
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/28CED806EA5811EF90C1D323C4F9AE02.roa
File: 28CED806EA5811EF90C1D323C4F9AE02.roa (raw, json)
Hash identifier: lKKFYRTJRbGhJVHM+YgGfB3UVPPgnSkTNditYZO8Xjs=
Subject key identifier: 86:2E:68:E0:F7:5E:0B:32:0E:7A:99:72:38:EA:95:91:0A:0C:61:EB
Certificate issuer: /CN=A91F9766/serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57
Certificate serial: C9
Authority key identifier: C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/28CED806EA5811EF90C1D323C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:25:37 +0000
ROA not before: Sat 07 Jun 2025 07:17:18 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 134829
IP address blocks: 103.92.137.0/24 maxlen: 24
103.92.138.0/24 maxlen: 24
103.92.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl
rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:06:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9766, serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57
Validity
Not Before: Jun 7 07:17:18 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a3dbe1-7ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7a:a0:85:89:f9:a8:64:bd:e0:b7:d6:0e:ad:
fd:d2:05:13:61:be:7a:4a:56:61:b7:1f:3c:c0:ab:
c9:3b:b6:a6:57:5e:58:a7:b8:81:b0:4b:94:28:d5:
df:23:36:c4:7d:1a:f8:c5:c4:bd:ef:e5:15:ee:1d:
0f:e7:0e:54:a4:c4:16:64:77:af:e2:2c:77:a2:e3:
87:6f:ca:a8:dc:4c:f2:48:43:89:04:74:96:9e:8c:
6c:e3:43:47:1e:a5:81:0c:bc:3a:31:d0:f0:cc:ec:
ff:b7:e7:61:a6:0a:7f:c8:cc:4c:90:f1:18:eb:b0:
89:fa:2c:a5:51:58:21:f4:44:42:44:8e:d6:47:3f:
d8:a1:7b:9a:d9:f4:53:b4:3f:87:f7:dd:ec:a4:2d:
c4:fa:e4:d4:93:5a:c9:6d:93:f8:5b:63:bb:6f:10:
42:aa:ca:44:23:23:7d:3f:e5:f8:e8:7c:39:29:b9:
d4:7f:cc:4f:07:55:4f:9e:6c:89:8e:0e:be:28:13:
45:6e:da:c7:57:8b:25:5d:6f:62:37:c5:01:d6:ce:
04:42:99:04:a9:df:6f:9e:bf:80:5a:ed:86:25:ff:
fe:5c:68:43:df:7b:8c:96:e2:12:39:fc:b2:b8:df:
99:83:1f:64:12:88:e5:ad:e7:5a:7c:c4:d6:38:69:
70:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2E:68:E0:F7:5E:0B:32:0E:7A:99:72:38:EA:95:91:0A:0C:61:EB
X509v3 Authority Key Identifier:
keyid:C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/28CED806EA5811EF90C1D323C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.92.137.0-103.92.139.255
Signature Algorithm: sha256WithRSAEncryption
4c:85:97:77:ee:6b:0c:e8:07:a4:e8:78:4c:2d:11:94:f2:f1:
79:d5:ab:8b:af:bc:0a:ac:dd:f6:09:72:4e:f4:ce:54:2f:62:
41:87:85:b2:d5:59:c5:54:60:29:e1:38:d8:16:0c:a9:42:0e:
d1:cd:d9:78:ab:df:a4:79:5f:47:28:28:bb:7c:0a:b7:c9:aa:
c7:0d:cb:ca:bf:be:cc:b3:75:93:0c:63:49:55:cd:a8:81:d7:
66:42:d9:d0:4b:d1:fc:96:3e:0f:5e:c5:da:a2:46:e5:2e:bb:
dd:1e:55:c5:66:64:0f:ee:82:16:df:04:81:43:62:6c:bd:1b:
23:cd:16:ab:d9:a7:2b:38:f3:8f:c5:6e:f7:74:87:86:53:8b:
3c:66:a5:65:38:e6:24:e9:1d:ad:cb:72:b5:75:b3:ed:4f:34:
f1:07:8d:06:ee:7b:8a:72:11:4b:fe:3a:7d:31:c0:1b:28:9e:
43:e0:ab:21:fb:fd:8b:7c:30:88:38:0f:8c:b0:8a:d9:c9:45:
77:96:d2:0a:93:1a:99:57:d6:fb:88:44:ab:b6:e7:b7:20:63:
fc:de:00:d9:cd:8f:7c:df:69:0c:8a:a5:92:3c:66:30:8f:ae:
5a:2f:d9:50:8b:f5:c0:14:9f:b6:dc:3b:79:cf:0b:4f:46:7e:
10:6a:6f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:41 2026 by rpki-client