
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/B4D99056FF2511F0989D8DC686EE528E.roa
File: B4D99056FF2511F0989D8DC686EE528E.roa (raw, json)
Hash identifier: WdmpqKDqJSck9efiVNrIC3nj9M8vw8KNTx4xTBDUZ4c=
Subject key identifier: 29:88:B1:7A:7D:64:80:84:0F:EB:28:33:CA:F1:FB:F6:90:AA:3D:79
Certificate issuer: /CN=A91F8806/serialNumber=ED1E63C4CA85204ECBAD26CE2C9462645E0B1CAD
Certificate serial: 018F
Authority key identifier: ED:1E:63:C4:CA:85:20:4E:CB:AD:26:CE:2C:94:62:64:5E:0B:1C:AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/B4D99056FF2511F0989D8DC686EE528E.roa
Signing time: Sun 01 Mar 2026 16:56:14 +0000
ROA not before: Tue 03 Feb 2026 04:23:02 +0000
ROA not after: Tue 02 Jun 2026 00:00:00 +0000
asID: 9821
IP address blocks: 103.80.140.0/22 maxlen: 22
202.90.128.0/19 maxlen: 19
202.90.135.0/24 maxlen: 24
202.90.155.0/24 maxlen: 24
203.211.56.0/22 maxlen: 22
2001:d18::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl
rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:32:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399 (0x18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8806, serialNumber=ED1E63C4CA85204ECBAD26CE2C9462645E0B1CAD
Validity
Not Before: Feb 3 04:23:02 2026 GMT
Not After : Jun 2 00:00:00 2026 GMT
Subject: CN=69a46fae-aab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2f:0a:c6:21:0c:f1:17:63:c4:be:28:78:16:
a6:d2:82:f1:38:5e:c3:71:d6:03:b9:05:bf:4c:de:
5e:28:40:b7:0b:b3:e6:e9:12:c6:7f:58:c9:b5:2a:
03:a2:a7:5c:97:a1:21:39:1a:65:32:70:2e:1a:c5:
00:3c:56:a7:70:8f:14:7b:dd:f1:ea:c9:84:87:c2:
19:58:92:ae:19:b1:f7:f8:ef:7b:ca:88:a2:e1:52:
02:77:0c:eb:a2:a8:41:4c:d0:5b:68:92:6e:19:47:
99:49:c9:d1:3d:09:3c:bc:9b:22:bb:96:14:35:ca:
92:5a:ee:92:8e:b2:0d:f5:4c:1a:f0:77:16:3c:ca:
d4:01:de:c3:51:d4:c2:a5:39:dd:f6:43:ca:30:25:
5f:3f:b9:17:f7:a1:7b:65:76:23:8f:b9:27:96:a5:
28:75:e5:2b:09:13:34:16:0e:10:9c:5c:d7:0d:55:
87:1f:e9:8e:e1:7d:07:19:89:6c:95:66:34:ac:22:
b4:53:a1:cb:ec:b0:2c:6d:61:5f:30:b4:44:06:37:
4f:6f:20:27:d8:b2:c7:3b:a5:fb:46:76:a3:4a:18:
5f:e2:d9:75:b4:36:4d:33:e4:f4:00:a9:50:db:19:
8a:9b:ce:0c:1b:72:2b:82:98:db:28:38:63:3e:e4:
bd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:88:B1:7A:7D:64:80:84:0F:EB:28:33:CA:F1:FB:F6:90:AA:3D:79
X509v3 Authority Key Identifier:
keyid:ED:1E:63:C4:CA:85:20:4E:CB:AD:26:CE:2C:94:62:64:5E:0B:1C:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/B4D99056FF2511F0989D8DC686EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
103.80.140.0/22
202.90.128.0/19
203.211.56.0/22
IPv6:
2001:d18::/32
Signature Algorithm: sha256WithRSAEncryption
42:8f:14:59:a6:e6:aa:93:cf:a8:1d:db:40:8b:77:1b:ba:9c:
bd:06:cc:7e:1f:9f:88:0e:71:e0:29:7f:18:ad:93:4d:96:d5:
e1:2d:0c:31:52:a6:df:76:1e:21:ff:b3:65:d9:95:da:85:94:
26:d2:a8:8f:02:13:5e:8b:ce:ff:e0:10:56:41:9c:b2:81:ec:
d0:35:cb:ee:4a:3c:40:48:90:b6:03:c1:0a:02:ae:f8:bb:45:
85:5b:65:a0:8a:a4:7a:f0:00:f8:75:3e:73:f3:3d:f2:d2:42:
f9:0b:ac:48:85:12:0e:e2:dc:b4:9a:3a:bc:da:e6:58:49:18:
79:b7:e7:14:e5:31:f6:00:85:50:d4:17:9c:c4:0a:15:3a:05:
70:00:ab:f5:b8:0b:66:cd:2c:b2:3e:b1:7c:4b:d7:3e:64:91:
97:07:83:c2:a1:fa:1d:dd:7d:98:20:32:11:22:ee:5c:63:ae:
81:08:f0:bc:4c:67:d6:d8:82:f5:44:da:df:04:23:11:0a:73:
be:e9:23:3d:8f:02:36:96:84:46:f0:02:28:02:ac:01:27:c4:
d4:a2:58:a7:8f:33:52:30:ea:ef:9d:de:99:37:62:bf:26:57:
ef:ad:a6:e4:aa:5a:31:93:d6:05:26:f9:62:98:dd:ae:bf:4f:
83:2e:92:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:22 2026 by rpki-client