
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/99C51F96DA6D11EC86CE4D59C4F9AE02.roa
File: 99C51F96DA6D11EC86CE4D59C4F9AE02.roa (raw, json)
Hash identifier: 6fsqmzIKuFRYmBYI22zsQWgNYl7101x+SUd+GORgsaw=
Subject key identifier: 40:8E:50:43:D9:63:28:D1:0F:85:89:A8:B0:A5:C9:DC:54:7F:08:D0
Certificate issuer: /CN=A91F53A5/serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8
Certificate serial: 038A
Authority key identifier: E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/99C51F96DA6D11EC86CE4D59C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:21:28 +0000
ROA not before: Sun 25 May 2025 01:08:05 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 149817
IP address blocks: 103.187.8.0/24 maxlen: 24
2001:df0:b3c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl
rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 906 (0x38a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F53A5, serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8
Validity
Not Before: May 25 01:08:05 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3e8f7-23e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:45:f9:0f:8d:ac:a1:6f:93:d1:14:ee:d7:43:
6b:d9:3d:38:c3:24:65:9b:61:46:d1:a5:1b:c3:b7:
b0:f3:88:af:84:a7:5d:b2:40:59:2b:d0:4d:79:b5:
e4:66:f7:13:63:99:2f:8b:51:2e:9a:47:8c:df:09:
18:bb:d2:28:1f:20:35:e9:35:b5:4e:18:38:fd:86:
4c:e2:ac:4a:51:32:f3:9e:47:04:fb:01:70:c4:a4:
48:8c:d3:15:99:de:d9:5d:d2:95:30:44:a0:ae:14:
d0:31:0d:db:8c:ff:f8:8d:51:3f:8d:76:14:76:85:
ec:52:3e:9f:cd:ef:62:02:12:07:47:74:2f:bd:b3:
ba:85:5a:f7:82:7f:f7:c9:b5:da:fd:cc:36:6c:65:
5f:c7:53:c0:cb:83:ff:b1:6a:4b:79:85:65:45:dd:
fe:e3:59:23:11:20:89:aa:5c:f9:6b:0b:8c:d3:d3:
ec:c7:3d:66:59:f3:ee:43:34:1d:11:45:47:3a:08:
90:8e:bf:b4:50:45:77:54:55:34:72:6c:44:a1:53:
b2:59:bc:dd:db:85:35:63:33:3a:85:a1:4d:75:d8:
51:9f:1e:b0:e8:2f:1b:f6:7e:57:79:7d:41:85:a9:
53:98:c3:ea:67:d0:51:ef:6d:91:0b:78:19:7d:77:
21:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8E:50:43:D9:63:28:D1:0F:85:89:A8:B0:A5:C9:DC:54:7F:08:D0
X509v3 Authority Key Identifier:
keyid:E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/99C51F96DA6D11EC86CE4D59C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.187.8.0/24
IPv6:
2001:df0:b3c0::/48
Signature Algorithm: sha256WithRSAEncryption
a5:50:54:42:19:8d:a4:c5:77:15:8c:b1:1c:c4:d1:07:59:1c:
9d:c4:d3:f4:bd:43:f4:12:6d:c3:b5:08:ab:90:ad:1c:35:a9:
59:3e:9e:99:04:a8:5f:00:3e:92:74:a5:de:4d:1f:ee:b0:33:
91:9f:0b:67:7c:28:38:25:fa:aa:ee:e4:1c:20:63:21:f6:37:
5e:78:42:96:09:fa:77:f5:c9:98:b9:12:8a:2c:76:bc:71:a5:
89:50:45:9b:bb:a7:5e:bf:6a:a9:27:a3:b9:c6:cc:62:8d:b1:
47:fd:c2:f6:5f:81:17:2e:2d:ce:ef:f1:23:ab:30:be:af:83:
44:8f:11:c3:30:45:64:c7:c9:45:91:73:3e:fb:af:b2:49:31:
9c:50:ff:27:cd:3a:ab:f1:52:e6:94:a9:6a:7c:d4:f9:a8:31:
4d:91:cd:35:52:20:6d:d1:1e:27:e5:8b:4f:91:27:fd:ec:16:
a4:b8:d6:e8:4c:56:04:6c:09:7f:cd:c7:59:d8:25:ca:0c:58:
56:0a:2e:0a:3c:a4:fd:96:cb:a4:c2:61:79:f3:22:f7:1d:dd:
32:df:9c:ba:5d:8f:a6:ee:32:7e:43:ea:15:c6:56:d0:8f:48:
b6:b1:e7:f0:24:56:0b:33:7a:36:0d:5f:a5:d1:1c:68:1a:ba:
70:90:6b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:30:22 2026 by rpki-client