
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/B70BB8BA0BEE11F1B88CA9ED363D8C67.roa
File: B70BB8BA0BEE11F1B88CA9ED363D8C67.roa (raw, json)
Hash identifier: dBsqI19hfwmYXGvKmFzCNL+IyQ4o6aa6317X42nca3M=
Subject key identifier: B3:28:9E:40:96:5A:7E:13:31:8C:3B:7C:A9:C3:9B:D2:81:0E:02:BF
Certificate issuer: /CN=A91A5308/serialNumber=7B59055212849105AD6F39E5881D842E707439AF
Certificate serial: 0D5A
Authority key identifier: 7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/B70BB8BA0BEE11F1B88CA9ED363D8C67.roa
Signing time: Tue 17 Feb 2026 10:52:13 +0000
ROA not before: Tue 17 Feb 2026 10:52:13 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 138638
IP address blocks: 103.135.88.0/24 maxlen: 24
103.135.89.0/24 maxlen: 24
2404:7840::/32 maxlen: 32
2404:7840::/48 maxlen: 48
2404:7840:1::/48 maxlen: 48
2404:7840:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl
rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:11:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3418 (0xd5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5308, serialNumber=7B59055212849105AD6F39E5881D842E707439AF
Validity
Not Before: Feb 17 10:52:13 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=6994485c-9713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:79:fd:0f:04:73:7a:db:4e:46:1c:81:7e:
5e:68:a1:52:a7:30:83:89:89:e9:47:34:9b:7c:09:
e6:a4:74:7d:2a:5d:63:ca:68:55:14:60:76:a8:20:
2e:91:fc:8c:f6:21:ee:3f:81:0c:f7:67:94:d6:21:
93:01:e4:c4:26:02:6e:e0:74:0e:7f:21:43:bf:5f:
ee:93:ba:7e:b9:5b:94:c7:67:da:a8:04:5f:d3:4c:
7d:c9:58:b1:ba:66:66:83:64:e3:b6:05:12:71:e4:
ab:1c:3f:28:37:a2:3b:da:76:12:b7:76:6b:61:c0:
57:00:1f:a1:d5:0e:ab:6d:fb:40:9b:03:b6:de:21:
a3:80:6c:d6:c4:3b:45:1e:25:56:36:d3:3b:24:8f:
f1:d1:fd:d1:5d:cd:0a:a9:d6:d7:bd:21:8a:19:55:
59:3b:c6:ea:0e:75:db:cd:23:12:c8:82:44:2f:b1:
39:2c:d8:f5:5e:e0:c7:11:6b:0c:e9:6a:53:44:be:
d0:05:1d:b1:e8:07:52:00:5c:f3:4d:80:85:f1:03:
e1:99:60:b5:e1:da:78:8e:a5:71:f9:29:0e:29:24:
3a:03:6c:dd:5e:25:25:c6:bc:ee:e3:f0:b3:28:44:
c3:8b:bc:ab:35:0c:0a:0b:e5:03:d8:10:40:0d:14:
8c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:28:9E:40:96:5A:7E:13:31:8C:3B:7C:A9:C3:9B:D2:81:0E:02:BF
X509v3 Authority Key Identifier:
keyid:7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/B70BB8BA0BEE11F1B88CA9ED363D8C67.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.88.0/23
IPv6:
2404:7840::/32
Signature Algorithm: sha256WithRSAEncryption
aa:e1:9a:c5:14:c0:f8:e1:f8:bc:b2:68:59:ed:ca:6d:dc:58:
1e:73:7f:5d:cc:f1:b6:dc:d6:fc:c3:62:67:a5:9b:48:57:7b:
25:45:62:ca:75:3e:5c:41:52:f1:47:02:c2:4e:b3:5b:05:67:
33:cc:82:e1:51:54:56:3c:ca:f7:d5:f9:6b:b5:57:c6:15:38:
bc:64:19:f6:90:6c:14:ed:3c:c5:c2:9b:9b:f5:87:05:27:78:
5b:7b:26:d6:3c:b9:86:8f:70:05:30:c6:fc:5b:14:29:eb:a0:
9d:ce:25:6b:79:17:c5:28:31:63:eb:4a:93:3d:6f:60:5a:bb:
b4:0d:e3:fb:58:c8:13:a7:74:a8:ae:1e:3b:43:5a:4f:1a:ec:
1f:55:4b:56:c5:4d:17:cb:55:4a:62:ef:e1:23:22:ce:4b:8d:
53:20:41:34:a3:25:08:08:0b:9c:ed:04:62:38:b5:ce:0c:57:
d5:9c:d6:ff:72:3c:15:a2:43:7f:65:aa:4c:0f:b5:59:1a:b6:
a6:3b:2f:13:d6:40:6d:ee:f1:6d:15:ba:1e:a1:f3:79:c8:3a:
0f:14:14:fe:73:70:92:41:cb:9b:1e:91:91:36:c6:b2:2e:83:
15:8b:8f:3c:76:c5:69:8b:83:85:4b:4e:70:1e:9a:86:ec:c4:
2a:61:c5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:05:09 2026 by rpki-client