
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/A766D10CF86B11EF86A73884C4F9AE02.roa
File: A766D10CF86B11EF86A73884C4F9AE02.roa (raw, json)
Hash identifier: 84HSU/b3Ji+23l8vXYY4ngi5sLo8HjrYKnYa+FFKrMA=
Subject key identifier: 0D:AF:0C:43:F1:BD:6A:DA:3F:A9:A1:FC:73:A5:FB:25:53:98:E9:C1
Certificate issuer: /CN=A91DEC12/serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9
Certificate serial: 0CC8
Authority key identifier: 05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/A766D10CF86B11EF86A73884C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:41:40 +0000
ROA not before: Mon 02 Jun 2025 19:01:41 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 150774
IP address blocks: 103.92.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl
rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:47:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3272 (0xcc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEC12, serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9
Validity
Not Before: Jun 2 19:01:41 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a425f4-e0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:df:a1:b7:b1:6a:d2:b5:97:36:27:20:ee:d5:
59:e9:f9:af:5c:38:39:c9:01:92:f5:85:bb:b4:88:
b0:14:0d:f0:eb:56:e3:8a:4f:ce:ca:a5:3d:75:63:
48:f6:70:4e:07:aa:1e:68:8c:b7:67:15:9e:83:dc:
59:28:73:ff:18:f5:46:b7:57:43:b4:72:ed:e4:0d:
ba:67:83:7f:23:5e:ef:3d:a4:96:2b:1a:9f:8a:d7:
28:92:22:ca:6f:9a:a7:fc:6b:05:76:d8:27:b0:d6:
53:dc:9b:98:1f:6b:12:26:8d:10:c3:0d:b6:56:61:
1c:2d:b5:c9:b4:d8:0d:4c:1d:57:e9:d5:8f:d9:ba:
ca:97:3e:7c:56:40:b6:6e:bc:2a:9a:84:59:90:29:
6c:44:7e:87:0f:82:43:7f:b9:15:48:25:a5:08:bc:
bb:32:73:f8:e0:54:3b:9a:7c:a6:8b:61:21:b0:06:
89:e5:c3:f9:6a:bb:1e:f2:b6:ad:50:fb:b6:84:c9:
a2:f0:23:39:aa:6f:69:c8:7b:80:f9:22:fc:6a:7d:
48:03:40:c1:1a:66:6d:5c:80:f3:0d:43:81:cf:79:
f6:a5:b3:a0:db:31:79:25:12:72:45:77:9f:15:2c:
b5:e4:6c:20:27:f0:33:7f:f5:4e:e4:98:e2:fd:ed:
1b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AF:0C:43:F1:BD:6A:DA:3F:A9:A1:FC:73:A5:FB:25:53:98:E9:C1
X509v3 Authority Key Identifier:
keyid:05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/A766D10CF86B11EF86A73884C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.92.153.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:0b:ad:65:c7:3a:d7:c8:32:34:5c:75:29:26:63:2f:99:e5:
5a:60:f6:78:cf:7e:ad:ed:3d:a9:54:fc:69:c8:f5:7a:3a:2a:
55:d8:18:1d:1d:e1:c9:c1:d0:29:fa:f8:42:49:11:95:b4:1c:
20:ef:b2:40:18:76:8f:0e:1a:d7:0b:d9:70:04:9d:ce:d5:f5:
3f:18:83:4d:63:8f:6d:3c:44:24:19:a3:56:42:9e:2e:b3:6b:
e3:bb:2a:ef:59:42:af:ee:db:bd:3b:cb:ec:9e:a2:9b:44:4c:
23:e8:2a:99:53:62:7d:a1:2b:73:28:40:bd:94:99:d8:20:ab:
1b:c2:38:71:2e:4f:5a:41:e6:19:2e:08:f8:83:7b:79:33:1a:
00:35:14:47:64:57:04:c7:6d:56:c3:a0:d5:4b:6c:19:c7:f2:
21:5a:13:03:65:19:d9:f5:65:ef:00:4c:6e:06:7c:3c:95:59:
a5:88:27:04:28:9b:ef:7c:17:d6:79:d1:45:8e:94:3d:f3:07:
5b:47:92:b7:84:0d:69:90:d3:b8:4c:37:d4:db:a3:14:37:d1:
87:80:d7:b3:8e:13:31:63:a8:6f:99:07:8c:ae:1d:31:46:e0:
ed:b7:b4:77:b9:f7:8c:7b:b2:f5:53:66:f8:e0:f8:73:9b:d7:
c8:0d:0c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:21:17 2026 by rpki-client