
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/90AB89E4547511EEB44F391AC4F9AE02.roa
File: 90AB89E4547511EEB44F391AC4F9AE02.roa (raw, json)
Hash identifier: kEf3e06ZfAqbB9aARItvXEWnGEj9ABmGarhckew4SMQ=
Subject key identifier: EE:86:2D:DA:1D:18:CE:BE:44:91:8D:F5:92:D9:6B:6D:22:19:1A:24
Certificate issuer: /CN=A91444E5/serialNumber=1608BF4624A7E1B723228B4661DD661E70AEF3F4
Certificate serial: 05D9
Authority key identifier: 16:08:BF:46:24:A7:E1:B7:23:22:8B:46:61:DD:66:1E:70:AE:F3:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/90AB89E4547511EEB44F391AC4F9AE02.roa
Signing time: Fri 28 Aug 2026 23:44:16 +0000
ROA not before: Fri 28 Aug 2026 23:44:15 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 150389
IP address blocks: 103.170.208.0/23 maxlen: 23
103.170.208.0/24 maxlen: 24
103.170.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl
rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:41:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1497 (0x5d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91444E5, serialNumber=1608BF4624A7E1B723228B4661DD661E70AEF3F4
Validity
Not Before: Aug 28 23:44:15 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a921d4f-e5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c7:fc:40:35:aa:0d:ea:5f:fc:44:08:1e:4e:
5c:04:12:da:1a:6b:58:f0:a2:b3:76:1d:21:7a:9b:
ca:66:ac:47:46:95:f7:fd:21:34:9c:61:4d:9d:ce:
82:ef:96:44:14:19:9b:ba:57:b1:81:74:f1:16:94:
cf:d4:02:18:61:aa:77:13:7b:66:f6:23:f2:7c:ce:
02:81:b2:4c:ae:89:1e:87:de:17:fc:aa:6d:1f:bc:
8f:e2:1d:5f:d1:a9:34:2b:56:bc:27:24:bb:a1:97:
1a:6e:b6:1b:49:ee:be:f2:cd:79:d6:11:f1:f1:50:
ee:73:9b:eb:95:09:43:72:5f:2d:da:08:6e:88:34:
04:c4:7c:dc:8c:d4:9c:19:42:67:4e:18:d5:0a:ba:
06:db:82:fc:bd:c9:c8:63:b6:b6:c4:31:5b:b6:c7:
5e:8f:5e:d4:2e:e2:01:04:6a:1d:47:03:7d:3a:9f:
54:88:53:92:96:b6:03:bc:60:1d:1c:07:ac:1b:5b:
74:0d:8b:7e:b9:09:d5:94:31:d2:ba:cb:85:17:23:
e0:15:e4:68:40:54:50:0d:66:4e:da:90:72:da:a1:
7f:f8:b8:fd:27:c5:d7:39:96:4b:45:7d:a8:77:1a:
ca:d9:e6:24:e2:0d:e0:a8:2b:f3:74:76:11:d0:a2:
6a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:86:2D:DA:1D:18:CE:BE:44:91:8D:F5:92:D9:6B:6D:22:19:1A:24
X509v3 Authority Key Identifier:
keyid:16:08:BF:46:24:A7:E1:B7:23:22:8B:46:61:DD:66:1E:70:AE:F3:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/90AB89E4547511EEB44F391AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.170.208.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:c9:cb:d2:f0:f7:03:36:1f:90:d4:16:cb:46:fe:9c:7b:24:
36:1d:28:d5:e8:6d:18:86:63:90:d6:66:5f:58:87:ba:a1:70:
18:82:98:bb:4b:fb:dc:4e:39:0d:d9:c3:66:32:14:6c:cb:13:
3c:37:76:94:be:4f:bd:10:be:7a:12:b7:42:d2:fa:fe:60:8f:
fd:48:a3:a3:ca:44:3b:02:48:f9:6d:93:b4:c2:40:73:e8:32:
5e:c4:cd:38:fb:77:04:4d:a4:4d:2c:59:b6:6f:1c:e3:5b:1d:
96:8d:44:18:bb:53:c9:16:e6:8d:79:d6:fd:5f:1a:68:be:d6:
68:97:29:80:cf:f0:c9:be:4c:10:6c:4a:5b:7d:30:f4:0a:d6:
b3:79:a6:e5:a1:ea:6b:82:b2:30:ec:01:ca:0f:3b:e1:02:6a:
ab:b1:a6:80:5b:5a:1c:fe:93:a6:ef:6a:e6:47:da:4e:ce:5c:
b6:0a:85:4d:f0:6b:de:6b:92:80:2c:d8:58:59:06:88:b7:c2:
57:69:28:11:67:18:bc:d4:21:67:5b:18:12:9c:1d:97:f9:88:
5e:ee:17:6e:af:eb:95:45:76:14:98:86:d1:f0:9f:79:b0:97:
10:a1:36:d4:39:40:f8:cd:57:64:e7:98:64:72:23:a6:b3:04:
9c:b2:59:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:18:13 2026 by rpki-client