
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/90DB8A1EC6D211F09BF8672AC4F9AE02.roa
File: 90DB8A1EC6D211F09BF8672AC4F9AE02.roa (raw, json)
Hash identifier: 6k76z2UJShM7Ntfz5lKQ1j83CGj9p3kyX7JiP2pZ0Kc=
Subject key identifier: 64:BB:DB:C8:FF:DF:A1:C8:90:FE:FA:2B:F7:1E:40:27:D0:F5:1E:4B
Certificate issuer: /CN=A91D298C/serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E
Certificate serial: 3C
Authority key identifier: 5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/90DB8A1EC6D211F09BF8672AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:05:17 +0000
ROA not before: Fri 21 Nov 2025 12:06:52 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 141883
IP address blocks: 103.143.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl
rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:59:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D298C, serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E
Validity
Not Before: Nov 21 12:06:52 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a3d71d-39bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:eb:4a:6f:aa:c1:83:9a:c4:3f:38:f4:4e:19:
38:e9:e3:bb:13:23:d9:bb:8f:73:4d:4e:a6:83:5c:
99:2d:c6:32:5d:a7:00:e9:04:d8:62:a4:8f:04:92:
7a:dc:e7:db:2e:99:85:45:57:67:49:a9:f0:8c:ff:
15:43:03:ed:fa:2e:72:20:58:d2:00:c9:b1:f4:c9:
c8:e2:3c:5a:f8:73:e9:cd:6e:b5:d0:69:1e:d3:22:
72:ae:fc:b5:92:c7:e0:8f:ac:a6:de:92:b2:4e:85:
59:81:b3:13:8e:fe:ee:c9:b4:3c:7d:77:a5:52:78:
dd:b7:24:8b:f3:1c:7c:48:c0:32:45:62:67:95:49:
4c:5b:ed:d5:65:d2:73:24:24:7e:91:65:c4:36:61:
29:12:70:fd:57:e8:09:c2:de:26:41:82:2f:c6:17:
4c:39:03:f2:0f:20:e4:a5:a0:c4:d4:e5:0f:9a:ce:
45:16:8c:c4:d8:ec:75:52:04:36:84:a7:ec:0f:06:
5d:57:a4:df:f9:75:1f:bf:2f:29:d0:f7:ec:3c:ab:
1a:ee:ba:63:65:b0:6a:91:b7:d8:be:0a:ca:8b:2b:
33:f5:c2:84:e4:b4:d2:15:9b:36:2f:01:69:cd:6d:
22:a3:cc:a6:87:42:69:b2:2d:f5:87:85:7a:6b:23:
ee:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BB:DB:C8:FF:DF:A1:C8:90:FE:FA:2B:F7:1E:40:27:D0:F5:1E:4B
X509v3 Authority Key Identifier:
keyid:5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/90DB8A1EC6D211F09BF8672AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.143.14.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:e0:56:b2:d2:be:8a:11:da:03:83:88:fa:96:43:c9:0d:12:
28:60:5f:07:e4:10:26:66:d0:b5:a4:ec:13:4a:f2:f7:8d:6a:
a5:eb:ea:52:f3:83:8f:0d:de:69:3b:2b:26:00:4b:f3:d4:2c:
39:a2:64:ed:15:25:eb:96:c9:ca:f0:84:47:b9:65:a5:22:bf:
4a:4a:9f:43:7c:20:77:f4:84:f7:b0:a7:6c:07:b9:bb:92:0d:
51:07:e6:2f:31:63:94:e2:6f:35:98:1e:19:d5:18:ea:1c:ea:
bb:44:05:4f:4f:44:90:c8:fa:15:63:06:73:60:fa:d3:eb:9e:
78:8c:07:12:ac:ec:dd:54:7b:b4:37:2f:9b:04:ab:43:18:b4:
d8:b9:66:d9:3b:4b:04:d6:7d:38:ae:a0:49:23:a7:4b:b7:76:
2b:da:d6:60:d3:13:3f:66:8e:b4:d4:b1:bf:05:b1:17:7b:b6:
18:e0:ce:f1:cc:1a:cf:28:26:3f:ad:4c:6a:f0:d6:81:20:e6:
58:d0:e3:05:8a:98:51:72:46:6c:10:45:d2:fa:6e:7d:93:5f:
64:30:56:50:78:3f:29:b0:91:19:f6:c3:b7:49:96:5e:b0:bf:
a2:32:09:26:73:40:1d:50:3a:22:c3:cf:33:d4:4d:59:2b:37:
cf:4f:7d:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:27:34 2026 by rpki-client