
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/92967BBA78F811ECAF1C286CC4F9AE02.roa
File: 92967BBA78F811ECAF1C286CC4F9AE02.roa (raw, json)
Hash identifier: UY+TW+CakUK70O+dQl4u0u6QBrf7eGpruH497eDdUvM=
Subject key identifier: 51:F0:09:F4:01:74:90:49:4B:84:0B:0C:9B:F6:A8:0F:23:A6:2D:EB
Certificate issuer: /CN=A91AC777/serialNumber=8214F51A981441F15FB912225FD7D02FB943AE35
Certificate serial: 069E
Authority key identifier: 82:14:F5:1A:98:14:41:F1:5F:B9:12:22:5F:D7:D0:2F:B9:43:AE:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghT1GpgUQfFfuRIiX9fQL7lDrjU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/92967BBA78F811ECAF1C286CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:47:06 +0000
ROA not before: Fri 02 May 2025 23:03:52 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 133449
IP address blocks: 103.229.128.0/24 maxlen: 24
103.237.143.0/24 maxlen: 24
103.237.168.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.crl
rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghT1GpgUQfFfuRIiX9fQL7lDrjU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 22:15:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1694 (0x69e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC777, serialNumber=8214F51A981441F15FB912225FD7D02FB943AE35
Validity
Not Before: May 2 23:03:52 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3fd0a-1197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:49:75:59:85:2f:7e:f8:2a:03:5c:43:bb:c8:
be:0e:17:fb:47:13:5e:5d:fa:08:f3:9f:e4:44:e2:
e6:ca:35:2f:49:11:c2:a1:72:cf:c6:50:74:c1:9f:
36:57:ec:ed:4e:4a:12:e2:c8:05:d1:29:c1:7e:eb:
b3:db:a6:0d:2c:12:47:52:08:b8:e5:69:d4:dd:08:
8d:ff:a6:72:ee:07:3d:ca:bb:81:05:fa:5a:4e:54:
da:35:29:1c:d8:22:c5:59:d1:41:f9:39:18:5f:3c:
b9:04:19:4d:29:fe:19:e9:83:8d:80:60:1c:9d:7f:
61:24:f0:e9:d2:bb:a5:79:d2:77:24:df:34:52:77:
fd:f5:0f:12:c9:d7:eb:6f:39:9d:06:af:a0:0a:a7:
79:30:fe:67:2b:df:68:a7:a5:21:a4:64:d9:b5:90:
22:de:40:dc:31:af:12:93:26:8a:b5:24:8a:fc:34:
c4:cf:38:2f:d6:d0:71:21:df:d9:7e:43:3e:83:26:
9c:a7:d6:dd:f6:8c:4b:97:7a:7b:b0:65:ed:11:0a:
f1:54:5d:a7:fb:7c:6a:01:7a:c9:8e:f6:34:c5:50:
d0:fd:51:1f:25:42:3d:8c:40:86:2b:33:4e:03:cb:
1a:7a:4b:e4:b1:05:88:b5:c8:85:80:a9:38:49:a5:
be:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F0:09:F4:01:74:90:49:4B:84:0B:0C:9B:F6:A8:0F:23:A6:2D:EB
X509v3 Authority Key Identifier:
keyid:82:14:F5:1A:98:14:41:F1:5F:B9:12:22:5F:D7:D0:2F:B9:43:AE:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghT1GpgUQfFfuRIiX9fQL7lDrjU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/92967BBA78F811ECAF1C286CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.229.128.0/24
103.237.143.0/24
103.237.168.0/23
Signature Algorithm: sha256WithRSAEncryption
99:75:93:ab:b6:aa:1c:95:7b:80:45:43:35:bf:7a:fb:ed:03:
8b:df:b5:ed:a8:49:3e:67:9f:80:58:8c:17:71:52:d0:e9:03:
8f:5a:f7:bb:6f:20:14:ab:80:ec:dc:49:47:08:bd:21:f8:7a:
31:96:d9:3d:80:17:0d:a4:b2:c1:f1:dd:e4:b1:ec:17:19:e6:
34:89:f5:67:49:70:e4:19:45:06:8e:d9:18:df:fd:3f:2a:ff:
5b:95:ef:4f:88:99:91:49:53:b1:3a:f3:6c:78:78:9f:69:50:
c5:3b:ef:46:60:6d:24:e8:ab:12:4e:ab:0f:5e:bc:b5:75:cf:
1f:67:92:21:d5:9f:2b:50:87:33:85:8b:fc:c4:5b:42:c5:44:
92:81:29:dd:c2:11:6c:24:d3:7b:4f:18:47:c0:93:d6:f5:aa:
1b:f7:b1:f4:09:f7:2c:ad:57:a2:40:50:84:96:3a:e9:3a:a9:
51:0a:8f:a1:d8:c8:d9:38:f5:93:14:36:88:1f:8d:32:53:b2:
52:cc:61:86:a3:ab:6b:7c:00:d1:49:ae:15:1f:f2:e5:b1:06:
a7:f9:e2:0c:ba:33:e5:bd:74:13:21:ee:0c:b7:9b:44:21:d7:
02:a8:cc:cb:3f:e4:15:45:57:96:e2:36:de:84:74:f8:ab:21:
af:a0:14:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:39:53 2026 by rpki-client