
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/E86E188A795F11EFBF3B491CC4F9AE02.roa
File: E86E188A795F11EFBF3B491CC4F9AE02.roa (raw, json)
Hash identifier: XjnN+h9msR5bdiDBc0pY+bbyuYDH3qgvu5jG8SVLQ0Y=
Subject key identifier: B9:ED:D3:58:B0:38:CB:35:25:C7:C7:41:83:3E:F6:A4:B3:2B:6C:93
Certificate issuer: /CN=A91B01C7/serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
Certificate serial: 2ACB
Authority key identifier: E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/E86E188A795F11EFBF3B491CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:27:47 +0000
ROA not before: Wed 16 Jul 2025 15:52:27 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 58601
IP address blocks: 103.9.112.0/22 maxlen: 22
103.9.112.0/24 maxlen: 24
103.9.113.0/24 maxlen: 24
103.9.114.0/24 maxlen: 24
103.9.115.0/24 maxlen: 24
2403:e100::/32 maxlen: 32
2403:e100:1000::/48 maxlen: 48
2403:e100:1000:4::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl
rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10955 (0x2acb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B01C7, serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
Validity
Not Before: Jul 16 15:52:27 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a45af3-b744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:38:6e:d3:cf:b7:cf:0c:1a:03:54:5e:4b:3f:
0a:0e:40:14:99:d3:26:9e:ef:57:91:78:0e:57:e7:
ff:71:37:3d:d3:11:88:f5:20:78:32:4d:bf:5c:c5:
6d:50:17:f9:bd:a3:4f:38:86:03:42:4b:27:f1:24:
6d:2c:f5:3f:56:4f:71:ec:f5:ca:82:be:5c:3b:94:
a7:4e:e5:e3:e5:3a:6b:80:a3:ce:da:28:02:bc:2e:
d9:5d:45:89:87:77:69:70:7e:2c:65:7d:3c:ef:9b:
48:57:0a:22:6a:89:f3:ca:b0:91:12:17:f0:6d:74:
c6:eb:08:75:10:36:43:d6:ae:85:96:8c:a3:66:5e:
70:32:9a:93:e9:db:42:1c:86:08:1e:dd:ac:85:0f:
b5:17:48:b9:0c:e8:41:69:f9:ff:bf:41:a6:3c:e2:
69:ed:44:7e:39:be:4a:26:08:81:11:54:1b:90:e4:
db:98:c5:8c:f8:4e:f4:0f:9c:a2:6a:df:f0:b4:f6:
a9:02:be:59:99:30:c7:39:7b:af:26:6a:c1:eb:24:
7c:10:1c:c0:f1:50:3a:f4:2b:17:14:c8:36:d5:c7:
58:1d:60:97:2c:71:39:61:10:01:9a:aa:48:e4:99:
ca:2c:42:f5:40:23:ab:99:2f:0e:58:92:f9:39:86:
86:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:ED:D3:58:B0:38:CB:35:25:C7:C7:41:83:3E:F6:A4:B3:2B:6C:93
X509v3 Authority Key Identifier:
keyid:E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/E86E188A795F11EFBF3B491CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.9.112.0/22
IPv6:
2403:e100::/32
Signature Algorithm: sha256WithRSAEncryption
a7:50:fb:30:10:ef:60:01:74:a8:6f:a5:5b:72:32:57:df:98:
3c:b0:9b:9f:fe:70:67:99:36:de:e5:fd:ea:f2:a8:8b:2f:dd:
40:ad:83:33:6c:4a:1e:c0:ce:c7:0c:97:15:42:ff:84:37:c4:
a4:14:6a:d0:90:74:81:fe:26:40:f3:e5:65:91:94:32:e1:9c:
0a:5b:fc:67:b2:10:bc:a2:02:98:a6:a3:4b:0f:cb:10:bb:46:
17:fe:89:cb:4d:bd:a8:36:d8:1b:cf:79:0a:eb:9b:5d:4f:11:
05:1f:26:11:18:5d:f3:15:0a:d1:a0:af:a1:61:ae:70:3e:f5:
73:24:f4:70:76:91:0e:56:09:75:92:3d:46:b8:d4:86:c1:72:
e4:3a:0e:00:5b:de:c1:32:0b:a9:49:0e:ff:d6:d3:3a:be:69:
34:d9:3e:a0:d3:33:92:c1:91:5c:02:e9:14:92:42:45:25:2b:
d2:7f:ea:b4:9a:bf:19:f6:93:6f:13:44:87:15:9c:02:71:cc:
3c:16:be:56:58:4e:50:22:40:e1:06:5e:ad:14:c0:7b:fb:9f:
e9:2c:fc:ef:a3:12:cb:d2:a0:dd:44:35:b8:cd:ba:13:b4:a8:
a9:a2:47:75:98:0f:be:b1:79:62:36:04:a3:e8:62:47:48:21:
ad:9c:4d:a2
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICKsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjAxQzcxMTAvBgNVBAUTKEU4REY4RDVFNEM4NERBODdENzI5QTczQzFDNEU4NjEx
MzgxQUIyQzEwHhcNMjUwNzE2MTU1MjI3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWFmMy1iNzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlThu08+3zwwaA1ReSz8KDkAUmdMmnu9XkXgOV+f/cTc90xGI9SB4Mk2/XMVt
UBf5vaNPOIYDQksn8SRtLPU/Vk9x7PXKgr5cO5SnTuXj5TprgKPO2igCvC7ZXUWJ
h3dpcH4sZX0875tIVwoiaonzyrCREhfwbXTG6wh1EDZD1q6FloyjZl5wMpqT6dtC
HIYIHt2shQ+1F0i5DOhBafn/v0GmPOJp7UR+Ob5KJgiBEVQbkOTbmMWM+E70D5yi
at/wtPapAr5ZmTDHOXuvJmrB6yR8EBzA8VA69CsXFMg21cdYHWCXLHE5YRABmqpI
5JnKLEL1QCOrmS8OWJL5OYaGtQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFLnt01iw
OMs1JcfHQYM+9qSzK2yTMB8GA1UdIwQYMBaAFOjfjV5MhNqH1ymnPBxOhhE4GrLB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDFDNy85N0NGMjBGQTMz
MjMxMUU0QTZFNzQ5MTFDNEY5QUUwMi82Ti1OWGt5RTJvZlhLYWM4SEU2R0VUZ2Fz
c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZOLU5Ya3lFMm9mWEthYzhIRTZHRVRnYXNzRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjAxQzcvOTdDRjIwRkEzMzIzMTFFNEE2RTc0OTExQzRGOUFFMDIvRTg2RTE4OEE3
OTVGMTFFRkJGM0I0OTFDQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZwlwMA0EAgACMAcDBQAkA+EAMA0GCSqGSIb3DQEBCwUAA4IBAQCn
UPswEO9gAXSob6VbcjJX35g8sJuf/nBnmTbe5f3q8qiLL91ArYMzbEoewM7HDJcV
Qv+EN8SkFGrQkHSB/iZA8+VlkZQy4ZwKW/xnshC8ogKYpqNLD8sQu0YX/onLTb2o
Ntgbz3kK65tdTxEFHyYRGF3zFQrRoK+hYa5wPvVzJPRwdpEOVgl1kj1GuNSGwXLk
Og4AW97BMgupSQ7/1tM6vmk02T6g0zOSwZFcAukUkkJFJSvSf+q0mr8Z9pNvE0SH
FZwCccw8Fr5WWE5QIkDhBl6tFMB7+5/pLPzvoxLL0qDdRDW4zboTtKipokd1mA++
sXliNgSj6GJHSCGtnE2i
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:25:57 2026 by rpki-client