
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/A99E5658488011EE8113A766C4F9AE02.roa
File: A99E5658488011EE8113A766C4F9AE02.roa (raw, json)
Hash identifier: PrGqSAcgp1HdiIpn0vqqOgThVUF4Ys8AxQ1iGGW7VmI=
Subject key identifier: B7:59:4C:94:D1:3F:4E:C6:4F:1C:A7:87:3D:87:FF:5F:1A:7D:65:50
Certificate issuer: /CN=A91A7369/serialNumber=F90E210FCE7C67A2F2B32DE14EEB05A04B0D10E1
Certificate serial: 01FA
Authority key identifier: F9:0E:21:0F:CE:7C:67:A2:F2:B3:2D:E1:4E:EB:05:A0:4B:0D:10:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/A99E5658488011EE8113A766C4F9AE02.roa
Signing time: Sun 19 Apr 2026 05:39:12 +0000
ROA not before: Sun 19 Apr 2026 05:39:12 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 141047
IP address blocks: 103.94.252.0/22 maxlen: 24
103.155.68.0/23 maxlen: 23
103.155.68.0/24 maxlen: 24
103.155.69.0/24 maxlen: 24
2406:6940::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.crl
rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:14:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506 (0x1fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7369, serialNumber=F90E210FCE7C67A2F2B32DE14EEB05A04B0D10E1
Validity
Not Before: Apr 19 05:39:12 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69e46a80-2b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3b:72:60:8e:a8:64:44:b3:6f:cb:b7:69:5d:
23:4a:0c:cf:25:3d:42:ad:80:73:32:a2:d0:4c:a8:
49:86:1c:c8:08:b5:6a:a5:66:32:05:80:e6:da:c6:
36:b7:2f:83:3a:e1:b0:a0:75:49:62:a4:94:de:b4:
7a:29:db:ec:7e:2f:9b:9c:5c:7c:ac:36:a1:49:52:
7e:08:62:ea:95:db:42:a2:e7:da:86:9d:2e:5f:3c:
71:2b:5d:54:58:08:7f:87:b4:a9:73:dd:5b:bd:a4:
63:f1:6e:13:42:ab:91:54:b1:2f:ba:99:8f:81:20:
69:ce:9c:27:fe:59:c8:07:60:c6:d9:a3:23:14:68:
6d:06:5c:53:46:82:5c:b4:90:d0:4e:a4:e6:a2:78:
f8:dc:89:36:f4:6a:0c:e1:1e:26:cd:9c:8d:d8:3f:
44:5d:32:c4:96:ed:a8:b3:85:d3:d8:07:a3:99:f3:
fb:36:a2:9c:9e:d9:91:56:38:db:c8:d3:36:9d:ec:
5e:39:3c:74:2f:e7:cf:b0:5e:e4:d0:75:b6:24:2f:
a2:bd:bd:b5:37:15:62:bb:7a:eb:1b:3b:8a:31:35:
c8:65:13:02:32:a3:51:a9:0e:07:36:e0:f3:98:2c:
a7:cf:f8:bf:ea:b5:38:03:08:e4:d7:4e:ad:af:7c:
dc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:59:4C:94:D1:3F:4E:C6:4F:1C:A7:87:3D:87:FF:5F:1A:7D:65:50
X509v3 Authority Key Identifier:
keyid:F9:0E:21:0F:CE:7C:67:A2:F2:B3:2D:E1:4E:EB:05:A0:4B:0D:10:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/A99E5658488011EE8113A766C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.94.252.0/22
103.155.68.0/23
IPv6:
2406:6940::/32
Signature Algorithm: sha256WithRSAEncryption
18:fa:db:70:87:9d:c5:c8:c1:76:10:e3:d4:d4:87:af:a4:06:
6f:01:d1:38:cf:78:3d:02:2d:61:de:ce:5c:c1:2f:e2:d3:26:
af:ad:32:1d:b4:4e:81:d7:9e:22:4d:05:52:92:18:71:69:c4:
69:86:6f:cb:49:c7:09:09:7f:de:b3:e8:93:25:6a:00:5d:80:
94:6e:5b:d0:de:fe:2f:36:8b:34:f9:9b:30:5b:ab:a5:09:8a:
5a:50:8a:b2:e2:a8:74:f3:79:6c:9f:56:4e:7f:cf:46:de:5d:
99:db:bc:07:6e:8b:98:b8:09:19:ff:6f:06:5f:8f:87:45:a4:
c9:1c:06:26:bd:ee:f3:21:22:6b:78:11:cb:b5:f3:89:1f:a9:
90:bc:0f:0c:58:74:6b:26:99:48:fb:1f:4c:ec:92:5e:ed:1e:
dc:ae:b5:8a:c5:24:90:36:a7:22:d4:8b:79:ba:13:6a:c9:62:
a3:bc:e5:85:7d:4b:82:74:83:cf:32:96:2b:84:0c:e5:c1:36:
81:f1:d4:6c:d4:58:7f:91:e9:20:bd:29:01:a1:77:5f:57:7b:
ff:24:8e:83:6c:42:7e:bb:ea:46:91:88:61:4b:b2:24:98:bf:
71:b7:d7:0d:23:3a:c9:8c:67:f1:7b:a3:fe:63:f8:6e:2a:75:
25:a8:06:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:03:06 2026 by rpki-client