
$ rpki-client -vvf rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/91CB02E0DBDD11F0B3C660C858641951.roa
File: 91CB02E0DBDD11F0B3C660C858641951.roa (raw, json)
Hash identifier: IDruivghScNBn7wWElCYAZJ9mPRaLr5FUKmSCdHCH3Y=
Subject key identifier: E2:35:FE:A3:7F:9A:9B:C9:5A:73:B9:7B:D6:2B:6E:EB:EA:4D:4A:32
Certificate issuer: /CN=A91454A8/serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D
Certificate serial: 08F3
Authority key identifier: 9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/91CB02E0DBDD11F0B3C660C858641951.roa
Signing time: Sun 10 May 2026 12:17:14 +0000
ROA not before: Sun 10 May 2026 12:17:14 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 146943
IP address blocks: 43.242.224.0/22 maxlen: 24
103.35.164.0/23 maxlen: 23
103.150.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl
rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:26:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2291 (0x8f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91454A8, serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D
Validity
Not Before: May 10 12:17:14 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a007749-ce49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:07:37:0e:83:ec:80:c8:9c:56:44:ab:e3:
f9:82:de:ab:9e:de:3c:43:47:ed:f8:96:9f:d1:82:
2b:d9:c6:ce:26:66:83:b7:f5:3e:4c:e7:ef:69:2c:
82:23:16:3f:66:7c:b2:b0:eb:f4:4c:b1:49:20:55:
40:45:d6:d5:44:79:34:4e:3a:76:e9:b2:20:45:28:
4a:92:58:20:85:9c:12:69:16:ff:92:07:16:00:bf:
10:b3:24:5e:4c:03:89:40:7c:75:0e:6a:65:c8:08:
d2:e3:5d:1e:8e:61:00:60:04:25:da:76:64:fd:38:
50:a0:ef:54:66:74:c1:b2:a0:b6:e5:47:a0:99:0c:
31:e9:fc:73:7e:09:9b:1f:6f:17:d1:4d:61:26:f9:
34:f8:d7:5d:94:bb:81:5a:25:c9:c8:9f:6f:9f:a4:
e1:4a:d6:d1:9e:6a:c6:c8:d5:3f:37:d5:fa:bf:75:
22:50:66:dd:46:24:e3:58:71:cc:c5:e2:88:1b:df:
b5:b8:64:c7:3c:d1:dd:da:a9:8c:32:8e:32:ec:53:
82:90:db:64:47:05:e5:25:d5:37:71:80:46:eb:54:
db:c9:24:8e:1f:1b:bf:b3:af:12:a9:41:f0:6b:de:
bb:9b:1d:3d:18:a4:db:d6:c6:a5:4d:03:d5:00:e2:
ae:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:35:FE:A3:7F:9A:9B:C9:5A:73:B9:7B:D6:2B:6E:EB:EA:4D:4A:32
X509v3 Authority Key Identifier:
keyid:9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/91CB02E0DBDD11F0B3C660C858641951.roa
sbgp-ipAddrBlock: critical
IPv4:
43.242.224.0/22
103.35.164.0/23
103.150.187.0/24
Signature Algorithm: sha256WithRSAEncryption
99:b5:10:cc:f0:76:a5:b1:7e:9b:64:0d:73:ce:28:41:85:05:
67:4d:83:57:3a:d5:a4:30:52:55:20:44:48:a5:40:30:b5:29:
bc:2e:0e:0c:18:59:b6:de:dd:64:cf:fe:be:15:ca:6c:7f:37:
33:45:84:a8:44:69:e7:73:8e:a6:49:92:57:7a:c5:2e:0d:1e:
d3:af:1c:18:b3:b1:12:c1:c4:07:97:45:7a:32:63:78:9f:6e:
d3:a2:6d:34:cd:e1:09:2f:d1:f5:07:70:33:63:4d:cf:a0:b8:
f6:bb:ae:84:2d:67:a7:f4:5f:14:fd:4f:d2:44:63:fb:20:b8:
d3:18:cb:03:6e:08:71:28:60:0f:cc:25:f4:3d:2f:93:c1:16:
98:4a:3e:82:f6:b9:40:60:f5:56:bd:98:45:36:f5:95:ff:15:
ff:cf:e0:ad:1a:a6:d1:08:17:cc:71:9f:49:eb:bc:75:92:ab:
02:5a:3e:75:aa:d1:27:9b:4c:6d:66:20:1a:cc:cc:56:6d:83:
cd:21:68:a5:dc:d0:b1:47:77:e5:d2:76:0f:38:2b:7f:9e:70:
54:2f:df:29:f4:a7:e6:e7:f6:a0:f4:e5:f6:ed:b8:54:e0:9f:
3c:4b:2a:a0:84:b6:d7:29:b1:4e:5d:cf:bc:15:85:f2:13:f6:
85:e1:f2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:46:13 2026 by rpki-client