
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/68ECF3BAEE1911ED9C7CDC63C4F9AE02.roa
File: 68ECF3BAEE1911ED9C7CDC63C4F9AE02.roa (raw, json)
Hash identifier: dQ6l5tQee2U9TKJM4j5OA9rCGVJD8lDuRFAfRLJsHO8=
Subject key identifier: 6C:AF:10:4F:30:48:28:9C:4D:5E:20:3E:AB:2F:E4:0E:33:B3:09:CC
Certificate issuer: /CN=A91A1938/serialNumber=45C9DE254E2E0305D650A50A6BF19268807EF10A
Certificate serial: 0234
Authority key identifier: 45:C9:DE:25:4E:2E:03:05:D6:50:A5:0A:6B:F1:92:68:80:7E:F1:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/68ECF3BAEE1911ED9C7CDC63C4F9AE02.roa
Signing time: Sat 25 Apr 2026 02:36:08 +0000
ROA not before: Sat 25 Apr 2026 02:36:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138680
IP address blocks: 103.136.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl
rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 02:34:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 564 (0x234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1938, serialNumber=45C9DE254E2E0305D650A50A6BF19268807EF10A
Validity
Not Before: Apr 25 02:36:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69ec2898-97ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:83:5a:5e:3e:51:78:6c:44:7f:01:79:f1:
b3:22:b5:75:9d:42:4a:db:b5:91:82:88:1d:1d:31:
61:d0:a0:2f:c9:30:24:ef:85:23:09:ff:05:f0:9d:
ab:be:5f:d5:fc:78:7b:68:74:be:64:1c:be:dd:e8:
f3:4b:30:40:c4:c1:56:f8:2d:e2:6f:71:ee:7a:d3:
c9:48:8e:f6:d9:fa:10:21:9c:ed:d1:1f:15:ef:5b:
b6:3e:7b:b0:50:4b:6f:27:b6:d0:3e:d2:d2:0c:de:
05:68:2e:e5:e4:ec:24:e2:21:29:eb:12:17:14:72:
71:1f:f3:d3:42:66:83:e0:38:75:fb:9b:24:7a:98:
98:d5:87:d7:15:c1:fd:ae:ee:6b:37:c4:b8:aa:68:
46:c9:6e:ab:15:12:af:ce:f5:34:ab:f3:31:36:40:
ff:4a:82:1b:1c:bc:79:ae:e3:b0:dd:b7:4b:65:29:
41:6f:87:cf:3a:0f:5d:7a:54:89:e8:cd:27:ff:11:
b3:23:bf:e4:45:36:01:b6:b2:46:73:d9:8e:32:fc:
5f:69:f9:5a:0f:06:ec:81:4a:04:b8:d1:57:31:fa:
62:f1:3e:2b:fa:38:29:85:21:04:27:4d:c4:d2:d4:
b5:d5:e9:3f:72:33:1d:2f:ac:9b:8a:0b:df:d7:34:
dd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AF:10:4F:30:48:28:9C:4D:5E:20:3E:AB:2F:E4:0E:33:B3:09:CC
X509v3 Authority Key Identifier:
keyid:45:C9:DE:25:4E:2E:03:05:D6:50:A5:0A:6B:F1:92:68:80:7E:F1:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/68ECF3BAEE1911ED9C7CDC63C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.136.86.0/24
Signature Algorithm: sha256WithRSAEncryption
43:dd:2f:fa:2d:36:7e:dd:a7:1f:2f:3f:20:ce:f7:75:cd:63:
c1:ff:eb:1d:83:22:73:bf:ef:b7:4c:24:8e:60:b2:1f:50:f7:
ac:a8:c4:0c:85:05:ee:2f:d0:d9:10:73:e7:e6:fc:c0:f5:0e:
65:da:0a:29:e2:ca:63:ed:d3:43:96:1a:c6:e6:34:8d:52:e1:
c9:72:67:67:82:89:d2:18:72:61:3a:6a:63:fd:e3:53:f7:e6:
f6:ec:74:a0:c6:ea:ec:9a:46:20:24:35:f7:0d:8c:0c:10:b2:
52:fa:72:4d:80:8b:5e:67:78:56:89:a9:c1:bc:03:47:8f:9a:
a7:61:cb:45:a4:df:47:17:4c:0e:43:fe:84:3e:58:70:b5:7b:
51:67:26:1f:53:94:9e:82:eb:b0:c6:84:17:b5:94:2c:b5:76:
31:5c:c1:92:63:5c:6c:24:01:db:ec:fd:fd:5e:e2:37:93:bb:
fb:ea:87:5c:9e:51:a6:cc:8c:c2:07:8b:a8:57:05:b4:7e:3f:
1f:aa:14:62:9a:90:08:10:d6:f2:05:ea:27:1d:26:0f:25:d9:
b8:1a:8a:7a:8b:40:bb:da:47:fd:61:d1:1f:a4:3d:da:ab:bf:
2c:ab:f3:55:70:fc:99:dc:1b:ee:26:ca:d2:e8:16:00:77:23:
a2:59:48:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:57:34 2026 by rpki-client