
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/392987D254F611E79DF7E643C4F9AE02.roa
File: 392987D254F611E79DF7E643C4F9AE02.roa (raw, json)
Hash identifier: 7X7MqnwCg9AKC2Vx1jhncIIk4NudI1eSpazmHMekhvg=
Subject key identifier: EA:09:61:11:C9:B4:1F:39:DF:9C:06:C4:65:08:57:52:16:48:8A:F3
Certificate issuer: /CN=A91AE85E/serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490
Certificate serial: 357A
Authority key identifier: 70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/392987D254F611E79DF7E643C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:25:38 +0000
ROA not before: Sat 08 Nov 2025 14:30:06 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 132003
IP address blocks: 103.10.233.0/24 maxlen: 24
103.196.108.0/23 maxlen: 24
2404:2000:3000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl
rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:22:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13690 (0x357a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE85E, serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490
Validity
Not Before: Nov 8 14:30:06 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a45a71-902e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f1:27:87:15:dd:6a:78:d7:6b:5f:19:ba:c4:
50:60:03:bf:7d:2a:54:17:af:39:98:21:16:0c:5b:
41:5a:23:3d:66:4b:02:5c:5c:8f:82:e9:27:bd:47:
a0:f4:95:57:72:2a:aa:3f:c8:96:47:7b:f8:99:f0:
44:8b:34:2b:30:8f:a3:68:54:4f:85:b1:18:57:56:
f1:ac:0d:f6:da:c0:fd:50:75:8d:c1:bc:40:28:11:
f1:5f:08:18:86:46:cc:e8:a6:d9:b7:57:c6:2f:e8:
40:48:4d:01:a6:a8:f2:72:4b:b7:a2:14:e0:22:f5:
c6:ee:8a:4c:2a:10:bd:cd:d5:a9:a6:42:25:e9:73:
1d:bf:ba:5d:a1:0e:3e:8a:f8:14:f9:cd:22:5b:d8:
69:84:20:0a:1b:0b:96:02:6b:46:9c:30:c3:fa:b2:
11:e7:ca:89:98:2b:2d:ff:83:07:1c:6f:41:cd:02:
42:19:f1:2b:9b:b0:88:67:b4:47:12:ee:da:7e:43:
8b:b1:72:0d:24:73:66:f0:bc:da:d0:42:28:34:c6:
6d:e5:dd:e1:57:19:98:55:88:2c:f8:79:af:44:ec:
42:71:3c:32:ef:b5:4a:33:df:a1:6f:3f:45:27:0a:
cb:dc:4b:66:41:3a:aa:8a:42:be:de:23:ae:5b:a8:
56:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:09:61:11:C9:B4:1F:39:DF:9C:06:C4:65:08:57:52:16:48:8A:F3
X509v3 Authority Key Identifier:
keyid:70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/392987D254F611E79DF7E643C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.10.233.0/24
103.196.108.0/23
IPv6:
2404:2000:3000::/40
Signature Algorithm: sha256WithRSAEncryption
8e:a6:49:4e:ce:d0:b2:bb:21:52:6a:59:6f:e6:af:f8:39:2d:
75:40:8d:19:80:f1:2a:45:c8:24:3e:5e:ee:42:36:c0:c2:b2:
5b:91:31:3e:e2:b4:3a:26:0a:5d:1d:49:50:1a:2d:da:5f:44:
b0:04:f9:b3:81:e1:b4:ff:16:f4:c0:58:54:07:4a:42:a3:84:
9a:de:ec:07:cc:6d:cc:e4:fd:af:9f:80:1f:a5:5c:b9:5e:44:
32:03:90:ec:82:d0:bb:ea:64:c6:e6:7a:d2:f9:ea:bb:fd:19:
1e:0b:3f:c2:73:56:b6:14:e3:36:83:30:42:8c:da:19:8b:35:
b6:06:50:86:bf:ac:40:27:da:73:b5:d3:61:57:f9:d1:98:80:
ae:8f:76:98:0a:cc:8c:98:02:9b:73:bb:61:df:4b:cb:7e:f3:
a4:a3:0f:ff:84:ec:f6:52:cb:a2:71:a2:03:c1:13:6c:27:20:
f6:58:a5:d2:46:81:c0:20:16:e5:59:e4:e0:18:d4:02:98:b7:
c8:ae:4f:a0:fb:6e:aa:98:be:6a:a7:f0:01:cf:39:55:d1:dd:
a4:81:d4:88:80:7c:d7:98:e3:5c:8e:0c:e9:b5:56:21:70:2e:
d4:c0:f8:0d:77:f2:f1:19:4b:02:5e:47:a3:b9:99:06:02:a4:
66:a0:e7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:27:08 2026 by rpki-client