
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF7D7/66083F06446A11F1A5622F6E97833773/86AA0D8E446F11F1B67309509A833773.roa
File: 86AA0D8E446F11F1B67309509A833773.roa (raw, json)
Hash identifier: zXvF741bTXRyFYONSYuKFzrQXEfaqz6hEnhbX238MYw=
Subject key identifier: 72:B6:CA:B2:B5:C8:FB:7E:DD:BD:BC:1A:BA:61:FF:74:EB:C0:D6:F9
Certificate issuer: /CN=A91BF7D7/serialNumber=9BC5F9BB08E90969AA1D1EEF39DD6E41F3B07791
Certificate serial: 03
Authority key identifier: 9B:C5:F9:BB:08:E9:09:69:AA:1D:1E:EF:39:DD:6E:41:F3:B0:77:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8X5uwjpCWmqHR7vOd1uQfOwd5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF7D7/66083F06446A11F1A5622F6E97833773/86AA0D8E446F11F1B67309509A833773.roa
Signing time: Thu 30 Apr 2026 08:35:22 +0000
ROA not before: Thu 30 Apr 2026 08:35:22 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 40065
IP address blocks: 103.135.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF7D7/66083F06446A11F1A5622F6E97833773/m8X5uwjpCWmqHR7vOd1uQfOwd5E.crl
rsync://rpki.apnic.net/member_repository/A91BF7D7/66083F06446A11F1A5622F6E97833773/m8X5uwjpCWmqHR7vOd1uQfOwd5E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8X5uwjpCWmqHR7vOd1uQfOwd5E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF7D7, serialNumber=9BC5F9BB08E90969AA1D1EEF39DD6E41F3B07791
Validity
Not Before: Apr 30 08:35:22 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69f3144a-18dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e2:d8:f7:77:a9:11:51:0e:a0:d8:cf:2c:db:
76:b1:98:6b:b5:2f:04:5c:75:e3:c8:35:44:33:63:
b7:85:c7:4c:70:8c:81:93:c3:e1:35:f7:2a:d6:98:
43:03:dc:06:02:62:a1:94:b0:8b:3d:50:95:83:fe:
4e:e1:b3:61:1e:83:41:14:3b:77:2d:6d:44:5d:81:
fd:e3:0f:26:6a:87:5c:e0:63:b5:8a:83:99:b3:8a:
9b:e5:5d:1a:33:03:ce:e2:fc:20:43:56:bb:0c:41:
9a:01:b8:ce:af:88:32:08:34:26:03:db:8e:9b:0c:
18:70:f5:73:d4:50:37:e0:4a:51:7f:b9:69:6c:9b:
39:bc:05:ca:f9:78:c3:b9:26:cb:4e:6a:fc:d3:c9:
9e:65:50:5a:0f:5c:11:89:01:36:a1:c1:8f:c6:01:
ed:cd:eb:1b:ec:a2:e7:43:8a:0b:b6:4a:96:bb:98:
09:f5:b3:fd:c1:ce:7a:81:7d:da:fb:c1:1e:c6:a8:
aa:02:3e:77:0c:0b:91:03:b2:09:36:db:18:71:0d:
96:45:7e:f9:7c:9b:d2:88:4a:ac:18:7e:f2:52:47:
6b:d6:1a:6e:dc:ec:3c:be:a9:e7:ad:11:90:cb:2b:
1d:8b:da:66:b9:10:c8:e6:87:62:b9:5d:1d:e1:8f:
75:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B6:CA:B2:B5:C8:FB:7E:DD:BD:BC:1A:BA:61:FF:74:EB:C0:D6:F9
X509v3 Authority Key Identifier:
keyid:9B:C5:F9:BB:08:E9:09:69:AA:1D:1E:EF:39:DD:6E:41:F3:B0:77:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF7D7/66083F06446A11F1A5622F6E97833773/m8X5uwjpCWmqHR7vOd1uQfOwd5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8X5uwjpCWmqHR7vOd1uQfOwd5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF7D7/66083F06446A11F1A5622F6E97833773/86AA0D8E446F11F1B67309509A833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.135.32.0/22
Signature Algorithm: sha256WithRSAEncryption
38:2b:9e:a0:df:4e:80:3c:86:96:40:d9:30:ab:a1:0e:02:89:
95:85:7f:39:f3:db:5b:a8:89:fb:71:ee:0e:9e:82:d1:09:0b:
5b:a9:4f:33:34:b0:97:6e:cb:97:99:8f:3f:4a:1d:28:d8:e2:
68:e1:fe:85:86:24:10:37:a0:97:3e:7f:9a:91:c9:e5:ca:f7:
b7:87:f7:70:94:d3:e7:18:95:43:cd:6c:f9:5e:5f:86:f5:e7:
41:83:96:bc:9b:17:5a:4d:a8:1f:97:3c:27:f7:8a:e5:55:5e:
db:a5:47:26:7a:19:42:a9:cb:03:1c:f7:7a:e8:29:97:bb:f8:
43:68:2b:08:b7:24:eb:d8:37:43:e5:1f:c9:ce:6b:05:7e:a3:
ff:4a:33:18:55:9f:2b:fc:4a:55:39:dd:44:a2:90:9f:42:02:
4f:e5:b7:b4:e0:dd:1d:af:f1:74:a3:4e:66:f9:67:99:bd:28:
38:92:92:2b:d2:6d:d2:a6:9f:2a:2c:a9:2d:84:cd:46:a2:d1:
fd:7f:c9:0f:9d:ce:38:3c:0e:b2:82:8e:60:d5:fd:dc:f9:ee:
91:a6:46:40:bf:01:c8:42:d1:51:06:04:90:36:14:3d:70:0e:
ab:71:51:c7:b4:20:a1:24:e9:c9:b5:b9:90:0f:34:d0:99:ac:
b6:19:b0:25
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
RjdENzExMC8GA1UEBRMoOUJDNUY5QkIwOEU5MDk2OUFBMUQxRUVGMzlERDZFNDFG
M0IwNzc5MTAeFw0yNjA0MzAwODM1MjJaFw0yNzA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5ZjMxNDRhLTE4ZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCf4tj3d6kRUQ6g2M8s23axmGu1LwRcdePINUQzY7eFx0xwjIGTw+E19yrWmEMD
3AYCYqGUsIs9UJWD/k7hs2Eeg0EUO3ctbURdgf3jDyZqh1zgY7WKg5mzipvlXRoz
A87i/CBDVrsMQZoBuM6viDIINCYD246bDBhw9XPUUDfgSlF/uWlsmzm8Bcr5eMO5
JstOavzTyZ5lUFoPXBGJATahwY/GAe3N6xvsoudDigu2Spa7mAn1s/3BznqBfdr7
wR7GqKoCPncMC5EDsgk22xhxDZZFfvl8m9KISqwYfvJSR2vWGm7c7Dy+qeetEZDL
Kx2L2ma5EMjmh2K5XR3hj3VZAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUcrbKsrXI
+37dvbwaumH/dOvA1vkwHwYDVR0jBBgwFoAUm8X5uwjpCWmqHR7vOd1uQfOwd5Ew
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGN0Q3LzY2MDgzRjA2NDQ2
QTExRjFBNTYyMkY2RTk3ODMzNzczL204WDV1d2pwQ1dtcUhSN3ZPZDF1UWZPd2Q1
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbThYNXV3anBDV21xSFI3dk9kMXVRZk93ZDVFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjdENy82NjA4M0YwNjQ0NkExMUYxQTU2MjJGNkU5NzgzMzc3My84NkFBMEQ4RTQ0
NkYxMUYxQjY3MzA5NTA5QTgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJnhyAwDQYJKoZIhvcNAQELBQADggEBADgrnqDfToA8hpZA2TCroQ4C
iZWFfznz21uoiftx7g6egtEJC1upTzM0sJduy5eZjz9KHSjY4mjh/oWGJBA3oJc+
f5qRyeXK97eH93CU0+cYlUPNbPleX4b150GDlrybF1pNqB+XPCf3iuVVXtulRyZ6
GUKpywMc93roKZe7+ENoKwi3JOvYN0PlH8nOawV+o/9KMxhVnyv8SlU53USikJ9C
Ak/lt7Tg3R2v8XSjTmb5Z5m9KDiSkivSbdKmnyosqS2EzUai0f1/yQ+dzjg8DrKC
jmDV/dz57pGmRkC/AchC0VEGBJA2FD1wDqtxUce0IKEk6cm1uZAPNNCZrLYZsCU=
-----END CERTIFICATE-----
Generated at Wed May 13 12:41:53 2026 by rpki-client