
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/001209082A2111EAB1BF9C2EC4F9AE02.roa
File: 001209082A2111EAB1BF9C2EC4F9AE02.roa (raw, json)
Hash identifier: W9bk7BWbjWm31paj/e25NULQ5EVlnx3DxH5iP28fphw=
Subject key identifier: CE:A6:6D:E9:18:6B:4F:F7:C4:26:FE:DC:5D:35:83:5A:52:D9:69:CA
Certificate issuer: /CN=A91F9F87/serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C
Certificate serial: 0C1A
Authority key identifier: EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/001209082A2111EAB1BF9C2EC4F9AE02.roa
Signing time: Mon 02 Mar 2026 19:22:58 +0000
ROA not before: Mon 02 Mar 2026 19:22:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139885
IP address blocks: 103.146.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl
rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 18:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3098 (0xc1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9F87, serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C
Validity
Not Before: Mar 2 19:22:58 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a5e391-9cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a3:22:3e:89:c7:2b:cc:f4:2e:b9:cf:cd:17:
76:59:02:27:50:ff:06:b2:4a:74:6a:39:c9:d7:16:
e6:56:4c:96:d6:fa:9f:32:4b:45:21:dd:ee:d6:5d:
bf:35:e2:3d:2c:bd:2d:3e:dd:4e:7f:d5:3a:76:93:
db:d1:54:82:1c:24:8a:1f:67:8e:29:55:3d:9e:2f:
1c:bd:ac:84:ff:cc:34:49:c3:00:02:b6:3e:05:b5:
80:df:07:63:ad:7e:e4:99:c8:ad:01:e0:c5:65:b2:
de:bf:81:e5:e7:8d:d9:72:b5:18:e5:90:bf:29:c1:
81:cf:01:fe:88:14:e3:33:37:b2:c8:3d:9b:27:4e:
17:a3:f0:0a:08:b1:31:b5:92:d2:b6:46:9f:f3:63:
32:b2:b6:fb:6d:ea:1c:a3:16:86:f6:f6:b7:00:b9:
3f:7d:07:d6:bf:7b:03:c0:47:89:9f:6e:d6:fe:2c:
78:84:bc:3a:cd:d2:70:66:5c:1e:7d:b1:bf:41:e2:
09:7f:b7:8c:d5:6d:17:a2:14:fb:d3:cb:79:6d:81:
98:45:94:01:a8:30:4d:92:07:7a:a1:bd:1b:7a:ec:
e7:af:0c:64:13:b7:98:b4:c9:9e:78:c6:b3:d1:2e:
f5:3a:fc:70:42:9e:2d:c4:72:f1:4f:a0:fb:a4:24:
eb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A6:6D:E9:18:6B:4F:F7:C4:26:FE:DC:5D:35:83:5A:52:D9:69:CA
X509v3 Authority Key Identifier:
keyid:EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/001209082A2111EAB1BF9C2EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.146.146.0/24
Signature Algorithm: sha256WithRSAEncryption
91:07:30:44:5d:81:1b:76:e5:1b:dd:b1:1e:4b:8d:69:0b:02:
a8:57:bc:f2:2d:ad:b3:89:7c:63:ed:a2:3d:df:5b:e2:16:1d:
7e:10:55:73:9c:d2:c4:5f:b1:3a:11:77:b9:db:37:dd:bf:33:
dc:a8:67:67:47:d2:5b:14:d4:f3:31:b5:aa:d7:a4:a5:0b:88:
e8:a5:51:fd:17:89:7a:b7:3e:f6:8c:84:f1:72:d8:db:37:25:
9d:31:e1:7b:26:d5:bf:22:ba:19:56:d4:50:03:e6:fe:44:8e:
77:fc:2b:89:cf:27:92:39:d9:8c:72:25:ee:86:27:b9:c3:30:
9e:8a:09:ac:6e:e9:eb:c8:51:a0:fa:4e:f1:c5:9d:fb:6a:c0:
99:fc:fc:ef:de:d8:64:e5:3e:cd:1c:ba:1f:66:e3:4b:f7:ee:
ba:ee:43:e3:4e:1c:cc:2e:93:ea:5f:2e:97:ef:a8:9c:c2:88:
26:f2:d5:9a:e1:09:7d:8d:74:c2:8c:2e:4e:cd:63:50:75:2b:
b7:1d:13:45:a4:6c:c8:71:05:5a:41:0f:83:9b:87:3e:10:9b:
07:5d:90:61:40:c2:3d:e2:33:cb:04:87:cb:db:fe:27:77:76:
ea:70:09:ef:87:f6:b4:1d:3b:f0:57:cb:d9:e0:25:9f:89:ba:
6c:09:06:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:08:50 2026 by rpki-client