
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/87F6FDDC880911EB96D8882DC4F9AE02.roa
File: 87F6FDDC880911EB96D8882DC4F9AE02.roa (raw, json)
Hash identifier: nya9dv0nfdtT56zwG/wSYGtmj0pyX/94TyasLPF8tJU=
Subject key identifier: F9:87:84:A1:06:B8:85:36:47:35:58:EB:FE:74:3E:37:59:F2:FB:95
Certificate issuer: /CN=A91B7E17/serialNumber=76D1F66C016DC184734E6D9BE1BEE90801FFA01F
Certificate serial: 06E7
Authority key identifier: 76:D1:F6:6C:01:6D:C1:84:73:4E:6D:9B:E1:BE:E9:08:01:FF:A0:1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/87F6FDDC880911EB96D8882DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:33:08 +0000
ROA not before: Tue 18 Nov 2025 21:14:11 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 133528
IP address blocks: 103.131.88.0/22 maxlen: 22
103.131.88.0/24 maxlen: 24
103.131.89.0/24 maxlen: 24
103.131.90.0/24 maxlen: 24
103.131.91.0/24 maxlen: 24
2403:c8c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl
rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:38:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1767 (0x6e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7E17, serialNumber=76D1F66C016DC184734E6D9BE1BEE90801FFA01F
Validity
Not Before: Nov 18 21:14:11 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a43204-fb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:22:5f:fd:07:3d:45:2e:e9:36:1b:44:d9:db:
5a:9e:b5:46:26:59:95:fa:ab:7d:6f:61:8c:db:38:
3b:04:e1:5e:95:ae:43:c2:86:30:32:d0:86:c9:31:
32:50:2a:f5:4c:03:a8:b5:c7:76:9c:54:bf:b3:49:
42:44:86:9b:fe:ec:93:09:45:4a:89:3e:e7:43:46:
81:3f:08:a3:11:69:32:3b:99:b2:77:98:9c:18:ec:
a8:a7:24:45:db:e1:8d:5a:6b:82:cf:a5:ad:f5:3c:
2d:80:e7:ff:17:77:f4:36:5c:c4:23:21:f2:c8:6f:
1b:4d:d2:86:e4:4f:9d:8d:86:52:ba:e3:3c:a9:a5:
ea:40:be:4e:31:74:36:f6:19:f0:8b:94:d4:57:9a:
c8:36:a1:42:15:a9:f8:ab:65:aa:2e:af:b8:d4:28:
e4:18:09:eb:a2:5a:94:16:79:65:b8:d4:c4:70:dc:
52:02:2b:d0:37:15:ad:50:99:86:50:27:9b:5a:0e:
14:9c:7a:3a:8c:17:9b:ee:1c:e7:bb:1c:58:3e:f0:
5f:37:43:9b:86:28:06:8b:c4:c4:7b:3b:05:96:f2:
9e:48:f0:d2:8c:19:32:bc:eb:e3:31:d4:76:3c:4a:
dd:37:13:ed:17:91:67:60:52:e9:85:43:52:4b:f8:
79:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:87:84:A1:06:B8:85:36:47:35:58:EB:FE:74:3E:37:59:F2:FB:95
X509v3 Authority Key Identifier:
keyid:76:D1:F6:6C:01:6D:C1:84:73:4E:6D:9B:E1:BE:E9:08:01:FF:A0:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/87F6FDDC880911EB96D8882DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.131.88.0/22
IPv6:
2403:c8c0::/32
Signature Algorithm: sha256WithRSAEncryption
9a:59:ac:86:44:88:a4:4f:5b:76:7f:19:78:56:9e:79:17:1b:
d7:df:6f:e7:d2:4e:9c:0b:2f:c7:98:ee:ae:a5:5a:8e:a3:f1:
0b:1b:c1:3d:9a:b7:09:78:9a:ff:f4:4e:97:e6:39:74:c3:6f:
38:59:00:bc:d5:4a:3a:62:1d:f8:50:5a:08:0c:ba:be:05:1d:
76:3e:a2:44:25:94:c2:c3:37:47:30:44:03:f6:60:94:14:af:
6c:0d:5f:fe:08:de:53:8a:bb:44:f5:fb:85:96:d1:85:16:3c:
63:9e:ad:e8:44:b9:0c:bb:cd:71:20:51:ed:03:17:60:77:98:
d3:25:a5:75:be:42:3f:24:ec:34:92:bd:a5:1a:e1:d5:f4:16:
86:60:5b:b2:cf:ca:40:44:2f:86:d1:7f:d3:6e:09:83:a0:c2:
25:8f:91:23:32:df:d4:36:86:cd:24:1e:eb:35:bc:4e:27:a7:
c4:41:8e:44:66:12:a3:81:06:6e:89:83:28:ee:b9:3b:db:bf:
49:2b:98:ea:4e:3f:c5:b0:9e:99:b8:33:25:f3:ab:b4:65:94:
dc:9c:f0:1c:44:09:08:9e:10:31:fa:5b:06:f6:d4:8d:29:f8:
35:a3:a4:ed:3f:09:f5:99:b5:b2:03:e3:31:3c:5f:dc:06:ed:
dc:0b:69:35
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICBucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjdFMTcxMTAvBgNVBAUTKDc2RDFGNjZDMDE2REMxODQ3MzRFNkQ5QkUxQkVFOTA4
MDFGRkEwMUYwHhcNMjUxMTE4MjExNDExWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzIwNC1mYjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoyJf/Qc9RS7pNhtE2dtanrVGJlmV+qt9b2GM2zg7BOFela5DwoYwMtCGyTEy
UCr1TAOotcd2nFS/s0lCRIab/uyTCUVKiT7nQ0aBPwijEWkyO5myd5icGOyopyRF
2+GNWmuCz6Wt9TwtgOf/F3f0NlzEIyHyyG8bTdKG5E+djYZSuuM8qaXqQL5OMXQ2
9hnwi5TUV5rINqFCFan4q2WqLq+41CjkGAnrolqUFnlluNTEcNxSAivQNxWtUJmG
UCebWg4UnHo6jBeb7hznuxxYPvBfN0ObhigGi8TEezsFlvKeSPDSjBkyvOvjMdR2
PErdNxPtF5FnYFLphUNSS/h5+QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFPmHhKEG
uIU2RzVY6/50PjdZ8vuVMB8GA1UdIwQYMBaAFHbR9mwBbcGEc05tm+G+6QgB/6Af
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0UxNy83QUIwQjU2Njg4
MDcxMUVCQTBBOUI2MkFDNEY5QUUwMi9kdEgyYkFGdHdZUnpUbTJiNGI3cENBSF9v
QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2R0SDJiQUZ0d1lSelRtMmI0YjdwQ0FIX29COC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjdFMTcvN0FCMEI1NjY4ODA3MTFFQkEwQTlCNjJBQzRGOUFFMDIvODdGNkZEREM4
ODA5MTFFQjk2RDg4ODJEQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZ4NYMA0EAgACMAcDBQAkA8jAMA0GCSqGSIb3DQEBCwUAA4IBAQCa
WayGRIikT1t2fxl4Vp55FxvX32/n0k6cCy/HmO6upVqOo/ELG8E9mrcJeJr/9E6X
5jl0w284WQC81Uo6Yh34UFoIDLq+BR12PqJEJZTCwzdHMEQD9mCUFK9sDV/+CN5T
irtE9fuFltGFFjxjnq3oRLkMu81xIFHtAxdgd5jTJaV1vkI/JOw0kr2lGuHV9BaG
YFuyz8pARC+G0X/TbgmDoMIlj5EjMt/UNobNJB7rNbxOJ6fEQY5EZhKjgQZuiYMo
7rk7279JK5jqTj/FsJ6ZuDMl86u0ZZTcnPAcRAkInhAx+lsG9tSNKfg1o6TtPwn1
mbWyA+MxPF/cBu3cC2k1
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:21:52 2026 by rpki-client