
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/CC26BAE6895E11F08FE3390FC4F9AE02.roa
File: CC26BAE6895E11F08FE3390FC4F9AE02.roa (raw, json)
Hash identifier: gMWeQiLTy0ha5JRkRDRAzKIPkA2Mg4zoy04sliHlLwQ=
Subject key identifier: 99:C6:29:66:90:40:09:30:0B:F0:0D:4C:51:0E:E0:F3:E4:FD:A0:4C
Certificate issuer: /CN=A91C731A/serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F
Certificate serial: 082F
Authority key identifier: 0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/CC26BAE6895E11F08FE3390FC4F9AE02.roa
Signing time: Fri 20 Mar 2026 21:27:26 +0000
ROA not before: Fri 20 Mar 2026 21:27:26 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 40605
IP address blocks: 103.85.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl
rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:45:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2095 (0x82f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C731A, serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F
Validity
Not Before: Mar 20 21:27:26 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69bdbbbe-adde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2d:48:47:f7:4d:dc:f2:83:70:4f:0c:aa:e2:
d0:23:30:ad:43:b0:9f:91:57:42:0c:a7:f9:ac:ec:
26:bb:1c:f6:e4:c5:4c:d5:8f:09:e4:45:fe:ed:50:
73:b5:0b:7f:dc:33:0c:00:bd:5a:4a:f7:5f:85:1c:
18:aa:8e:fd:01:07:3b:71:72:98:42:f3:72:f4:5d:
40:27:4a:bd:46:f0:22:69:10:1f:71:a1:e3:9e:c3:
98:6d:fa:f4:ab:6f:89:98:a0:a3:e0:a7:ae:96:a4:
92:51:de:fc:cd:08:96:0c:c5:b4:ec:24:33:7f:cc:
75:a9:30:46:1f:cf:fd:dc:4d:51:9c:e1:de:82:11:
be:8e:ce:f1:c8:7c:43:5c:bc:c8:ad:82:06:b4:cf:
96:bf:22:c5:ff:51:a0:32:4d:8e:7d:d3:61:4b:bf:
8a:f2:c5:b6:95:46:e8:f4:8d:09:b7:82:2a:fb:37:
ac:91:fa:15:c2:c2:65:4c:82:8b:a2:90:b0:1d:8c:
cb:f6:ab:cc:fa:40:97:7f:fd:c4:7b:cc:20:5c:5b:
fb:55:48:a6:e4:f3:10:7f:69:97:a8:16:db:f1:61:
60:ab:d4:72:5a:68:c2:50:4c:0d:23:b9:16:d2:d2:
9c:e7:51:f1:49:77:81:68:ad:e4:80:3f:fb:01:36:
ca:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C6:29:66:90:40:09:30:0B:F0:0D:4C:51:0E:E0:F3:E4:FD:A0:4C
X509v3 Authority Key Identifier:
keyid:0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/CC26BAE6895E11F08FE3390FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.85.111.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:5d:82:ac:c0:c5:b2:a2:39:6c:c7:dd:5d:0e:39:9e:a7:87:
1b:fe:8c:07:60:1f:1b:72:1b:e9:77:62:e3:40:09:4f:ef:d9:
d7:c1:6b:cd:d3:22:be:19:cf:a1:91:a6:18:69:05:e7:65:9e:
ba:c9:f4:59:ea:c5:d2:3a:af:61:e8:76:0e:51:44:28:4a:1e:
e1:3e:8b:62:b8:94:ba:6a:bd:d4:12:b2:f3:db:aa:06:18:ab:
7c:73:4f:fe:71:84:57:a3:8f:1f:97:c1:a3:11:10:8d:9c:24:
73:59:66:07:e3:3d:7a:9f:83:84:c9:14:70:35:8f:97:be:6f:
f6:1d:db:fb:e3:a9:74:36:4d:4c:e6:90:70:67:d1:04:27:74:
7d:76:e2:0d:9e:20:bc:0d:ae:c9:c9:dc:32:11:4f:a9:38:9a:
eb:4e:a7:6c:1d:80:c3:c0:dc:3d:cf:18:02:19:ef:a2:ee:41:
7b:d7:60:41:8e:6c:3d:7c:13:1e:3f:c6:87:b4:b0:65:e5:21:
2c:0f:a3:02:da:ca:e3:25:df:c2:39:0b:81:b7:ae:eb:1f:b4:
b7:78:15:a0:bd:14:9a:3c:75:3b:8a:bf:93:d1:b5:9c:45:33:
88:5f:1f:8c:dc:82:26:31:da:1f:f4:5d:82:a9:ec:2f:e1:9a:
04:6b:90:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:35:23 2026 by rpki-client