
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/91A286509F0811ECAE659F82C4F9AE02.roa
File: 91A286509F0811ECAE659F82C4F9AE02.roa (raw, json)
Hash identifier: PsNJCJU0uyXObp1+mZX8wbceohbhRoBCXf4GOaOdhzk=
Subject key identifier: E0:56:42:98:73:E6:2C:06:F4:81:F8:1F:25:99:22:24:D6:56:F0:A2
Certificate issuer: /CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3
Certificate serial: 051E
Authority key identifier: 0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/91A286509F0811ECAE659F82C4F9AE02.roa
Signing time: Thu 01 Oct 2026 00:47:10 +0000
ROA not before: Thu 01 Oct 2026 00:47:09 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 136038
IP address blocks: 103.91.217.0/24 maxlen: 24
103.99.208.0/23 maxlen: 23
103.99.208.0/24 maxlen: 24
103.99.209.0/24 maxlen: 24
103.99.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl
rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 23:59:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1310 (0x51e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E9C1, serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3
Validity
Not Before: Oct 1 00:47:09 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abdad8d-5fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:17:cb:97:aa:f5:a8:8d:e2:76:08:8c:db:00:
b4:d0:0f:d4:fd:a6:cc:66:55:05:12:a4:00:e9:19:
ec:a4:34:84:86:9e:37:84:3f:30:97:c3:23:04:25:
cc:69:09:49:4c:ec:91:35:be:6f:b5:05:b4:bb:65:
1e:94:78:8e:ed:4a:34:c5:0e:ec:5c:58:08:a6:c8:
e8:dc:ed:0f:1e:67:84:f0:f8:30:53:5a:83:f7:05:
95:5e:4b:37:32:23:f7:1c:e3:45:a7:68:03:87:91:
78:ea:de:36:4e:39:aa:23:0d:80:a1:04:60:47:5b:
37:0d:03:70:43:88:23:7e:72:59:12:34:15:b9:2e:
8b:5b:41:4a:8d:ae:1a:2d:2c:13:55:b6:25:9d:ba:
32:71:d8:21:37:a1:f9:57:5e:b0:54:93:df:21:73:
a1:85:31:45:e0:26:7e:09:ba:99:60:8c:50:83:a9:
04:a0:8e:aa:fe:5d:e0:62:8a:be:cc:5d:ac:05:72:
bd:c6:07:93:a4:f1:a3:da:a8:75:22:46:3a:55:ac:
db:46:55:e8:86:0b:e5:18:47:82:43:e6:3f:ad:49:
2e:e9:f5:d9:f1:a8:49:7a:9f:94:d1:43:fd:00:f4:
a4:74:db:8f:84:f7:d8:9d:50:93:c7:47:bb:80:c1:
12:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:56:42:98:73:E6:2C:06:F4:81:F8:1F:25:99:22:24:D6:56:F0:A2
X509v3 Authority Key Identifier:
keyid:0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/91A286509F0811ECAE659F82C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.91.217.0/24
103.99.208.0-103.99.210.255
Signature Algorithm: sha256WithRSAEncryption
15:eb:7d:45:8f:19:aa:78:a9:32:40:1e:b4:e8:50:d6:1e:fd:
18:b5:b9:34:0e:0b:31:b1:15:51:87:3a:d7:ae:ca:ec:9a:0a:
70:46:59:ad:67:3d:69:19:91:83:70:79:4b:40:5d:73:af:4b:
f8:a3:14:4f:9d:bd:6c:a4:da:bb:c7:39:f6:20:bc:f4:d4:87:
67:19:7b:a0:18:6e:68:b4:3b:a8:bc:ee:72:67:5a:39:8e:6e:
76:4a:69:cb:bd:15:4a:46:80:a8:79:e0:33:ec:f4:cb:40:37:
d1:79:38:3e:db:13:dc:d9:a3:a4:d3:ca:53:36:d9:68:05:47:
38:02:da:d7:43:67:c8:60:1d:88:fb:26:64:64:7c:3b:0b:48:
dd:d0:4c:e2:66:76:19:4b:b7:93:9b:9b:70:a8:7c:08:7d:db:
c6:b0:59:e7:88:23:43:96:3d:2d:6b:cf:6e:2f:d0:e7:a6:9a:
65:74:9b:47:61:cf:40:bc:a5:01:cd:30:ff:dc:9a:a6:e8:7c:
0c:b3:66:1c:62:9c:60:8e:7a:03:71:6a:d8:07:f1:26:f2:ca:
c7:31:62:d0:f7:7d:8b:e6:3d:b4:c1:d3:c9:43:8f:ce:c9:58:
f6:73:6d:2a:9c:d0:02:cc:6d:2c:d1:f4:14:c6:81:40:92:86:
63:2d:6e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:29:28 2026 by rpki-client