
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/131D50EC03B511F1B33AD351023D8C67.roa
File: 131D50EC03B511F1B33AD351023D8C67.roa (raw, json)
Hash identifier: xqonfLO8pGFGJqrL6Ubam0r8pA6SA2doL9TBCfFtqWA=
Subject key identifier: FF:22:11:38:C1:FD:02:0E:D3:AC:6C:F1:DF:64:75:1A:20:88:13:64
Certificate issuer: /CN=A91B9690/serialNumber=699F5544D078A90AF5AA60412E1AD3F1FBDE4CD6
Certificate serial: 25
Authority key identifier: 69:9F:55:44:D0:78:A9:0A:F5:AA:60:41:2E:1A:D3:F1:FB:DE:4C:D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/131D50EC03B511F1B33AD351023D8C67.roa
Signing time: Tue 31 Mar 2026 08:44:30 +0000
ROA not before: Tue 31 Mar 2026 08:44:30 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 136268
IP address blocks: 103.85.216.0/24 maxlen: 24
103.85.217.0/24 maxlen: 24
103.85.218.0/24 maxlen: 24
103.85.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.crl
rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 08:13:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9690, serialNumber=699F5544D078A90AF5AA60412E1AD3F1FBDE4CD6
Validity
Not Before: Mar 31 08:44:30 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cb896e-e1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b8:ac:b6:60:d3:43:8e:b3:bf:4e:6e:49:d5:
63:f3:17:2a:e6:55:e4:6b:8c:00:f4:cf:9a:88:40:
fe:c0:b4:87:f8:ed:b5:c5:53:95:c3:44:43:ba:41:
c7:4c:52:53:56:c8:59:02:d6:45:cc:3e:ce:6f:b3:
82:86:9e:3c:99:6b:ad:75:f3:db:a2:70:ce:4e:e8:
6b:ff:69:06:35:7d:dd:f0:f6:ef:47:12:73:53:38:
18:25:58:1d:8a:eb:63:e6:63:ff:9d:71:c8:41:8e:
58:c9:c8:81:3d:f3:e2:35:4c:75:e6:2c:f3:eb:6c:
3b:b0:24:8c:a0:30:58:6a:73:35:c2:4b:1d:52:54:
ac:7f:8e:3a:48:51:51:ff:66:6c:94:d9:aa:9a:05:
f8:ec:81:a6:5c:52:d7:19:70:e6:04:fd:33:9e:db:
86:35:4d:9a:1e:9f:d6:e2:1d:37:ba:3a:f2:94:8d:
e8:a6:00:cd:e2:06:29:3a:a9:12:56:99:e6:ee:16:
82:59:a8:04:7f:ef:44:1c:f8:f7:a9:48:f1:68:44:
01:db:8f:ac:87:ec:b8:eb:12:24:e4:d2:db:ac:bb:
cf:d1:e6:c9:f2:de:a1:c7:23:13:75:65:40:32:ce:
9c:ce:6e:c2:61:c9:84:61:8a:c4:0d:1f:68:7a:1d:
15:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:22:11:38:C1:FD:02:0E:D3:AC:6C:F1:DF:64:75:1A:20:88:13:64
X509v3 Authority Key Identifier:
keyid:69:9F:55:44:D0:78:A9:0A:F5:AA:60:41:2E:1A:D3:F1:FB:DE:4C:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/131D50EC03B511F1B33AD351023D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.85.216.0/22
Signature Algorithm: sha256WithRSAEncryption
61:0f:d5:a3:9a:fc:d2:5d:bd:04:09:fa:90:7c:3c:c2:2d:54:
12:ed:53:99:9e:64:fb:72:95:cf:46:5f:f3:cb:c3:af:6c:20:
b2:7f:4e:49:60:60:dd:22:a8:c3:4d:8f:af:60:73:19:7d:e6:
7a:76:8e:de:da:72:ba:2a:c8:74:17:78:e7:dd:38:b8:6c:91:
db:b3:54:50:f0:46:71:54:d1:d9:08:b8:fb:2f:a4:96:2a:27:
dc:99:fc:6f:a9:0c:12:fe:df:00:84:63:81:86:68:8d:73:6b:
19:75:82:c0:d5:7c:a0:3f:9f:44:d4:e6:66:6d:fe:5d:34:3d:
8d:d6:b4:e5:46:3c:b7:41:6b:4e:37:a3:20:60:45:78:ea:72:
e2:7c:d6:30:23:7d:00:28:79:5b:d0:66:0f:08:81:1c:b4:9c:
4b:83:f4:9f:87:46:dd:92:dd:47:bd:17:c4:b6:76:28:e5:ec:
f4:28:f8:0f:d7:69:47:10:02:29:8d:e1:74:2e:bc:b9:20:bc:
09:b6:9a:c4:98:ca:31:07:9d:5a:f7:0c:77:13:4f:d8:e4:a4:
91:25:38:ea:eb:ea:91:e9:d6:8a:86:c4:c2:77:0c:16:16:27:
c9:97:ea:06:30:10:ab:40:77:e7:61:6c:33:19:48:c8:60:4c:
ee:89:92:d3
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
OTY5MDExMC8GA1UEBRMoNjk5RjU1NDREMDc4QTkwQUY1QUE2MDQxMkUxQUQzRjFG
QkRFNENENjAeFw0yNjAzMzEwODQ0MzBaFw0yNzA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5Y2I4OTZlLWUxYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCquKy2YNNDjrO/Tm5J1WPzFyrmVeRrjAD0z5qIQP7AtIf47bXFU5XDREO6QcdM
UlNWyFkC1kXMPs5vs4KGnjyZa61189uicM5O6Gv/aQY1fd3w9u9HEnNTOBglWB2K
62PmY/+dcchBjljJyIE98+I1THXmLPPrbDuwJIygMFhqczXCSx1SVKx/jjpIUVH/
ZmyU2aqaBfjsgaZcUtcZcOYE/TOe24Y1TZoen9biHTe6OvKUjeimAM3iBik6qRJW
mebuFoJZqAR/70Qc+PepSPFoRAHbj6yH7LjrEiTk0tusu8/R5sny3qHHIxN1ZUAy
zpzObsJhyYRhisQNH2h6HRVTAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU/yIROMH9
Ag7TrGzx32R1GiCIE2QwHwYDVR0jBBgwFoAUaZ9VRNB4qQr1qmBBLhrT8fveTNYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5NjkwL0E2Njk0QjNDMDNC
MzExRjFCRUQ3OTFGMjQxM0Q4QzY3L2FaOVZSTkI0cVFyMXFtQkJMaHJUOGZ2ZVRO
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYVo5VlJOQjRxUXIxcW1CQkxoclQ4ZnZlVE5ZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OTY5MC9BNjY5NEIzQzAzQjMxMUYxQkVENzkxRjI0MTNEOEM2Ny8xMzFENTBFQzAz
QjUxMUYxQjMzQUQzNTEwMjNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJnVdgwDQYJKoZIhvcNAQELBQADggEBAGEP1aOa/NJdvQQJ+pB8PMIt
VBLtU5meZPtylc9GX/PLw69sILJ/TklgYN0iqMNNj69gcxl95np2jt7acroqyHQX
eOfdOLhskduzVFDwRnFU0dkIuPsvpJYqJ9yZ/G+pDBL+3wCEY4GGaI1zaxl1gsDV
fKA/n0TU5mZt/l00PY3WtOVGPLdBa043oyBgRXjqcuJ81jAjfQAoeVvQZg8IgRy0
nEuD9J+HRt2S3Ue9F8S2dijl7PQo+A/XaUcQAimN4XQuvLkgvAm2msSYyjEHnVr3
DHcTT9jkpJElOOrr6pHp1oqGxMJ3DBYWJ8mX6gYwEKtAd+dhbDMZSMhgTO6JktM=
-----END CERTIFICATE-----
Generated at Sun Apr 5 21:09:34 2026 by rpki-client