
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/20928024C9BA11F09F21BD27C4F9AE02.roa
File: 20928024C9BA11F09F21BD27C4F9AE02.roa (raw, json)
Hash identifier: wK4ZUFHP7svDczy0YCkmOX/r2Vqw7guLhrYQg+0Ja2I=
Subject key identifier: 96:4D:82:9C:77:45:6C:68:20:D7:E6:3C:A9:AF:35:C5:76:50:25:6C
Certificate issuer: /CN=A91BCFC5/serialNumber=5CCA98F878C92402E2F104E2B8BDAB8190B1FAA2
Certificate serial: 39
Authority key identifier: 5C:CA:98:F8:78:C9:24:02:E2:F1:04:E2:B8:BD:AB:81:90:B1:FA:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/20928024C9BA11F09F21BD27C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:02:24 +0000
ROA not before: Tue 25 Nov 2025 04:49:29 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 135359
IP address blocks: 103.12.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.crl
rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:58:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCFC5, serialNumber=5CCA98F878C92402E2F104E2B8BDAB8190B1FAA2
Validity
Not Before: Nov 25 04:49:29 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a3d670-60d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:ac:1d:b0:84:e5:ea:97:fc:16:34:17:bb:
58:db:02:73:f4:97:cc:62:05:f8:4b:79:44:e3:a2:
a4:87:92:1a:a2:6e:be:db:e0:98:1b:e1:6c:3c:96:
1b:1c:d4:0b:9d:95:77:f8:21:cf:de:e7:16:38:db:
61:55:61:e3:2f:d0:12:b3:64:43:2e:b4:e3:6d:6e:
46:50:d6:c3:ed:3c:4a:78:24:4c:b6:78:2f:2b:b1:
f4:1d:18:1a:60:57:89:18:19:35:fc:dc:8d:e6:2d:
1a:53:c4:05:68:ea:29:2a:f4:9c:9d:39:a3:48:9b:
a2:4e:57:75:61:3f:47:43:4c:13:d0:08:4a:1a:6a:
6f:39:05:10:8f:19:9f:c7:b0:65:c3:bc:0c:11:6e:
a4:85:45:05:81:26:c9:39:0b:21:ea:bc:dd:21:cf:
da:83:20:54:39:1d:15:d2:57:80:5a:39:35:07:2c:
c3:e9:1a:34:ea:27:22:f7:1f:9b:42:2b:00:36:5b:
98:83:0e:9a:26:2d:60:64:42:4f:bb:1f:32:a3:7e:
b7:6e:f8:87:f4:52:d9:7a:0e:09:6b:81:de:6b:8d:
42:31:1e:d2:e9:d2:69:5b:22:62:82:67:1b:f8:6e:
63:84:4e:06:7f:7e:18:04:e7:ea:bd:4c:4e:1f:22:
b4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4D:82:9C:77:45:6C:68:20:D7:E6:3C:A9:AF:35:C5:76:50:25:6C
X509v3 Authority Key Identifier:
keyid:5C:CA:98:F8:78:C9:24:02:E2:F1:04:E2:B8:BD:AB:81:90:B1:FA:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/20928024C9BA11F09F21BD27C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.12.11.0/24
Signature Algorithm: sha256WithRSAEncryption
74:c1:7f:e4:69:72:fe:2c:3a:69:dd:1e:5a:ff:28:70:76:ba:
79:de:a5:34:98:50:71:1f:8a:2d:20:76:8e:ce:26:54:e4:88:
e8:c2:a9:50:c0:9d:e8:28:7f:fa:42:7c:2d:78:54:dc:66:00:
82:05:e6:c2:ca:bc:cc:38:7f:63:a7:2c:bf:70:20:cf:fc:67:
8c:0c:ef:6b:24:5c:13:b8:e3:71:f0:1a:cd:4a:45:f8:d4:25:
81:c0:13:98:97:88:f8:51:63:86:ee:0f:bf:82:a0:eb:74:03:
d7:c2:3e:25:cf:53:81:53:d5:7d:63:35:ab:5e:d8:01:35:5c:
3a:9a:6b:fb:5a:25:d0:8b:f4:13:f4:85:cc:90:0c:c6:7c:ec:
0c:af:ec:9b:91:67:5d:f3:86:8e:47:31:f6:69:ea:a9:ff:70:
61:8e:cc:ff:a5:a0:84:8b:56:74:b1:16:d7:eb:af:50:fc:30:
c1:08:29:6c:ee:d5:6d:c2:a8:84:7a:e2:2d:d7:56:e0:91:00:
bf:37:9c:95:35:5c:90:f2:15:6f:86:67:79:3c:42:99:c2:0c:
1e:11:3a:51:f1:d3:a2:41:cd:01:6a:b9:35:ea:83:b3:51:a3:
93:8c:fa:cf:9d:5c:57:4f:df:18:f5:6f:07:da:43:0e:e2:0c:
ad:a6:84:73
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
Q0ZDNTExMC8GA1UEBRMoNUNDQTk4Rjg3OEM5MjQwMkUyRjEwNEUyQjhCREFCODE5
MEIxRkFBMjAeFw0yNTExMjUwNDQ5MjlaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNkNjcwLTYwZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDGTawdsITl6pf8FjQXu1jbAnP0l8xiBfhLeUTjoqSHkhqibr7b4Jgb4Ww8lhsc
1AudlXf4Ic/e5xY422FVYeMv0BKzZEMutONtbkZQ1sPtPEp4JEy2eC8rsfQdGBpg
V4kYGTX83I3mLRpTxAVo6ikq9JydOaNIm6JOV3VhP0dDTBPQCEoaam85BRCPGZ/H
sGXDvAwRbqSFRQWBJsk5CyHqvN0hz9qDIFQ5HRXSV4BaOTUHLMPpGjTqJyL3H5tC
KwA2W5iDDpomLWBkQk+7HzKjfrdu+If0Utl6Dglrgd5rjUIxHtLp0mlbImKCZxv4
bmOETgZ/fhgE5+q9TE4fIrQJAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUlk2CnHdF
bGgg1+Y8qa81xXZQJWwwHwYDVR0jBBgwFoAUXMqY+HjJJALi8QTiuL2rgZCx+qIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDRkM1Lzk5OUYwMjQ4QzVB
QjExRjA4QTIwMzU0REM0RjlBRTAyL1hNcVktSGpKSkFMaThRVGl1TDJyZ1pDeC1x
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWE1xWS1IakpKQUxpOFFUaXVMMnJnWkN4LXFJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
Q0ZDNS85OTlGMDI0OEM1QUIxMUYwOEEyMDM1NERDNEY5QUUwMi8yMDkyODAyNEM5
QkExMUYwOUYyMUJEMjdDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABnDAswDQYJKoZIhvcNAQELBQADggEBAHTBf+Rpcv4sOmndHlr/KHB2
unnepTSYUHEfii0gdo7OJlTkiOjCqVDAnegof/pCfC14VNxmAIIF5sLKvMw4f2On
LL9wIM/8Z4wM72skXBO443HwGs1KRfjUJYHAE5iXiPhRY4buD7+CoOt0A9fCPiXP
U4FT1X1jNate2AE1XDqaa/taJdCL9BP0hcyQDMZ87Ayv7JuRZ13zho5HMfZp6qn/
cGGOzP+loISLVnSxFtfrr1D8MMEIKWzu1W3CqIR64i3XVuCRAL83nJU1XJDyFW+G
Z3k8QpnCDB4ROlHx06JBzQFquTXqg7NRo5OM+s+dXFdP3xj1bwfaQw7iDK2mhHM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:37 2026 by rpki-client