
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/A5D573E4305A11EB921D6332C4F9AE02.roa
File: A5D573E4305A11EB921D6332C4F9AE02.roa (raw, json)
Hash identifier: vdVjE9QhaFbtJjp0h6tvpzNSUEGbIK7EDS6VnHKmXAs=
Subject key identifier: 76:FE:E3:02:50:E9:BA:7E:AA:AD:9E:69:34:65:50:23:5E:B2:02:8F
Certificate issuer: /CN=A91F4CFA/serialNumber=5E8CDC01FC09B453749A01EE5239B35EDE24BE6C
Certificate serial: 07C6
Authority key identifier: 5E:8C:DC:01:FC:09:B4:53:74:9A:01:EE:52:39:B3:5E:DE:24:BE:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/A5D573E4305A11EB921D6332C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:40:27 +0000
ROA not before: Tue 04 Mar 2025 23:10:53 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 136388
IP address blocks: 103.86.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.crl
rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:38:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1990 (0x7c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4CFA, serialNumber=5E8CDC01FC09B453749A01EE5239B35EDE24BE6C
Validity
Not Before: Mar 4 23:10:53 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3fb7a-89bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6a:02:96:f1:e3:d0:66:65:53:3c:cc:0b:34:
7f:3f:4d:ce:fe:cf:55:82:52:76:5e:90:23:f4:90:
8e:02:34:68:76:e0:4b:c7:c3:2c:3e:18:a2:f8:d7:
9c:21:24:c1:e8:ad:e5:0b:c1:88:f7:98:28:e5:a0:
d6:19:95:a1:6a:fa:86:45:94:43:a5:78:30:18:39:
95:1a:8e:31:59:29:89:6b:6c:c8:dc:d2:db:91:75:
31:2a:45:15:14:35:46:87:f1:b4:8e:65:cd:ea:82:
dc:35:70:b6:cb:e9:94:74:7e:db:32:ab:2f:47:b9:
0d:9e:57:e0:af:a9:2b:71:2d:a7:70:3d:44:d7:07:
13:7c:10:57:48:c9:7d:c9:5f:a7:3b:73:10:ef:76:
c0:08:d2:62:da:06:da:b1:3f:2c:86:60:7a:21:5b:
70:81:0a:1c:f9:16:fa:13:28:56:1e:ba:c1:90:78:
fa:84:bb:50:9c:81:11:9f:1a:6c:98:ee:a4:38:79:
71:88:d7:c5:7a:b0:b1:ad:30:5b:44:62:df:2a:5d:
ef:54:c9:09:14:e4:e8:66:5f:dc:28:45:c6:91:02:
f6:72:b6:f2:6a:3d:43:38:9b:2b:b3:82:31:56:e7:
f9:9f:19:28:83:5d:39:02:a5:cc:51:e5:62:3d:30:
17:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FE:E3:02:50:E9:BA:7E:AA:AD:9E:69:34:65:50:23:5E:B2:02:8F
X509v3 Authority Key Identifier:
keyid:5E:8C:DC:01:FC:09:B4:53:74:9A:01:EE:52:39:B3:5E:DE:24:BE:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/A5D573E4305A11EB921D6332C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.86.92.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:d3:47:34:77:38:98:67:8b:4b:00:0b:87:da:33:5c:b0:d0:
ee:44:94:6b:a8:20:af:f0:63:a0:73:7f:80:d7:94:4b:32:6b:
2f:b7:9f:d4:4e:ee:f1:77:95:bc:6e:53:72:2e:2e:21:20:80:
78:e1:4e:5e:6e:24:ee:81:7e:7d:d0:9a:df:4e:81:b2:e8:ef:
d4:fd:a3:20:12:71:ee:8f:00:4a:8a:2b:5b:85:39:e8:fa:76:
94:ae:82:39:bb:28:91:ab:f6:ae:c3:79:f8:46:c7:8b:f3:2d:
3b:ab:c2:2d:a4:40:26:6b:28:ad:9b:d3:d6:3c:37:62:64:7a:
ae:63:e1:0b:91:43:55:5e:6a:d6:e7:41:cd:71:c1:61:02:ae:
24:d9:d6:c3:17:a8:bc:10:22:20:99:a2:49:47:a1:9f:e9:15:
63:e2:15:24:72:ec:1f:07:33:e7:f6:66:39:1c:0f:45:68:4f:
47:b6:a4:33:d4:68:7b:c9:83:3f:95:1d:a1:67:57:3c:a2:4b:
c0:1a:82:49:7c:f4:0f:ea:58:12:5d:44:df:96:6f:4c:7f:e4:
f2:15:d7:78:cd:ab:b0:1d:40:4c:e0:5a:c8:2b:39:f9:e3:80:
ec:1a:fe:1a:c1:eb:4a:68:20:b7:a2:8c:56:b7:b4:4d:11:9b:
c9:b8:2e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:48:52 2026 by rpki-client