
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/898E9EA83C0E11F093CFD060C4F9AE02.roa
File: 898E9EA83C0E11F093CFD060C4F9AE02.roa (raw, json)
Hash identifier: hIbDeET3/by6fmctG3leWRRbgYMUPeaZ9EUswNqsz3k=
Subject key identifier: 56:E1:36:55:39:CD:12:CC:EE:25:58:24:EA:EA:FE:9E:8D:34:6D:91
Certificate issuer: /CN=A91BB246/serialNumber=9B5C12BF99AB288AA5D7A3D63C3588F74E9B26D1
Certificate serial: 93
Authority key identifier: 9B:5C:12:BF:99:AB:28:8A:A5:D7:A3:D6:3C:35:88:F7:4E:9B:26:D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/898E9EA83C0E11F093CFD060C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:09:22 +0000
ROA not before: Thu 21 Aug 2025 08:14:13 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 9650
IP address blocks: 103.118.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.crl
rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:49:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147 (0x93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB246, serialNumber=9B5C12BF99AB288AA5D7A3D63C3588F74E9B26D1
Validity
Not Before: Aug 21 08:14:13 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a3f431-99f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6e:cc:16:da:9e:74:ec:3c:cd:67:c5:61:26:
b0:75:7a:d2:64:8e:9c:03:e2:74:47:30:b0:99:b1:
05:34:fa:ec:88:8f:4d:83:98:f9:38:ea:da:3d:1a:
d3:8c:34:05:66:6a:98:1a:d9:c0:f5:96:15:35:6e:
c1:c7:12:20:30:89:7c:a0:88:fe:9b:15:33:8a:5f:
f7:10:5a:d8:7a:86:f1:bf:3b:a2:00:ff:f1:f2:94:
1d:dd:e2:f1:1b:47:82:02:1c:1a:45:26:af:77:8c:
17:11:eb:a1:f3:df:a4:e0:d4:e8:50:36:79:e8:8a:
75:8c:fd:ce:dd:db:8e:c7:09:8a:6f:fa:55:d4:84:
d3:de:dd:e9:02:6c:72:b4:57:73:25:0f:bb:04:fb:
38:e8:32:ef:ad:9f:8f:ee:42:36:3b:4c:80:49:01:
05:cc:84:78:01:2d:b8:55:75:7a:ed:cd:73:b4:b7:
c0:38:f2:bd:c4:20:1c:bf:b5:0c:ac:f5:40:9a:a5:
d7:a0:89:04:98:b6:a8:50:15:9c:69:e2:6d:88:88:
6e:b0:4f:63:ed:b2:db:2a:8b:54:0e:07:8e:98:2d:
07:2a:36:fe:b7:b0:c7:db:08:ea:f3:ca:01:d1:d1:
c2:ad:65:d4:03:e8:2c:13:01:7c:77:3c:cf:9c:41:
5e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E1:36:55:39:CD:12:CC:EE:25:58:24:EA:EA:FE:9E:8D:34:6D:91
X509v3 Authority Key Identifier:
keyid:9B:5C:12:BF:99:AB:28:8A:A5:D7:A3:D6:3C:35:88:F7:4E:9B:26:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/898E9EA83C0E11F093CFD060C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.118.12.0/22
Signature Algorithm: sha256WithRSAEncryption
28:79:2b:c7:40:3c:f0:10:b1:77:07:bf:13:38:59:36:66:15:
b8:5c:c3:87:0d:47:05:8a:56:9b:d9:6a:2c:db:29:d9:d0:67:
0c:af:73:46:16:f6:8b:4f:20:75:ef:00:cb:bc:c7:06:c4:3d:
f5:a1:80:d9:f9:93:8f:ca:80:95:76:d3:55:be:aa:f4:d1:53:
56:70:88:2f:a2:81:3c:93:6c:1c:f4:b9:38:7e:59:fc:f4:d6:
1c:19:43:7c:1d:c2:de:c7:58:31:c1:ad:a0:f8:aa:74:4e:3c:
7b:f1:c7:a1:d1:34:4e:55:af:9a:a5:7e:ab:4c:b1:d6:3d:65:
c2:a3:b3:fb:cd:84:41:a7:a9:25:63:5a:0d:44:7b:97:7a:1d:
fe:2e:8e:95:62:86:17:09:97:22:41:06:20:f1:71:8e:da:96:
61:d4:7d:4a:21:30:1f:db:e0:11:a7:76:c3:27:3b:54:2d:e2:
b2:0c:75:18:bb:52:7a:8b:b3:1c:11:00:3a:06:ca:47:98:b5:
c1:65:87:b6:43:b5:2e:5e:11:43:fe:20:a3:4a:d8:69:21:ba:
eb:90:8f:e3:0e:7a:1c:fc:c0:8e:b0:7a:f3:c3:29:ac:4e:71:
1f:31:a7:da:58:67:04:0b:6e:aa:33:b9:e4:75:c1:f7:24:68:
1a:65:5f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:07:45 2026 by rpki-client