
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/131D50EC03B511F1B33AD351023D8C67.roa
File: 131D50EC03B511F1B33AD351023D8C67.roa (raw, json)
Hash identifier: 4DVRGZxyRZyMC2zYs9Lj4r2TkOADE/WYrSah7tqHjmA=
Subject key identifier: 3F:C0:09:3E:32:D1:8E:85:FE:4C:77:38:AE:D1:C4:C0:BA:2A:06:3D
Certificate issuer: /CN=A91B9690/serialNumber=699F5544D078A90AF5AA60412E1AD3F1FBDE4CD6
Certificate serial: 12
Authority key identifier: 69:9F:55:44:D0:78:A9:0A:F5:AA:60:41:2E:1A:D3:F1:FB:DE:4C:D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/131D50EC03B511F1B33AD351023D8C67.roa
Signing time: Mon 02 Mar 2026 11:29:16 +0000
ROA not before: Fri 06 Feb 2026 23:39:27 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 136268
IP address blocks: 103.85.216.0/24 maxlen: 24
103.85.217.0/24 maxlen: 24
103.85.218.0/24 maxlen: 24
103.85.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.crl
rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9690, serialNumber=699F5544D078A90AF5AA60412E1AD3F1FBDE4CD6
Validity
Not Before: Feb 6 23:39:27 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a5748b-de64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d4:4e:09:58:c3:2b:a3:c7:91:17:c5:3c:56:
e3:49:9a:00:e6:b6:87:c7:70:f5:57:49:3d:8b:3d:
a2:02:38:de:5b:17:6f:98:96:86:cc:c3:4d:f5:5e:
b7:b2:b8:69:34:c0:ba:ab:f5:b8:85:93:e0:c6:06:
9e:c4:65:d7:74:dd:4c:25:5c:a6:b8:4a:d7:cc:17:
84:34:86:17:d0:01:02:55:8c:f3:7c:33:fc:1d:87:
7e:df:48:e3:aa:8f:61:54:84:85:cd:db:ed:9d:78:
b7:27:12:7f:95:de:bf:e2:8e:d0:45:05:69:14:3c:
87:7f:a0:73:07:c0:54:c9:a5:eb:57:db:b5:9c:dc:
7c:f6:5f:a4:97:61:b8:6d:da:68:29:9e:c6:23:64:
54:fc:21:9c:e3:ea:9c:d4:58:10:d8:f3:d2:63:1d:
2c:74:d5:b5:97:63:74:b9:cc:39:83:b1:bd:fa:f1:
72:3a:13:91:e3:23:70:b2:ef:07:3a:01:27:1c:26:
55:b5:3a:23:1e:c9:e0:c3:db:a2:07:54:5d:d3:1b:
68:b7:2e:e3:d0:12:05:04:9e:83:e0:26:31:fb:18:
d7:d0:d8:9f:f0:a7:5c:e5:05:68:92:a2:b3:8a:3c:
9c:76:d8:9e:a4:76:bc:1a:f2:27:8d:34:fb:c6:53:
ce:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C0:09:3E:32:D1:8E:85:FE:4C:77:38:AE:D1:C4:C0:BA:2A:06:3D
X509v3 Authority Key Identifier:
keyid:69:9F:55:44:D0:78:A9:0A:F5:AA:60:41:2E:1A:D3:F1:FB:DE:4C:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/131D50EC03B511F1B33AD351023D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.85.216.0/22
Signature Algorithm: sha256WithRSAEncryption
57:9a:a2:38:a0:3e:f9:f4:38:d8:eb:39:09:9f:26:6b:9a:e2:
f6:9b:11:53:5a:d4:9c:ac:a2:60:c5:25:88:fd:d0:7b:a5:63:
5d:10:86:be:84:fe:7d:53:e3:57:4d:6e:b0:64:14:3f:0c:32:
80:c1:d0:73:ec:b9:26:f4:24:9d:9c:0e:37:40:05:99:68:7d:
c8:9c:21:e2:da:06:30:f2:5a:ce:cd:14:82:19:a4:79:41:96:
ea:1b:c6:ee:a6:0d:a4:1b:c3:f6:10:b8:ed:4d:23:97:22:32:
d5:27:0e:69:ee:88:d8:a2:5c:13:7e:d3:c0:5f:c9:c0:dc:e5:
7b:e5:41:ca:42:28:de:26:98:4b:7d:3f:be:fb:92:ed:e5:e0:
e2:f4:61:db:0a:ff:12:c5:c6:70:3a:cc:73:bb:90:82:80:db:
2e:63:57:a2:55:78:2b:da:a3:bd:df:8e:6a:34:f8:1f:b2:20:
9a:0f:81:88:9e:97:34:26:5f:ad:0b:6e:09:7c:9d:f4:5f:f6:
be:f1:b1:19:bb:e5:3d:10:d8:6d:88:c1:96:22:df:b5:9c:41:
b7:c1:03:9b:d5:39:42:bf:60:69:b3:48:e9:db:7c:c3:7f:d7:
f4:d6:bf:35:c6:12:17:cc:1f:77:59:3e:35:e0:11:d4:ab:54:
d5:c2:0d:1d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:33:30 2026 by rpki-client