
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/692ABA5A09DF11EAA6052433C4F9AE02.roa
File: 692ABA5A09DF11EAA6052433C4F9AE02.roa (raw, json)
Hash identifier: 1o/k0GFfoHNDOP+txbRSyPkBhEUl5bL6aMEbGrj1NA4=
Subject key identifier: 28:D1:B7:C7:9F:68:1E:11:7C:35:4E:B7:AE:B3:96:E0:06:1C:31:B4
Certificate issuer: /CN=A91A8859/serialNumber=4A46BF52B1930647FD25B796926DBC61404BE3ED
Certificate serial: 0CDE
Authority key identifier: 4A:46:BF:52:B1:93:06:47:FD:25:B7:96:92:6D:BC:61:40:4B:E3:ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/692ABA5A09DF11EAA6052433C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:41:02 +0000
ROA not before: Mon 12 Jan 2026 18:15:15 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 133191
IP address blocks: 103.133.213.0/24 maxlen: 24
103.133.236.0/23 maxlen: 24
103.255.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.crl
rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 18:10:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3294 (0xcde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8859, serialNumber=4A46BF52B1930647FD25B796926DBC61404BE3ED
Validity
Not Before: Jan 12 18:15:15 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a44ffd-2189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:89:d8:fa:28:d5:67:96:9a:e7:17:45:13:68:
c0:f5:bc:99:1c:08:c6:d2:46:06:87:82:f2:2d:1a:
2b:c4:ac:98:47:df:ef:be:f2:2e:b4:d2:ee:02:f2:
ab:52:a7:7f:92:f1:88:e2:70:60:ce:3a:3e:6e:84:
a2:03:25:ce:fb:0f:5b:40:4c:82:af:8f:07:0f:37:
2a:76:94:82:1b:f9:c6:4b:a8:1a:ff:aa:bc:98:b8:
e7:44:a0:1f:22:55:07:50:98:b6:c7:fb:69:a5:03:
ce:fb:89:00:b9:5a:8e:a4:8c:87:91:76:4b:9e:0a:
bb:60:b9:2a:80:cd:83:8e:8a:40:3e:e6:4c:ad:5b:
4b:6d:c3:16:26:c3:d9:c6:4e:b8:83:ef:59:96:cb:
e9:fb:a9:74:e5:64:c4:21:db:83:1f:65:be:35:10:
b4:3f:55:37:e4:25:20:69:f9:0f:e2:90:37:35:0f:
58:49:88:34:84:32:b8:b7:a8:04:1d:6e:c3:a7:d4:
06:2b:b9:e9:a9:49:81:55:44:03:8c:bb:8f:81:f8:
50:e3:f0:0d:20:11:a3:bd:e1:39:85:4d:e7:46:a5:
37:2f:59:c4:70:48:ec:2e:8f:0e:84:31:df:23:b3:
90:4c:38:87:cd:83:8d:e9:9d:7d:5f:d2:3f:2a:b9:
82:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D1:B7:C7:9F:68:1E:11:7C:35:4E:B7:AE:B3:96:E0:06:1C:31:B4
X509v3 Authority Key Identifier:
keyid:4A:46:BF:52:B1:93:06:47:FD:25:B7:96:92:6D:BC:61:40:4B:E3:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/692ABA5A09DF11EAA6052433C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.133.213.0/24
103.133.236.0/23
103.255.30.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:00:6e:49:c1:f7:27:f9:62:0e:ed:f5:1a:cb:fe:b2:c4:4d:
92:92:2a:92:af:e0:7f:30:00:4b:cb:e3:e5:97:62:90:49:4f:
f2:ae:cc:4c:b9:71:8c:67:b8:ba:bf:d5:3a:a1:ed:9c:c0:61:
70:b1:3e:70:a7:b0:f8:0d:5e:9d:bb:bf:02:ae:5b:b2:70:ba:
43:75:1f:96:a2:9f:7d:5b:ce:8f:88:b6:01:07:f1:56:13:ba:
2e:a9:4f:38:49:b1:80:a3:ea:a0:b7:85:d0:64:3c:8d:fa:d1:
8a:4b:a7:eb:6f:ea:4e:1a:80:54:19:cc:50:4f:ac:f9:fd:10:
bc:f6:67:bc:48:61:9f:e8:a1:e1:b7:5e:6f:1e:2b:fc:fe:ca:
95:53:c5:35:9e:61:dd:af:b5:ac:99:1c:60:f0:6d:0b:1c:a1:
69:35:aa:b3:db:83:00:6c:15:0a:22:fd:75:62:5e:fb:52:df:
38:bd:8c:b2:1a:f2:78:1b:78:c8:6b:e1:bf:38:62:22:6a:27:
05:43:79:ed:5a:bf:92:79:2c:6f:7b:70:b5:24:3c:5c:91:03:
a8:95:d2:56:c8:a5:c7:7b:ac:d0:bd:46:ee:c4:3d:56:a7:cf:
22:f8:d2:ca:94:17:d4:56:13:95:52:10:3d:3a:d2:4b:ca:6e:
c8:f3:80:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:41:12 2026 by rpki-client