
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/C3CE90CEF99A11EB936CCA1EC4F9AE02.roa
File: C3CE90CEF99A11EB936CCA1EC4F9AE02.roa (raw, json)
Hash identifier: Wnvaq8Ww3Bk3d2vemeHqavsME8uCxGuZGCjNCIrVG9I=
Subject key identifier: C0:1B:07:1E:E3:E0:ED:BA:1A:F8:3C:30:4B:54:D2:29:4A:A8:BC:4D
Certificate issuer: /CN=A91C92DC/serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD
Certificate serial: 05F7
Authority key identifier: 89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/C3CE90CEF99A11EB936CCA1EC4F9AE02.roa
Signing time: Fri 08 May 2026 23:28:57 +0000
ROA not before: Fri 08 May 2026 23:28:57 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 9471
IP address blocks: 103.166.70.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl
rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 17 May 2026 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1527 (0x5f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C92DC, serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD
Validity
Not Before: May 8 23:28:57 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69fe71b9-c854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7b:b8:10:50:fa:aa:ba:dd:b8:99:47:e1:5b:
e0:39:d4:c1:a2:57:d4:c6:bd:db:cf:5a:15:47:9c:
28:97:fd:e1:e6:07:01:72:01:e3:1c:44:86:41:f9:
55:5c:74:fa:e0:08:0c:20:b2:3e:a3:e3:10:89:a2:
6f:73:ea:3c:98:fc:fb:54:5b:eb:ae:2c:28:2e:57:
8b:98:63:9e:da:c9:8e:9a:08:dc:f8:e6:e8:66:10:
f1:ef:88:79:74:c2:82:89:27:35:72:bb:89:a3:a8:
8f:dc:46:3b:cf:84:7a:de:32:60:30:bb:67:23:36:
12:86:bf:06:2a:b9:de:02:6b:0a:fc:ea:b6:8b:f7:
f5:00:01:2d:26:b7:b7:44:19:e7:e8:99:e4:0a:b0:
42:22:8d:48:a4:36:d0:ea:f5:95:45:29:1b:32:76:
06:e5:39:a3:04:bb:34:99:f9:35:d3:3a:15:5d:f4:
ab:67:f5:7d:0c:1d:bc:0f:9c:3c:bf:d7:0e:4f:73:
78:f7:e3:28:10:c2:34:e5:7a:ac:a8:cf:f7:29:e6:
fc:b6:a6:d4:53:99:34:9e:25:c9:13:82:4f:9c:16:
48:ec:ff:12:d8:7e:97:59:6d:25:42:e5:87:5e:9d:
e8:bb:0e:1d:0e:ec:3e:d4:c6:23:9e:16:55:51:08:
5c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1B:07:1E:E3:E0:ED:BA:1A:F8:3C:30:4B:54:D2:29:4A:A8:BC:4D
X509v3 Authority Key Identifier:
keyid:89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/C3CE90CEF99A11EB936CCA1EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.166.70.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:33:8c:bd:32:10:6c:86:8e:69:5a:fd:1a:37:bf:9a:c7:45:
fd:1d:90:2f:ce:3b:d3:f9:25:8a:62:b7:d6:9b:18:67:1b:f6:
8d:8c:f9:a9:7b:4a:c1:d6:94:de:f1:0b:11:9e:e2:50:ed:cc:
63:3b:60:0a:0b:bc:b9:e8:47:9f:0e:43:a8:58:fd:44:77:42:
8f:78:08:9a:dc:2e:c1:37:e7:bf:63:1b:3e:0f:b7:f7:fa:75:
66:98:24:74:a8:d7:8e:be:16:5e:99:4c:85:7e:62:64:ed:14:
99:c3:55:99:11:e1:2b:eb:b5:cf:c8:12:3a:05:0c:cb:35:8a:
20:1d:a5:d5:0c:e2:bf:9e:e8:e0:4a:f8:b7:7c:6b:af:c9:b2:
76:8f:a3:2f:8c:ab:7d:26:8a:f6:39:58:4c:ef:37:ab:f8:fc:
fd:ce:04:20:cb:ad:ad:b2:c4:96:74:1f:f4:a1:c6:80:32:ff:
34:24:83:5a:07:bb:81:99:03:22:71:11:19:77:47:99:a2:9b:
9b:43:dd:da:d2:e5:a4:7d:e6:19:c5:fa:b2:41:6d:a5:73:d2:
b7:75:22:27:ab:25:6a:7a:13:0d:40:08:bb:a7:4d:b6:94:fb:
d4:8b:29:a5:3d:53:d2:75:14:82:fc:b7:4d:9f:1e:bf:38:03:
d4:a9:68:1d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzkyREMxMTAvBgNVBAUTKDg5NzBBNDAwQ0NDQ0YwMTA5MzNDMzMwQzM3NjBBMUVD
NURCNEUwQUQwHhcNMjYwNTA4MjMyODU3WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWZlNzFiOS1jODU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyXu4EFD6qrrduJlH4VvgOdTBolfUxr3bz1oVR5wol/3h5gcBcgHjHESGQflV
XHT64AgMILI+o+MQiaJvc+o8mPz7VFvrriwoLleLmGOe2smOmgjc+OboZhDx74h5
dMKCiSc1cruJo6iP3EY7z4R63jJgMLtnIzYShr8GKrneAmsK/Oq2i/f1AAEtJre3
RBnn6JnkCrBCIo1IpDbQ6vWVRSkbMnYG5TmjBLs0mfk10zoVXfSrZ/V9DB28D5w8
v9cOT3N49+MoEMI05XqsqM/3Keb8tqbUU5k0niXJE4JPnBZI7P8S2H6XWW0lQuWH
Xp3ouw4dDuw+1MYjnhZVUQhcuQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMAbBx7j
4O26Gvg8MEtU0ilKqLxNMB8GA1UdIwQYMBaAFIlwpADMzPAQkzwzDDdgoexdtOCt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTJEQy9DNjA1NzhBMEY5
OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThCQ1RQRE1NTjJDaDdGMjA0
SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lYQ2tBTXpNOEJDVFBETU1OMkNoN0YyMDRLMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzkyREMvQzYwNTc4QTBGOTk4MTFFQjhBRjQ5QzFEQzRGOUFFMDIvQzNDRTkwQ0VG
OTlBMTFFQjkzNkNDQTFFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ6ZGMA0GCSqGSIb3DQEBCwUAA4IBAQALM4y9MhBsho5pWv0aN7+a
x0X9HZAvzjvT+SWKYrfWmxhnG/aNjPmpe0rB1pTe8QsRnuJQ7cxjO2AKC7y56Eef
DkOoWP1Ed0KPeAia3C7BN+e/Yxs+D7f3+nVmmCR0qNeOvhZemUyFfmJk7RSZw1WZ
EeEr67XPyBI6BQzLNYogHaXVDOK/nujgSvi3fGuvybJ2j6MvjKt9Jor2OVhM7zer
+Pz9zgQgy62tssSWdB/0ocaAMv80JINaB7uBmQMicREZd0eZopubQ93a0uWkfeYZ
xfqyQW2lc9K3dSInqyVqehMNQAi7p022lPvUiymlPVPSdRSC/LdNnx6/OAPUqWgd
-----END CERTIFICATE-----
Generated at Wed May 13 01:24:36 2026 by rpki-client