
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/90269D3A716611ED9D80F448C4F9AE02.roa
File: 90269D3A716611ED9D80F448C4F9AE02.roa (raw, json)
Hash identifier: ogU/j3OOcAMtUhqvFDXyTh+nM/5Ri8VmgPSxYiiE5to=
Subject key identifier: AB:CA:E6:EC:DE:94:47:82:0F:14:C1:8E:57:B4:FD:D0:F4:97:25:73
Certificate issuer: /CN=A91F134A/serialNumber=B8DF43EEEB35469BB2CC0BA5212D1BFF268A7B6E
Certificate serial: 026B
Authority key identifier: B8:DF:43:EE:EB:35:46:9B:B2:CC:0B:A5:21:2D:1B:FF:26:8A:7B:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uN9D7us1RpuyzAulIS0b_yaKe24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/90269D3A716611ED9D80F448C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:24:54 +0000
ROA not before: Wed 03 Dec 2025 00:59:48 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 150458
IP address blocks: 103.167.58.0/23 maxlen: 23
103.167.58.0/24 maxlen: 24
103.167.59.0/24 maxlen: 24
2001:df1:b1c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.crl
rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uN9D7us1RpuyzAulIS0b_yaKe24.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:27:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 619 (0x26b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F134A, serialNumber=B8DF43EEEB35469BB2CC0BA5212D1BFF268A7B6E
Validity
Not Before: Dec 3 00:59:48 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a58fa6-3870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2f:c3:a4:ad:16:7d:fc:40:75:2f:7e:dd:b9:
bf:9c:49:48:c2:24:0e:48:b5:14:a2:eb:cd:ea:4f:
3b:fa:a3:ae:f5:19:53:b8:8a:9e:8e:20:c2:6d:40:
c8:b3:64:84:c4:19:33:e5:ea:dd:ef:d4:3b:72:ae:
fd:fe:f1:1a:b5:0e:32:30:c3:c3:4d:bd:41:d9:ce:
01:e2:50:bd:a3:f5:47:94:30:3d:72:cd:63:09:cc:
19:eb:df:d1:d7:1e:d9:cb:56:09:ea:24:8e:ca:db:
c9:4d:5b:5b:94:58:d0:97:1f:7f:fc:d6:d0:61:00:
ac:f3:13:34:05:08:92:0e:f7:be:e5:bf:6f:96:6d:
03:d1:4f:a6:bf:4d:92:8c:1f:ab:7d:3a:bd:9c:41:
81:b7:47:00:44:45:40:6b:85:fc:dc:2e:2b:35:93:
9f:f5:50:85:dd:e5:4b:9e:01:c6:8a:4e:0b:0a:3a:
2a:05:19:24:a2:e3:4a:96:7d:78:3e:6a:29:a8:ee:
2e:9e:3e:3f:c0:c0:df:e7:b1:6c:2e:61:7d:9a:66:
07:f3:e4:5b:de:43:b3:dc:11:f6:b8:bd:b5:7e:28:
ad:24:35:19:7d:7a:69:f8:62:5d:fb:ec:16:c7:88:
44:a5:9f:1f:8f:55:82:fa:6b:6b:77:42:56:84:de:
8d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CA:E6:EC:DE:94:47:82:0F:14:C1:8E:57:B4:FD:D0:F4:97:25:73
X509v3 Authority Key Identifier:
keyid:B8:DF:43:EE:EB:35:46:9B:B2:CC:0B:A5:21:2D:1B:FF:26:8A:7B:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uN9D7us1RpuyzAulIS0b_yaKe24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/90269D3A716611ED9D80F448C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.167.58.0/23
IPv6:
2001:df1:b1c0::/48
Signature Algorithm: sha256WithRSAEncryption
02:0c:99:7f:db:79:cb:b0:69:1d:c9:0e:21:a4:47:3a:52:45:
47:ed:9c:8b:11:35:d6:4c:ea:99:8c:04:8d:df:ea:29:56:19:
2e:fb:00:d9:31:de:9e:c1:78:7a:2b:da:bc:bc:82:38:8c:3e:
e4:db:78:ed:50:1e:9b:74:ed:68:a6:59:05:c6:d7:46:7e:cb:
3b:99:64:96:07:d2:e3:dd:66:1d:e5:db:00:a1:47:5f:df:3b:
ca:2c:3b:ee:25:4f:13:e4:23:fc:d0:52:91:40:cb:6b:00:0a:
9e:95:85:25:d4:31:04:a5:02:45:dd:00:05:9d:3c:f1:07:50:
93:e0:6a:2d:fe:5a:61:2d:f4:25:61:11:13:72:ee:10:48:11:
8e:25:e5:fb:12:4b:53:31:e7:60:51:26:ca:de:2a:db:36:4c:
50:18:b2:7c:5a:7e:64:84:a2:56:8f:61:2c:c4:02:1c:d0:bb:
65:5c:38:1a:b0:69:eb:23:37:5a:73:f2:0f:a4:46:60:ce:d1:
bb:dd:62:ec:d6:ac:e2:84:20:96:d0:09:92:f7:b0:dc:56:a7:
35:e7:90:15:92:c0:b9:93:45:50:c2:92:a1:d3:85:9e:fd:59:
bc:d7:41:86:06:22:fe:8f:6d:f6:7a:53:c2:89:e8:41:68:4b:
e3:78:f0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:55:47 2026 by rpki-client