
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/F90AE9C413AB11F1B2F915E2033D8C67.roa
File: F90AE9C413AB11F1B2F915E2033D8C67.roa (raw, json)
Hash identifier: 7kNWRR2tntQogbHyoMjCAgplrVxKh3owfexUCfxxfdY=
Subject key identifier: 14:8E:0B:40:10:1C:F9:44:67:A0:DB:09:35:18:E6:91:8B:3C:63:04
Certificate issuer: /CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2
Certificate serial: 0BED
Authority key identifier: 2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/F90AE9C413AB11F1B2F915E2033D8C67.roa
Signing time: Fri 27 Feb 2026 07:14:36 +0000
ROA not before: Fri 27 Feb 2026 07:14:36 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 7361
IP address blocks: 103.101.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl
rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3053 (0xbed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B56F0, serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2
Validity
Not Before: Feb 27 07:14:36 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a1445c-e4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0a:ff:91:50:5a:6d:93:36:1b:bf:65:c3:b5:
5d:a5:10:d6:03:5d:dd:30:68:66:32:6f:6d:e3:c6:
e5:98:09:4e:57:b5:75:7b:51:f8:a9:29:ff:81:91:
a7:9a:51:7d:66:9b:97:57:0d:0e:33:46:30:30:8f:
24:c5:db:e9:39:24:b7:a3:af:1e:38:c2:cc:eb:c2:
15:58:44:dc:e5:ce:e0:13:bb:e7:1d:eb:54:dd:cc:
be:9e:4d:90:02:c0:6e:40:3c:d1:19:2e:1d:6f:92:
b3:45:e2:8f:71:f9:c5:18:73:92:0d:b6:aa:5e:10:
c0:46:8a:27:8d:cc:79:57:70:77:b0:c7:50:a1:4d:
7c:b2:26:e6:73:43:f4:27:8d:82:db:66:24:c7:ca:
2e:9b:aa:ca:27:12:2b:2f:29:1e:a8:4b:21:b1:4b:
e4:90:d5:de:14:95:ae:de:3f:f1:26:e5:46:50:c3:
fa:48:8a:55:0b:42:ae:df:89:e6:43:94:ba:74:10:
8b:c6:87:0b:1b:e7:e8:df:be:b4:d4:27:50:f4:87:
8c:ba:7f:eb:86:08:fd:f8:fd:39:4e:a9:bc:f1:db:
d3:aa:39:1f:74:5f:46:14:7f:d6:ad:81:5b:87:f4:
cd:97:77:03:9e:4e:32:36:3b:e7:52:b3:a7:c1:b9:
3a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8E:0B:40:10:1C:F9:44:67:A0:DB:09:35:18:E6:91:8B:3C:63:04
X509v3 Authority Key Identifier:
keyid:2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/F90AE9C413AB11F1B2F915E2033D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.101.51.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:47:f3:42:82:af:4d:86:a5:3a:3b:d6:11:0f:97:93:53:1f:
53:dd:be:f9:4f:93:e2:a0:74:6d:92:9c:0b:57:42:8b:a0:09:
d9:dc:23:62:25:02:01:70:7f:cb:00:4f:ef:c7:20:f8:d3:87:
ca:40:9b:e1:af:9c:93:89:a6:c8:50:8c:2d:da:8a:aa:95:71:
d7:f5:67:28:65:7b:63:a0:03:b1:15:ad:19:ca:5f:0d:cb:8d:
f5:5e:c9:31:d9:5a:81:fd:b5:da:3e:83:32:23:4c:74:3a:d4:
fc:9e:ec:d5:4c:b8:b7:2a:d3:d4:7e:44:28:08:17:ad:e0:f0:
c9:35:45:25:f7:c1:3a:62:5a:ba:94:87:f9:15:77:0b:73:b0:
ca:7c:9a:d6:ae:ce:c5:fc:36:36:d6:4f:bc:c3:f1:20:26:50:
12:61:8f:06:d8:40:d2:d1:10:ab:e0:22:55:3c:2e:8e:0b:86:
b4:e3:f7:26:20:09:ff:8e:33:83:1b:a2:7b:e8:ac:5e:c4:8e:
8f:05:12:71:92:f8:85:19:09:79:05:6a:e4:f7:c2:13:69:9a:
33:b5:84:77:7a:69:d0:07:79:37:0e:12:95:91:48:b0:5d:4a:
17:fd:df:22:7d:2f:5a:0e:23:33:2e:00:fc:f8:bd:ad:ad:69:
d0:ed:3b:c4
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICC+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjU2RjAxMTAvBgNVBAUTKDJGODc3M0M5NTEwNTNCMTQzOEJDMjdFQ0M1NUUzOTJB
RkI1RTJCQjIwHhcNMjYwMjI3MDcxNDM2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OWExNDQ1Yy1lNGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApwr/kVBabZM2G79lw7VdpRDWA13dMGhmMm9t48blmAlOV7V1e1H4qSn/gZGn
mlF9ZpuXVw0OM0YwMI8kxdvpOSS3o68eOMLM68IVWETc5c7gE7vnHetU3cy+nk2Q
AsBuQDzRGS4db5KzReKPcfnFGHOSDbaqXhDARoonjcx5V3B3sMdQoU18sibmc0P0
J42C22Ykx8oum6rKJxIrLykeqEshsUvkkNXeFJWu3j/xJuVGUMP6SIpVC0Ku34nm
Q5S6dBCLxocLG+fo37601CdQ9IeMun/rhgj9+P05Tqm88dvTqjkfdF9GFH/WrYFb
h/TNl3cDnk4yNjvnUrOnwbk6QwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBSOC0AQ
HPlEZ6DbCTUY5pGLPGMEMB8GA1UdIwQYMBaAFC+Hc8lRBTsUOLwn7MVeOSr7Xiuy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTZGMC83RDY3RTRENDM4
NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94UTR2Q2ZzeFY0NUt2dGVL
N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0w0ZHp5VkVGT3hRNHZDZnN4VjQ1S3Z0ZUs3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjU2RjAvN0Q2N0U0RDQzODRDMTFFQUJFQTJEQjcxQzRGOUFFMDIvRjkwQUU5QzQx
M0FCMTFGMUIyRjkxNUUyMDMzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ2UzMA0GCSqGSIb3DQEBCwUAA4IBAQCMR/NCgq9NhqU6O9YRD5eT
Ux9T3b75T5PioHRtkpwLV0KLoAnZ3CNiJQIBcH/LAE/vxyD404fKQJvhr5yTiabI
UIwt2oqqlXHX9WcoZXtjoAOxFa0Zyl8Ny431Xskx2VqB/bXaPoMyI0x0OtT8nuzV
TLi3KtPUfkQoCBet4PDJNUUl98E6Ylq6lIf5FXcLc7DKfJrWrs7F/DY21k+8w/Eg
JlASYY8G2EDS0RCr4CJVPC6OC4a04/cmIAn/jjODG6J76KxexI6PBRJxkviFGQl5
BWrk98ITaZoztYR3emnQB3k3DhKVkUiwXUoX/d8ifS9aDiMzLgD8+L2trWnQ7TvE
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:58:26 2026 by rpki-client