
$ rpki-client -vvf rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/86BB53D0105611EB85F56114C4F9AE02.roa
File: 86BB53D0105611EB85F56114C4F9AE02.roa (raw, json)
Hash identifier: 0FLsVFnSdoOS4qQiWQsx1o6McKf51GhqbIOg2OyHSDk=
Subject key identifier: 4D:C3:FA:1D:E6:73:73:03:D9:E4:21:50:9A:F8:FE:97:2A:52:FB:75
Certificate issuer: /CN=A913990E/serialNumber=F5D047490DE3A4EDCFDC37F6ECAB94938DA7C6F6
Certificate serial: 0860
Authority key identifier: F5:D0:47:49:0D:E3:A4:ED:CF:DC:37:F6:EC:AB:94:93:8D:A7:C6:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/86BB53D0105611EB85F56114C4F9AE02.roa
Signing time: Sun 28 Jun 2026 21:26:02 +0000
ROA not before: Sun 28 Jun 2026 21:26:02 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 136556
IP address blocks: 103.92.160.0/24 maxlen: 24
103.92.161.0/24 maxlen: 24
2001:df1:2500::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.crl
rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:24:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2144 (0x860)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913990E, serialNumber=F5D047490DE3A4EDCFDC37F6ECAB94938DA7C6F6
Validity
Not Before: Jun 28 21:26:02 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a41916a-29e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b8:f9:6a:5a:50:11:3a:c1:75:0a:00:37:63:
88:a6:d7:76:23:94:4c:d8:ea:1c:2f:9c:5b:89:59:
ea:42:52:e3:22:04:bb:ed:54:59:62:27:55:b0:ce:
88:d2:59:78:66:be:d1:7a:ee:a9:d1:37:f7:4d:ed:
76:c5:ea:73:bc:8e:6b:66:51:f4:33:ab:31:81:a3:
55:a5:3a:6d:fb:95:74:d9:44:2e:f4:29:1e:53:0e:
5e:70:0b:a6:8c:0b:5d:55:ba:69:f3:b4:59:37:29:
2c:c1:fc:2c:81:77:40:ba:b2:52:6f:01:aa:11:70:
8c:50:d1:d8:fd:6c:72:dc:54:6a:7f:99:80:23:9a:
3e:2a:c5:c3:b4:63:00:4d:f3:1b:76:1b:b0:b4:f5:
5f:1b:be:e3:22:fa:33:b0:aa:c8:92:db:08:8a:70:
34:01:81:7c:ce:0d:b1:88:97:6c:8b:ed:d6:a8:f2:
1d:10:e3:64:90:78:90:56:b6:27:ec:b7:1e:77:d0:
20:18:02:f3:1b:44:61:67:39:a5:2a:d3:21:b6:ca:
f4:f7:4e:01:b7:00:38:c1:41:09:92:f3:07:da:72:
52:ae:3c:33:64:cc:f7:7a:97:ff:56:95:6e:10:45:
94:af:aa:8d:c1:51:c1:f9:77:87:8d:a0:a1:56:20:
43:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C3:FA:1D:E6:73:73:03:D9:E4:21:50:9A:F8:FE:97:2A:52:FB:75
X509v3 Authority Key Identifier:
keyid:F5:D0:47:49:0D:E3:A4:ED:CF:DC:37:F6:EC:AB:94:93:8D:A7:C6:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/86BB53D0105611EB85F56114C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.92.160.0/23
IPv6:
2001:df1:2500::/48
Signature Algorithm: sha256WithRSAEncryption
7e:4b:98:20:30:c3:26:94:03:32:db:8d:ea:e6:b8:46:d2:80:
a4:ce:a9:91:07:d6:63:f3:0c:84:bf:d4:58:15:c6:3a:f1:33:
9c:98:ed:2b:30:1a:d2:bf:79:0a:9d:2e:10:e2:94:a4:7b:ed:
c5:f6:6a:95:41:15:bb:2f:02:79:14:22:1e:6e:4f:81:83:76:
b9:a0:21:f7:fe:4b:56:eb:e8:6e:6b:86:47:d7:60:52:1b:b9:
4b:f2:ab:f2:91:b6:7c:03:ca:e6:67:3d:9a:a8:08:5f:b5:be:
0f:66:1b:fa:03:74:fd:3c:c3:bc:fb:f6:5a:44:39:30:13:23:
62:c0:10:9d:1a:2d:11:f4:b8:36:a4:31:90:a6:18:c5:ad:9e:
7b:38:af:49:96:69:7b:10:8d:82:4a:23:0f:f2:ee:2d:ab:2d:
27:7c:6a:27:0f:57:03:d3:1b:2a:45:aa:e4:b6:ed:97:3e:a8:
f6:5b:08:2d:7b:f6:19:ed:eb:5b:7a:82:33:78:0f:fa:00:13:
31:a3:1e:67:2b:34:4d:b9:71:77:3a:29:6f:7c:ae:e4:90:f9:
3c:54:79:7a:7b:01:82:e2:76:40:7b:47:5b:4d:82:39:8e:3e:
10:04:ed:fd:fd:30:d8:54:a1:05:d6:b7:7c:33:6e:c6:a8:79:
79:b1:03:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:10:08 2026 by rpki-client