
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/28CED806EA5811EF90C1D323C4F9AE02.roa
File: 28CED806EA5811EF90C1D323C4F9AE02.roa (raw, json)
Hash identifier: 1jVJq4Wn84CibzT4Z7KAVaNAO57NuZpaBRVHvErLB74=
Subject key identifier: 35:2A:04:50:65:2F:DC:C4:D8:6F:59:46:DD:89:A1:99:4E:D6:A5:43
Certificate issuer: /CN=A91F9766/serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57
Certificate serial: CF
Authority key identifier: C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/28CED806EA5811EF90C1D323C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:26:08 +0000
ROA not before: Sat 07 Jun 2025 07:17:18 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 134829
IP address blocks: 103.92.137.0/24 maxlen: 24
103.92.138.0/24 maxlen: 24
103.92.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl
rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:56:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207 (0xcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9766, serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57
Validity
Not Before: Jun 7 07:17:18 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a3f820-ce68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:61:80:1c:b6:57:ad:9f:07:a3:cb:20:6b:51:
25:63:9d:30:ae:90:d3:2c:8c:46:57:ab:e1:10:b0:
0e:44:e4:70:12:33:47:46:71:57:e2:33:fa:dc:55:
dd:26:96:6d:67:7f:b5:c9:cd:9f:25:d9:d3:f3:13:
41:d1:6a:95:1a:6e:46:70:45:fa:ce:c1:46:67:ef:
3e:13:55:e9:ae:50:f7:d2:d4:5d:fe:03:a6:bc:0d:
8d:07:9d:c8:22:60:7a:68:7b:43:80:7f:af:b0:d8:
35:6d:e6:85:b9:e7:0b:68:31:74:dc:df:1c:7b:39:
8e:63:eb:35:5a:6c:b6:5e:35:a8:b9:1d:ef:54:34:
68:27:8a:f9:3f:25:43:44:f7:3f:9d:37:17:36:e6:
58:d1:25:11:07:fa:bb:04:ab:ff:e4:a2:0e:9c:1a:
f8:45:9a:2b:1c:d6:7a:2b:f7:66:86:bf:53:e5:ed:
aa:ec:5c:0c:f8:48:c4:a0:ba:94:42:78:43:3a:1e:
ab:99:be:67:20:18:0b:89:79:83:cb:a4:85:91:5a:
27:98:e3:e9:ab:ee:a5:bc:11:ab:29:8b:93:45:d7:
06:ec:42:8b:5d:5b:67:9c:e8:db:70:22:14:09:9c:
b0:22:d5:c5:a6:55:85:70:10:34:88:a6:80:27:eb:
d3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2A:04:50:65:2F:DC:C4:D8:6F:59:46:DD:89:A1:99:4E:D6:A5:43
X509v3 Authority Key Identifier:
keyid:C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/28CED806EA5811EF90C1D323C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.92.137.0-103.92.139.255
Signature Algorithm: sha256WithRSAEncryption
5f:3e:f4:9d:69:97:d8:1b:cd:d0:77:68:91:53:6a:3d:bd:9e:
fd:72:ed:16:9a:17:ef:fa:0c:1f:ab:69:a0:00:ce:1b:b1:a2:
73:91:e6:62:38:56:10:9e:45:4c:ff:d4:6a:d2:70:09:de:b5:
19:49:bf:62:ed:cb:92:3c:c1:c0:2e:21:a5:8c:60:9e:2b:2b:
f3:46:2b:39:36:fd:a7:23:fc:e9:6a:0f:24:e7:fe:33:89:6d:
f0:59:da:fe:26:be:8d:2b:97:b5:ab:f5:42:fc:48:ba:39:40:
51:c1:af:7e:ed:fa:e4:97:0b:f1:e3:e6:9e:49:71:ae:26:ed:
0a:c0:de:69:0d:81:87:a4:9b:70:3e:d7:b7:d4:66:81:2f:88:
42:9a:b6:81:c9:19:53:40:81:bc:9d:6b:57:18:ea:86:1d:45:
2b:dd:be:46:20:66:d8:25:20:37:5d:58:dd:8d:c1:21:a5:db:
ac:87:ba:f3:b2:8b:b0:d1:65:30:44:d9:f7:e3:55:cc:8d:cc:
cf:50:96:fd:26:dd:4a:6c:96:be:74:44:aa:94:79:f6:d8:fc:
09:e4:36:4e:69:38:c9:a3:85:c9:01:1b:66:4a:a4:33:5d:56:
76:33:64:b3:05:e6:9d:87:10:5f:e1:17:0c:df:38:cb:68:fb:
10:08:2d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:43:55 2026 by rpki-client