cb:57:7b:73:46:7d:89:8b:c5:1c:
a6:33:5a:38:20:17:9b:61:b1:d6:28:7f:89:f8:b2:
1c:bc:d3:f1:20:f5:2c:6d:6f:6a:cb:4d:eb:c9:60:
d5:6d:87:ac:6a:18:e4:46:c7:74:19:d4:44:ac:b2:
33:1d:b2:65:79:ab:5f:fa:0f:63:3c:29:45:d3:79:
5b:1f:41:01:97:78:45:10:d0:b6:76:05:b2:12:96:
53:ee:8f:c9:4b:02:5c:7f:9a:09:3b:0d:35:7a:47:
c7:64:ee:2c:c2:c2:82:41:2b:c7:2c:12:96:ae:7b:
a8:c1:77:24:ba:ab:33:43:8a:12:cc:f9:b2:5c:8a:
19:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A5:D8:C6:09:2C:C9:39:CF:71:D9:1C:76:08:6E:D6:69:E6:68:EC
X509v3 Authority Key Identifier:
keyid:90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/5B92665E9ADD11ECA5401423C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.229.1.0/24
IPv6:
2001:df4:5800::/48
Signature Algorithm: sha256WithRSAEncryption
b4:a8:f3:9b:0e:ab:62:d6:d6:3f:78:36:5c:ad:90:a7:5a:87:
1c:1c:fb:43:78:f5:de:71:ee:1c:b8:49:30:33:3a:8c:68:6f:
75:7f:15:ba:d4:3c:56:9d:3e:c7:35:0b:ea:bd:01:c3:ad:76:
8c:35:f6:74:58:cc:e3:12:0c:ca:cc:a8:a9:a7:14:3f:c9:16:
29:f8:87:db:7c:b5:93:cd:54:cd:a4:1b:fa:e7:44:9a:84:78:
f6:55:c7:44:04:dc:7f:3a:f8:7a:7e:90:eb:8c:6f:63:ae:31:
16:e8:ec:59:f3:3d:e6:1d:35:08:d5:10:22:77:3b:94:a5:90:
55:32:e3:ff:45:27:dc:f2:f0:93:f2:f7:9a:37:42:43:08:a7:
5f:0f:7b:94:b9:8d:09:a4:7a:24:14:1c:a3:92:61:f3:58:39:
f8:05:9c:26:a3:32:cf:86:96:cd:22:3c:8f:11:b3:4d:e4:3c:
cc:d5:f1:36:66:c5:42:4c:25:4f:37:e8:2c:01:b0:bb:b1:14:
99:c9:fd:f1:c6:30:60:51:0a:83:1b:d9:85:c5:b7:bb:72:27:
94:b7:9c:5e:a9:1a:d8:30:9a:d8:c1:bd:54:15:18:0a:17:1b:
db:29:65:b7:8e:b8:8e:0c:55:01:cd:6c:2e:d7:95:f5:39:b9:
3d:21:6d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:34 2026 by rpki-client