
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/92B90AE2A1C711ED8701EE35C4F9AE02.roa
File: 92B90AE2A1C711ED8701EE35C4F9AE02.roa (raw, json)
Hash identifier: AbiEFWDmyWXRLlKJFgCMae7B/6XGcm0crIONj1lzEc8=
Subject key identifier: 93:CE:71:4F:D1:FF:28:68:CD:9D:20:58:70:48:EC:32:4D:91:FF:6D
Certificate issuer: /CN=A9111274/serialNumber=27E4FD41C3B364C5E444E62EB718199258393369
Certificate serial: 07F4
Authority key identifier: 27:E4:FD:41:C3:B3:64:C5:E4:44:E6:2E:B7:18:19:92:58:39:33:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-T9QcOzZMXkROYutxgZklg5M2k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/92B90AE2A1C711ED8701EE35C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:09:04 +0000
ROA not before: Fri 30 Jan 2026 21:18:15 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 141412
IP address blocks: 103.158.132.0/23 maxlen: 23
103.158.132.0/24 maxlen: 24
103.158.133.0/24 maxlen: 24
2001:df5:5480::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.crl
rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-T9QcOzZMXkROYutxgZklg5M2k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 21:05:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2036 (0x7f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111274, serialNumber=27E4FD41C3B364C5E444E62EB718199258393369
Validity
Not Before: Jan 30 21:18:15 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a44880-9ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ce:45:fd:f3:65:00:de:d2:ea:0e:b8:0a:48:
fa:c8:0d:7e:01:f7:e0:17:59:1d:9e:19:5b:f7:00:
66:26:d9:ab:a6:de:b1:b4:dd:b1:0b:a0:9e:1f:06:
03:23:0d:1c:0b:66:12:40:e6:5c:a9:79:17:b7:c2:
c0:17:8b:43:18:71:62:df:a4:16:f1:93:7a:c2:7e:
d0:61:9a:37:df:27:0f:e1:51:81:bc:a2:95:0b:e8:
49:af:64:ea:fa:bd:3e:39:67:b1:c0:8e:11:82:a0:
82:2e:76:5f:dd:58:65:15:a7:90:d9:91:a1:39:48:
79:da:16:8e:6f:4c:12:e3:b0:b5:92:99:ed:38:1e:
e8:df:51:5a:36:c1:0b:2a:95:cc:31:ca:5b:30:2a:
fe:4e:79:d2:b9:3b:86:63:35:cd:52:14:a6:74:2b:
f0:e1:bc:e0:8c:ce:19:94:a9:d1:31:a9:48:31:a3:
4b:86:15:1a:ec:8b:39:a3:69:24:4b:1d:b0:cc:1b:
0c:be:a6:03:33:be:8e:3f:83:a6:d4:80:87:38:76:
94:c1:0e:49:cf:8a:74:e2:85:b7:e7:a5:75:e6:1c:
e6:68:0e:29:3d:ec:08:75:61:5c:b5:93:7e:26:3c:
65:58:62:41:19:5b:a4:ec:33:12:b2:5c:72:36:b5:
a3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CE:71:4F:D1:FF:28:68:CD:9D:20:58:70:48:EC:32:4D:91:FF:6D
X509v3 Authority Key Identifier:
keyid:27:E4:FD:41:C3:B3:64:C5:E4:44:E6:2E:B7:18:19:92:58:39:33:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-T9QcOzZMXkROYutxgZklg5M2k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/92B90AE2A1C711ED8701EE35C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.158.132.0/23
IPv6:
2001:df5:5480::/48
Signature Algorithm: sha256WithRSAEncryption
31:9d:de:ea:aa:cb:c1:0a:40:53:7f:d4:43:88:fa:e4:24:c8:
0d:40:23:d8:92:e8:14:09:6a:ff:28:5c:f3:7a:c3:fb:10:94:
61:2e:37:3e:5d:cf:33:a9:b1:a2:0e:6f:80:71:78:05:b0:82:
f5:3d:08:88:c5:d5:8b:98:06:eb:ec:d4:65:19:a0:93:cd:73:
e7:7d:01:7e:5a:47:47:60:cc:cc:3a:b1:2c:6a:6a:20:69:93:
36:6c:c8:ec:4a:df:f2:bf:d8:c3:20:f5:c4:43:1e:27:12:cf:
84:22:07:60:c5:18:d7:cd:38:5a:e4:5d:32:92:3a:b3:bf:a4:
27:a2:6d:56:30:e3:e5:57:0b:d5:2b:a8:6b:d1:aa:58:5a:f0:
35:54:f1:97:43:93:3e:c3:b5:25:c9:01:33:cb:45:43:8b:ac:
35:6b:e2:3b:a1:9f:c4:71:ec:f5:71:ea:27:ca:b1:36:cc:98:
97:5e:63:0b:3b:00:fa:01:d1:5d:fe:93:fe:1a:6e:be:51:6f:
74:39:d9:e6:b3:43:0c:af:64:de:1a:c5:03:98:f5:9d:8d:af:
43:d5:7d:33:31:2b:8c:04:99:64:ce:a4:a9:c0:67:61:57:6b:
2e:17:96:a2:e9:07:71:fe:55:c7:d9:78:48:07:f5:59:c0:54:
29:ff:33:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:26:12 2026 by rpki-client