
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/8A5AA9BAAB4111F09E531265C4F9AE02.roa
File: 8A5AA9BAAB4111F09E531265C4F9AE02.roa (raw, json)
Hash identifier: 2NlCQvreffBv+sXNAkaP+vHBffUlSnZfd0yyrfrf5aI=
Subject key identifier: 6F:80:54:6D:5B:80:5C:E5:65:C9:EC:AB:8B:E1:C6:72:21:98:58:D4
Certificate issuer: /CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Certificate serial: 0799
Authority key identifier: 86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/8A5AA9BAAB4111F09E531265C4F9AE02.roa
Signing time: Mon 11 May 2026 12:02:32 +0000
ROA not before: Mon 11 May 2026 12:02:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 131183
IP address blocks: 103.136.104.0/24 maxlen: 24
103.136.105.0/24 maxlen: 24
2404:90c0::/48 maxlen: 48
2404:90c0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:43:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1945 (0x799)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC979, serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Validity
Not Before: May 11 12:02:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a01c557-81b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4b:2c:c2:c2:7a:3a:88:db:5d:af:88:92:9c:
23:dd:dc:ce:de:3e:f3:92:5f:52:e5:b9:e5:ae:da:
30:cc:84:fb:d8:d9:55:35:c1:9e:cb:ff:e6:f8:f1:
c9:df:8a:a1:c8:1c:d3:58:2b:30:c5:62:01:e9:d6:
08:96:54:12:37:dc:c6:0d:64:6a:16:4a:bb:df:15:
d1:cf:18:ab:ab:ed:bd:1f:ba:5b:a4:74:71:b4:0e:
00:6c:16:0b:25:52:24:e5:bb:18:05:e2:5d:85:7e:
7a:4f:0b:d0:34:63:fa:50:1d:30:ee:af:03:2c:b1:
7c:b0:f4:36:14:ec:c6:45:57:fa:4b:e5:c9:78:51:
d1:d6:df:17:97:28:61:00:f0:66:3c:17:8a:d9:58:
6b:78:59:01:27:78:c0:f6:59:2b:b1:90:a8:e2:e7:
0f:46:24:c7:bd:14:2f:33:14:cf:db:07:27:ad:6c:
30:d0:0e:14:f8:a4:d4:81:d5:0c:89:6b:c6:20:58:
46:68:05:08:40:35:78:93:80:a0:d6:c1:c9:ce:d4:
d3:ae:ed:50:0f:aa:17:00:92:49:31:5f:68:ab:5c:
87:e2:4d:3a:2c:0a:53:af:11:1b:27:bc:24:7c:c1:
30:11:93:64:5e:1d:96:3d:a8:6f:0b:07:50:09:0a:
0f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:80:54:6D:5B:80:5C:E5:65:C9:EC:AB:8B:E1:C6:72:21:98:58:D4
X509v3 Authority Key Identifier:
keyid:86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/8A5AA9BAAB4111F09E531265C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.136.104.0/23
IPv6:
2404:90c0::/48
2404:90c0:2::/48
Signature Algorithm: sha256WithRSAEncryption
bc:88:e9:ee:c7:06:59:e5:d0:ea:fb:5b:ba:7c:5d:bb:3d:34:
c2:52:15:47:36:3b:16:40:ba:39:85:91:40:5d:43:fa:69:bc:
fa:f8:c9:03:43:79:b8:3f:cd:fd:be:e5:a7:73:9a:ff:7d:f4:
7e:50:b2:a3:ed:5d:7f:a1:f8:2f:04:d7:c2:ca:57:51:9b:d4:
ca:05:ce:a6:bd:c4:70:39:ce:87:0a:3c:ca:92:0a:e2:c6:4d:
23:2d:0e:21:77:37:97:cd:a2:26:f9:64:b2:b2:e2:e8:15:b8:
0e:97:08:90:c7:05:8a:a8:e1:7e:30:0b:36:c9:0f:50:85:29:
49:a2:30:89:64:2c:08:8d:0a:c4:1a:db:f7:77:e9:ad:e3:6b:
39:04:83:01:ab:f7:5e:fc:63:c6:ff:76:ae:99:ca:ad:d0:44:
a8:c1:f7:e8:bc:bd:f4:b4:52:7f:8e:33:6e:25:c8:aa:37:23:
4a:99:4b:d3:35:cc:7d:9d:1f:f2:0b:c3:b3:26:70:94:3d:ea:
11:76:8e:70:2b:b8:00:67:f5:e5:89:bf:8d:e7:45:44:64:f5:
f6:95:a7:61:3c:f1:18:46:fd:56:d5:f5:ef:12:6e:9f:f7:c4:
17:9b:3a:ce:3e:9b:e2:df:47:08:5e:c1:16:36:ad:99:26:83:
55:96:94:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:09:57 2026 by rpki-client