
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/C9A309F60BEE11F1B8168AEE363D8C67.roa
File: C9A309F60BEE11F1B8168AEE363D8C67.roa (raw, json)
Hash identifier: ZpJY/Nt19F5CZrT31MnkXYm8Etz/avF5TuuZz15e1so=
Subject key identifier: 8B:8D:EE:E5:FD:D2:F4:CC:26:82:5D:7C:37:88:08:0B:4D:1B:82:62
Certificate issuer: /CN=A91A5308/serialNumber=7B59055212849105AD6F39E5881D842E707439AF
Certificate serial: 0D5C
Authority key identifier: 7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/C9A309F60BEE11F1B8168AEE363D8C67.roa
Signing time: Tue 17 Feb 2026 10:52:44 +0000
ROA not before: Tue 17 Feb 2026 10:52:44 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 135341
IP address blocks: 103.135.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl
rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:11:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3420 (0xd5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5308, serialNumber=7B59055212849105AD6F39E5881D842E707439AF
Validity
Not Before: Feb 17 10:52:44 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=6994487c-2caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:05:0c:93:b3:b7:1f:b9:f6:cd:ce:da:22:f9:
98:1e:bd:a4:44:7c:54:12:23:2a:66:ea:1c:c3:59:
7e:4f:1e:46:92:f1:df:9b:67:ec:83:a8:ba:81:0f:
ba:4b:f7:ff:78:32:1b:00:db:0b:1b:ea:c2:63:5e:
9a:9a:65:29:b9:f9:51:d1:26:44:f3:92:47:56:37:
38:cf:6c:e5:12:a7:01:d2:ae:a7:45:38:61:46:0b:
b1:ab:5b:ab:19:a3:7e:a7:1e:e2:bf:9d:2d:9f:eb:
0a:30:49:c5:9e:3f:9b:30:be:9b:99:f5:22:60:ff:
76:4d:90:1d:f7:3e:9d:fd:07:69:9e:92:ec:72:50:
46:ab:80:3e:c0:c3:85:50:40:76:72:f2:81:ee:14:
be:c0:cd:f5:0f:b4:14:53:4b:71:b0:cf:0e:b6:8a:
74:d6:01:7d:8d:53:21:3c:20:3d:af:15:15:7f:b2:
03:3c:22:69:aa:82:67:68:1d:e1:70:6f:5f:c9:98:
5d:82:84:9b:81:fa:69:96:19:bb:4a:fe:47:9c:a2:
27:69:0d:64:51:f3:a7:72:4b:e6:26:8b:5c:cb:c1:
ed:62:29:f6:c3:a5:c5:10:d3:66:d1:5f:f7:6e:46:
99:0d:c7:ea:5e:aa:62:26:07:46:2d:43:bb:46:e3:
7b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8D:EE:E5:FD:D2:F4:CC:26:82:5D:7C:37:88:08:0B:4D:1B:82:62
X509v3 Authority Key Identifier:
keyid:7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/C9A309F60BEE11F1B8168AEE363D8C67.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.90.0/24
Signature Algorithm: sha256WithRSAEncryption
06:8b:da:b1:5b:06:05:a5:a8:d1:9f:f0:ec:93:f6:65:0b:c8:
37:a4:89:10:bf:bd:14:6c:a8:dd:de:82:a9:d7:c0:17:f2:e4:
9a:2f:34:02:a2:66:7a:97:ac:ef:2b:4b:08:0d:42:22:4e:cc:
50:16:59:e9:17:2c:bb:2a:86:bd:55:0a:6e:10:b0:3d:36:71:
27:05:53:4e:c6:1b:70:8c:50:b7:c1:cc:59:a2:dd:b9:53:16:
83:cf:91:d7:5f:b9:c6:86:2b:1e:7b:a3:f2:e1:67:09:1c:51:
14:b6:85:31:4c:6d:48:d4:18:d4:2a:30:63:fa:88:14:fe:f1:
2c:75:1b:88:43:79:ec:66:e2:29:a1:80:41:be:7d:61:95:87:
8e:aa:92:6f:a6:79:be:ac:b6:00:a9:fb:c1:57:b2:08:fe:68:
02:e8:0e:d7:ec:47:84:4f:2c:8b:c5:17:8d:64:4d:e2:e8:95:
10:38:74:f7:b7:61:4b:53:75:29:06:1c:b2:05:e5:e5:3d:14:
d5:3d:e7:9b:42:19:7b:70:3f:c8:37:73:2a:02:6f:b5:23:85:
44:6b:02:25:e2:b6:68:7a:f8:ba:67:39:73:4e:e8:29:80:82:
da:74:73:1d:00:1e:27:ac:37:8b:87:8c:32:e0:b6:7d:76:0c:
67:99:47:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:54:42 2026 by rpki-client