
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/D9EEB222DBFC11EC82E85E69C4F9AE02.roa
File: D9EEB222DBFC11EC82E85E69C4F9AE02.roa (raw, json)
Hash identifier: UoeTGdDWFi8XFqsO7bK2F7lfw58R0SVfg1rPBc2qAFc=
Subject key identifier: D3:19:C2:23:B0:DE:75:76:CB:D8:ED:2B:F9:FB:2B:9E:56:8B:D2:24
Certificate issuer: /CN=A91FB0D0/serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7
Certificate serial: 0386
Authority key identifier: 4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/D9EEB222DBFC11EC82E85E69C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:21:40 +0000
ROA not before: Tue 27 May 2025 02:18:40 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 149832
IP address blocks: 103.187.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl
rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:38:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 902 (0x386)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB0D0, serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7
Validity
Not Before: May 27 02:18:40 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3e904-4d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:88:69:84:a8:8d:7e:a8:57:71:a9:60:61:cb:
cb:f2:f6:90:aa:85:fc:50:dc:e2:51:0d:fd:13:c9:
ab:83:85:1e:22:13:0c:0e:89:59:bb:eb:25:55:48:
f9:74:5d:5e:38:63:29:3d:55:7f:08:23:09:d5:07:
da:07:5f:68:21:d9:7e:81:36:8b:f9:46:ee:e4:74:
f7:ef:00:71:82:4b:1e:13:57:00:f2:f1:5c:21:fb:
91:aa:72:5c:03:98:c2:65:af:86:de:5c:1f:9b:87:
c1:22:10:c7:66:85:d1:03:df:bc:19:af:02:41:9e:
74:b6:96:b1:2b:3f:00:82:75:9d:e6:d5:96:23:bf:
cf:89:97:05:79:00:82:0b:59:70:b2:47:e7:43:d3:
24:2a:6a:13:32:eb:2d:4e:4b:46:dc:c4:47:6b:f9:
b8:70:ee:ec:75:d8:ab:6b:bc:e1:79:e6:b1:7b:ca:
75:93:5c:c1:b9:1d:69:1c:46:f8:50:73:f5:ab:20:
9d:d8:c8:10:cc:c8:3b:f9:cc:c8:ac:3f:b7:8b:12:
78:8d:0b:65:dd:60:8c:fb:53:82:cb:33:61:86:2a:
4d:ab:10:9b:24:4a:24:3f:45:a6:fc:9b:78:0e:73:
92:f5:67:8c:54:e6:09:0d:28:76:9b:9e:f3:2f:8c:
01:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:19:C2:23:B0:DE:75:76:CB:D8:ED:2B:F9:FB:2B:9E:56:8B:D2:24
X509v3 Authority Key Identifier:
keyid:4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/D9EEB222DBFC11EC82E85E69C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.187.136.0/24
Signature Algorithm: sha256WithRSAEncryption
53:84:a4:7a:49:28:38:66:57:71:3b:c3:06:f5:a2:89:28:b4:
3f:00:97:31:be:d1:0a:ed:e2:c9:a0:a6:fc:55:8d:2b:23:e7:
56:ff:e8:cf:43:72:8f:43:95:e7:e2:3a:f3:27:f4:22:7e:73:
e6:7f:bd:4a:89:d8:dc:11:71:a2:4f:3c:cd:d0:05:10:d0:49:
4b:0b:ab:5e:6c:1e:ed:5d:31:91:fa:f1:36:51:3d:28:e6:06:
f6:81:87:59:14:9e:42:f6:a2:71:07:b1:0c:ed:f3:1e:5a:2d:
8e:a1:59:fb:bf:8e:94:42:43:86:7a:23:d3:a2:0e:7e:18:6a:
23:08:6e:b6:7e:26:41:84:80:34:26:a8:99:53:22:32:5c:54:
25:1d:35:7d:10:8d:e8:a0:20:8b:e3:39:8e:96:9e:28:bb:df:
81:14:ba:fe:6d:40:70:a3:32:97:4c:22:46:ed:07:04:89:9a:
1f:fa:6c:b0:c1:30:fc:50:d2:1f:0a:85:97:85:fb:d6:a8:76:
0b:77:49:72:89:08:ef:9b:e2:9d:91:49:5c:3f:26:4a:31:3a:
c8:4b:49:cf:af:ea:0f:1c:95:ce:3b:4f:1a:e6:1c:03:22:0d:
a7:9c:b5:35:6e:a4:09:5c:98:d1:24:08:a2:7e:c8:d2:11:18:
44:09:2c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:40:58 2026 by rpki-client