
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/FDAC7EBA26D811EE86689D0EC4F9AE02.roa
File: FDAC7EBA26D811EE86689D0EC4F9AE02.roa (raw, json)
Hash identifier: OqElOiSTNAv1KVlC60CPfYWdntL1lekOatGd/7iB4Y8=
Subject key identifier: CA:E3:AC:04:3F:C5:3D:3C:2B:23:65:80:58:70:D8:58:0A:4F:D3:06
Certificate issuer: /CN=A91B9E19/serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE
Certificate serial: 0E96
Authority key identifier: 25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/FDAC7EBA26D811EE86689D0EC4F9AE02.roa
Signing time: Sun 12 Apr 2026 17:21:15 +0000
ROA not before: Sun 12 Apr 2026 17:21:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137185
IP address blocks: 103.88.92.0/24 maxlen: 24
103.88.93.0/24 maxlen: 24
220.158.192.0/24 maxlen: 24
220.158.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl
rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 17:13:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3734 (0xe96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9E19, serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE
Validity
Not Before: Apr 12 17:21:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69dbd48b-a77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0e:c8:78:5c:97:94:35:c3:89:8b:ba:d4:58:
29:7e:37:f9:42:92:43:21:26:a9:8d:34:ca:47:6f:
f4:2e:ed:11:90:74:2d:a0:a1:fc:a3:b3:70:bb:50:
db:96:56:1c:51:33:0f:82:64:38:20:3f:cc:23:81:
b1:52:41:aa:58:e8:70:6f:52:42:78:93:56:54:bd:
c6:30:8f:a9:11:14:f7:cb:81:1c:0f:34:e3:3d:e8:
31:48:98:88:40:e5:1f:2d:57:d6:00:4f:25:1d:0b:
e3:a7:cf:bc:fc:af:77:b1:8c:ca:86:2b:29:4c:e7:
2a:a8:ee:db:8e:9d:ae:fd:ad:20:70:c0:b9:62:1d:
ed:17:f9:7f:8f:59:67:7b:5b:22:e5:fc:91:23:dc:
64:a5:7c:82:cd:71:d1:23:f9:23:af:98:87:b6:24:
73:21:37:a4:3e:28:0f:40:1a:65:75:89:98:c9:75:
eb:3d:59:70:a7:e4:c2:77:0d:21:96:19:05:1c:ef:
4d:b5:16:98:3a:f6:d9:17:62:6b:a3:77:72:41:98:
f8:9d:13:f7:5d:3b:36:bf:f7:4c:a2:2d:f9:65:21:
13:c6:d7:01:1e:03:e7:0c:ce:f4:cd:24:3c:f5:1e:
a9:e0:26:60:b8:a1:61:69:a1:cc:45:26:a2:e7:07:
03:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E3:AC:04:3F:C5:3D:3C:2B:23:65:80:58:70:D8:58:0A:4F:D3:06
X509v3 Authority Key Identifier:
keyid:25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/FDAC7EBA26D811EE86689D0EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.88.92.0/23
220.158.192.0/23
Signature Algorithm: sha256WithRSAEncryption
10:0e:88:b0:79:9c:e6:e9:04:92:43:9a:2d:87:14:f1:36:be:
3b:92:55:6d:ed:78:5f:1b:b4:d5:bc:82:ef:e1:6a:c2:7c:44:
38:6d:84:ff:5c:a5:ac:9a:59:82:be:ab:3d:5b:8a:f3:51:f0:
c4:97:fc:00:26:a6:6e:05:e4:31:a2:86:d0:69:74:0f:8b:95:
70:5e:6f:a1:0d:9b:79:2c:2f:a6:87:fc:aa:d7:90:e1:f4:75:
63:70:bb:c6:80:0b:ed:50:94:81:42:03:f3:9e:99:1d:44:89:
b6:be:3a:d1:13:27:5c:bb:b6:44:69:2b:e6:48:09:0f:7d:8f:
8a:7e:41:d4:5c:61:98:a6:b5:56:f2:87:04:64:4b:0f:cf:08:
0e:e1:9a:bd:25:8a:85:52:64:1a:a7:54:88:cb:84:dd:8a:ef:
cf:ca:c2:d5:3b:41:15:02:2b:7d:ef:02:4c:ed:15:4f:73:43:
04:70:c9:72:1d:7e:be:d3:a6:b0:41:64:da:54:1d:9f:f6:32:
a8:b3:61:81:70:cb:b8:90:14:13:98:95:eb:2e:4c:dd:f7:c6:
5b:f4:45:02:e6:55:48:bc:06:89:96:76:d0:3c:29:f5:7f:02:
dd:6e:b2:ff:13:6a:32:8f:fa:84:4c:b6:18:f6:95:9d:e5:92:
ba:39:22:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:20:16 2026 by rpki-client