
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/F971AC8CE42B11EFACAC6F3AC4F9AE02.roa
File: F971AC8CE42B11EFACAC6F3AC4F9AE02.roa (raw, json)
Hash identifier: u8Fyj1tWcsm/7xrez2wrKB0N+SmqsPV3ABuiDRjPFkw=
Subject key identifier: 67:7D:70:7F:50:C5:72:07:F7:D3:CD:AD:F1:9C:7D:20:78:C0:5A:0C
Certificate issuer: /CN=A91BB7DE/serialNumber=57C58161BDEC4DC79EF48E205F2B8D12028F0AEA
Certificate serial: E9
Authority key identifier: 57:C5:81:61:BD:EC:4D:C7:9E:F4:8E:20:5F:2B:8D:12:02:8F:0A:EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/F971AC8CE42B11EFACAC6F3AC4F9AE02.roa
Signing time: Mon 02 Mar 2026 15:07:16 +0000
ROA not before: Wed 07 May 2025 07:14:02 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 400619
IP address blocks: 183.90.186.0/23 maxlen: 23
183.90.186.0/24 maxlen: 24
183.90.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.crl
rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233 (0xe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB7DE, serialNumber=57C58161BDEC4DC79EF48E205F2B8D12028F0AEA
Validity
Not Before: May 7 07:14:02 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a5a7a3-5f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7e:55:97:79:63:14:f4:40:16:1a:e6:48:e9:
11:32:06:b1:3e:4f:1a:7f:07:1b:9d:5d:53:60:75:
87:c2:93:74:a3:08:09:49:07:54:e3:f2:6b:ae:58:
4d:0d:73:be:8c:97:79:9f:1e:bc:da:93:d6:e9:20:
92:8a:c9:dd:c6:ae:1d:15:72:63:2b:2f:32:40:58:
ef:55:d1:72:ee:e3:1e:e0:ad:ba:a5:0b:46:a8:44:
2d:bf:ee:76:bd:17:1d:6d:75:2c:c5:cb:01:0c:d6:
b0:e2:5e:b5:b9:39:6e:e5:ed:a0:26:ae:27:8a:8d:
1d:ff:23:c1:7c:fa:4b:d9:0c:82:8f:47:fd:bc:68:
27:fa:58:62:e9:e5:ae:f8:4d:8d:aa:a3:4d:2b:17:
a7:eb:1b:4d:b2:5b:7d:78:26:1a:ae:23:aa:c7:d7:
ee:72:f1:32:65:dc:51:48:85:6b:99:3c:3b:13:b2:
62:e2:b8:37:8d:68:60:16:be:59:d9:27:ea:95:fa:
08:c3:91:85:cb:d8:cd:2d:9d:2f:18:05:77:97:5f:
5e:02:db:26:6c:53:eb:5a:c7:b6:38:f3:eb:9c:24:
c4:b0:e6:b0:05:e6:4c:cd:74:10:e3:2d:c8:36:03:
27:98:bd:41:d8:9d:38:32:4a:6a:02:7d:42:3f:6f:
e4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7D:70:7F:50:C5:72:07:F7:D3:CD:AD:F1:9C:7D:20:78:C0:5A:0C
X509v3 Authority Key Identifier:
keyid:57:C5:81:61:BD:EC:4D:C7:9E:F4:8E:20:5F:2B:8D:12:02:8F:0A:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/F971AC8CE42B11EFACAC6F3AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
183.90.186.0/23
Signature Algorithm: sha256WithRSAEncryption
99:38:27:13:e7:31:1b:f4:83:17:d4:6a:02:b7:36:8d:2d:10:
71:84:15:5a:cb:d3:59:4f:a2:a5:5c:8a:f0:3a:e7:11:36:c7:
ab:b3:7b:b9:32:1e:c4:c5:04:e3:e1:23:b2:c7:07:e3:6a:68:
61:d3:64:08:0c:29:bb:9d:52:7d:27:83:09:14:40:b6:bc:57:
47:02:93:8a:46:fd:d4:bb:cb:da:1a:77:f1:d7:81:a8:9d:7c:
f4:fd:57:55:3e:5f:6c:ee:03:cf:84:d8:66:e9:07:cf:81:cc:
e6:f2:ca:b9:b3:b3:63:f3:a7:28:10:05:b5:25:ae:df:63:f4:
b9:92:0f:cc:6f:6c:28:1f:2e:fc:07:23:b1:e7:97:04:9f:d0:
c0:75:5a:03:aa:d7:04:9e:3f:cb:e9:8c:27:66:39:6e:58:25:
57:95:89:13:2a:7e:cf:f4:a9:5e:98:5b:03:fa:e5:14:1c:78:
89:8f:52:b7:7d:b8:58:55:70:74:29:cb:61:17:eb:c5:2b:31:
ee:e4:ff:89:5d:06:2e:6d:8a:96:89:ca:e8:5d:fa:da:21:70:
00:b3:16:08:33:57:a6:33:9e:c3:c7:b7:76:49:2c:e8:0c:fd:
fa:2e:7b:cc:87:69:11:79:56:a0:2a:67:77:dc:f3:c6:2b:08:
1e:d8:dc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:21:21 2026 by rpki-client