
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/FF9C9380E84D11EFBDF0C033C4F9AE02.roa
File: FF9C9380E84D11EFBDF0C033C4F9AE02.roa (raw, json)
Hash identifier: L6/yynEwdWf1sD2wlmqOrbdnKHzkKjuQTgZ1LmsT/eY=
Subject key identifier: 18:95:80:9F:7E:EE:3D:8B:0D:EE:BE:AA:CB:78:5E:6D:72:69:48:CA
Certificate issuer: /CN=A91A5208/serialNumber=68AD0D0470F6AC6F19C64EEF4094EE0BB5871EDA
Certificate serial: D9
Authority key identifier: 68:AD:0D:04:70:F6:AC:6F:19:C6:4E:EF:40:94:EE:0B:B5:87:1E:DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/FF9C9380E84D11EFBDF0C033C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:39:54 +0000
ROA not before: Fri 13 Jun 2025 06:47:35 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 132835
IP address blocks: 103.250.60.0/23 maxlen: 23
103.250.60.0/24 maxlen: 24
103.250.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl
rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:52:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5208, serialNumber=68AD0D0470F6AC6F19C64EEF4094EE0BB5871EDA
Validity
Not Before: Jun 13 06:47:35 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a5932a-87f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a6:bf:3d:ba:57:c2:74:00:c2:59:fd:9b:ae:
f8:4c:e3:da:5e:c4:63:6c:b2:52:6d:eb:a7:5d:0a:
81:ef:cb:83:df:0d:ba:95:0a:11:1a:a8:21:d9:fb:
a0:88:4d:af:09:0a:4c:8e:bd:ab:56:d4:69:51:1f:
16:b6:76:dd:ff:eb:2d:a1:cb:4c:05:8f:75:8b:7c:
a2:ba:97:76:01:87:39:e0:77:3f:e7:39:15:5a:ec:
d2:f1:4b:81:50:4e:bc:19:36:99:fa:16:a5:dc:45:
f3:3e:79:46:0e:e5:a2:ab:67:dc:dc:89:d0:2f:50:
6c:31:e6:c9:b7:5b:69:94:4f:bb:4a:25:5d:b0:36:
c1:44:6d:95:84:25:32:86:4b:21:c9:a2:49:93:a1:
72:da:c2:64:26:49:e2:9a:76:eb:7c:ba:eb:93:72:
f8:9e:f2:f2:a9:a6:9e:f2:21:5c:4a:08:ea:9a:d8:
1e:92:37:00:84:5a:16:ee:a5:8a:14:82:a4:e8:a8:
07:ef:9f:f5:f9:44:24:af:55:de:ce:d6:ae:06:71:
7d:59:31:ed:0d:fe:79:94:d0:46:23:18:98:a8:ca:
67:04:47:ec:4a:f2:64:a2:03:a9:66:e4:ce:52:eb:
67:95:f3:3c:1e:fc:9b:13:3d:e4:08:9f:e3:9c:3f:
77:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:95:80:9F:7E:EE:3D:8B:0D:EE:BE:AA:CB:78:5E:6D:72:69:48:CA
X509v3 Authority Key Identifier:
keyid:68:AD:0D:04:70:F6:AC:6F:19:C6:4E:EF:40:94:EE:0B:B5:87:1E:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/FF9C9380E84D11EFBDF0C033C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.250.60.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:87:cf:c6:f0:27:80:8b:30:13:4f:f4:d4:59:8c:b6:ca:bc:
3d:5f:cf:11:76:b2:40:13:72:4d:4d:d7:96:7b:cc:ca:09:14:
1e:0f:a6:18:7b:2c:2e:96:46:ba:71:40:6d:fc:61:24:05:45:
54:b7:16:64:d7:ca:d5:a4:d2:2f:5c:44:ae:51:0f:85:e6:bc:
68:13:2e:eb:91:44:bc:06:fa:fa:71:57:fd:dc:47:59:39:9f:
5d:d3:e6:21:77:3d:95:82:51:a1:e0:11:72:52:b6:16:d5:da:
3c:88:a1:61:b1:34:46:a8:e7:b3:6f:ea:af:a5:21:25:fe:74:
83:df:1c:aa:6f:46:9d:71:91:0c:22:03:70:39:e7:09:d8:91:
71:7f:6c:9b:a7:13:48:9b:a6:41:94:38:03:24:19:bd:6c:6a:
38:83:9d:7f:90:8f:1a:cc:3b:10:cc:e1:a3:42:1d:1f:67:25:
de:e3:02:27:cc:a4:59:4f:ee:45:53:50:66:5d:1a:9f:65:7f:
12:67:20:a6:13:08:00:64:72:75:ae:26:c4:94:62:20:00:9f:
79:82:e4:93:7e:be:5e:4f:ce:2e:b1:a5:7f:df:86:e9:3b:a7:
ca:6c:3e:dd:57:62:76:d4:a5:82:0d:da:05:8d:e5:9b:50:e4:
7d:6a:aa:5e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTUyMDgxMTAvBgNVBAUTKDY4QUQwRDA0NzBGNkFDNkYxOUM2NEVFRjQwOTRFRTBC
QjU4NzFFREEwHhcNMjUwNjEzMDY0NzM1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OTMyYS04N2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoKa/PbpXwnQAwln9m674TOPaXsRjbLJSbeunXQqB78uD3w26lQoRGqgh2fug
iE2vCQpMjr2rVtRpUR8Wtnbd/+stoctMBY91i3yiupd2AYc54Hc/5zkVWuzS8UuB
UE68GTaZ+hal3EXzPnlGDuWiq2fc3InQL1BsMebJt1tplE+7SiVdsDbBRG2VhCUy
hkshyaJJk6Fy2sJkJknimnbrfLrrk3L4nvLyqaae8iFcSgjqmtgekjcAhFoW7qWK
FIKk6KgH75/1+UQkr1XeztauBnF9WTHtDf55lNBGIxiYqMpnBEfsSvJkogOpZuTO
UutnlfM8HvybEz3kCJ/jnD93CQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBiVgJ9+
7j2LDe6+qst4Xm1yaUjKMB8GA1UdIwQYMBaAFGitDQRw9qxvGcZO70CU7gu1hx7a
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTIwOC85RTI4NTU3RUU0
RUUxMUVGQjFFRDc2MEVDNEY5QUUwMi9hSzBOQkhEMnJHOFp4azd2UUpUdUM3V0hI
dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FLME5CSEQyckc4WnhrN3ZRSlR1QzdXSEh0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTUyMDgvOUUyODU1N0VFNEVFMTFFRkIxRUQ3NjBFQzRGOUFFMDIvRkY5QzkzODBF
ODREMTFFRkJERjBDMDMzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ/o8MA0GCSqGSIb3DQEBCwUAA4IBAQC4h8/G8CeAizATT/TUWYy2
yrw9X88RdrJAE3JNTdeWe8zKCRQeD6YYeywulka6cUBt/GEkBUVUtxZk18rVpNIv
XESuUQ+F5rxoEy7rkUS8Bvr6cVf93EdZOZ9d0+Yhdz2VglGh4BFyUrYW1do8iKFh
sTRGqOezb+qvpSEl/nSD3xyqb0adcZEMIgNwOecJ2JFxf2ybpxNIm6ZBlDgDJBm9
bGo4g51/kI8azDsQzOGjQh0fZyXe4wInzKRZT+5FU1BmXRqfZX8SZyCmEwgAZHJ1
ribElGIgAJ95guSTfr5eT84usaV/34bpO6fKbD7dV2J21KWCDdoFjeWbUOR9aqpe
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:04:40 2026 by rpki-client