
$ rpki-client -vvf rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/C8900982059611ECB2896C55C4F9AE02.roa
File: C8900982059611ECB2896C55C4F9AE02.roa (raw, json)
Hash identifier: XdRdJrDsnXBIDFPImXiJdyP4BHiNM7Aw2VJDwyX/Xb0=
Subject key identifier: AB:21:33:06:A5:C1:3F:9B:28:55:53:94:7D:19:EF:7E:D2:1B:B0:31
Certificate issuer: /CN=A91193C1/serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727
Certificate serial: 05BB
Authority key identifier: 14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/C8900982059611ECB2896C55C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:59:06 +0000
ROA not before: Sun 28 Sep 2025 23:56:54 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 146953
IP address blocks: 103.172.38.0/24 maxlen: 24
2407:cac0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl
rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 22:56:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1467 (0x5bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91193C1, serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727
Validity
Not Before: Sep 28 23:56:54 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4543a-30e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:96:41:92:36:3a:c0:a7:18:78:d8:56:c3:20:
4a:b7:62:a1:ad:c6:20:24:9b:5e:d2:61:3b:aa:2f:
20:90:91:19:0b:93:fa:ff:83:46:1f:6b:58:3c:da:
59:cd:1b:42:fe:81:7a:e2:96:46:ef:8b:f5:09:8d:
5f:fe:d1:52:61:43:73:58:54:b6:bb:4a:54:7e:b6:
3b:64:42:25:9b:79:7c:37:58:bd:d3:4c:b8:de:e8:
79:89:14:bc:1a:ef:b6:b9:f8:55:0a:8e:5a:e5:e2:
77:50:81:01:9f:00:ce:55:47:f0:7d:19:5f:7c:6a:
ac:80:09:f5:b2:26:f7:f3:6b:bc:54:c7:8e:ed:37:
8e:1f:94:c8:bc:aa:8f:6e:50:5c:71:33:11:8b:c8:
1a:26:7b:28:b9:e2:ae:89:32:ef:3b:6c:4b:71:18:
ea:9a:6f:10:a5:ce:ce:22:96:c6:63:c5:4f:46:5a:
19:f7:b0:c7:11:64:81:db:6a:69:0f:54:b0:81:31:
7e:79:81:f2:41:be:ce:fc:48:6e:53:b0:79:f8:0c:
ce:bb:f8:83:d4:a1:db:1c:55:d9:4c:cb:b7:b4:7d:
37:34:0f:d7:c2:f0:61:99:56:df:99:b9:86:d3:b1:
f8:07:3c:d3:12:e0:b8:b3:cc:76:81:8b:08:e7:24:
d2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:21:33:06:A5:C1:3F:9B:28:55:53:94:7D:19:EF:7E:D2:1B:B0:31
X509v3 Authority Key Identifier:
keyid:14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/C8900982059611ECB2896C55C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.172.38.0/24
IPv6:
2407:cac0::/32
Signature Algorithm: sha256WithRSAEncryption
84:7c:3a:e4:fc:55:68:20:cd:5f:6b:70:19:36:56:78:16:75:
e6:fd:1d:d0:83:96:9e:53:68:04:6f:52:75:ed:ff:8c:b7:36:
bd:a7:b6:fd:e0:62:fa:bf:d1:ef:7d:e3:80:3c:e1:d8:d3:1c:
41:21:51:13:8a:4e:d3:90:4e:68:11:a7:5b:1c:75:28:12:65:
49:02:a0:6a:aa:09:92:ff:a0:9e:71:d3:6b:50:3a:ee:0f:48:
2e:a1:a5:da:5a:54:ad:8f:c9:82:cd:b9:62:b8:50:e6:5b:6f:
6e:7a:85:34:3f:f6:64:21:22:aa:13:55:1c:bc:f4:06:e1:e3:
a1:08:4a:ba:3a:30:7a:ed:81:c6:a9:ff:17:6a:99:fe:b7:e9:
7a:fc:b7:9e:51:c5:03:9f:b8:a6:ec:07:60:27:71:d1:72:34:
22:b7:29:1a:86:4f:eb:f5:44:9b:8a:7d:39:0e:77:6b:cd:5d:
31:b7:8d:ed:c5:69:4b:4c:50:9d:1f:b6:ba:59:70:92:ca:f7:
71:4f:b0:5b:77:12:98:84:ab:db:99:5d:a0:89:b2:fe:82:52:
c6:9a:19:ac:c5:6a:63:86:84:60:95:a0:87:bf:f1:8a:6a:0b:
1c:56:04:9c:67:c8:91:22:ad:b6:7f:fa:fd:ed:89:a5:b2:4d:
7a:1b:0c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:48:21 2026 by rpki-client