
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/4C93B0C80F8E11EEA5B58045C4F9AE02.roa
File: 4C93B0C80F8E11EEA5B58045C4F9AE02.roa (raw, json)
Hash identifier: PWf4oMvr+PNTHRxrV3/i7vJtMPICCfeeIHaNdzjX+vU=
Subject key identifier: 6E:C9:31:CF:32:7E:8F:51:AD:95:56:DE:8C:62:31:7C:8E:07:56:28
Certificate issuer: /CN=A91706CE/serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597
Certificate serial: 026D
Authority key identifier: CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/4C93B0C80F8E11EEA5B58045C4F9AE02.roa
Signing time: Tue 25 Aug 2026 02:52:24 +0000
ROA not before: Tue 25 Aug 2026 02:52:24 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 141153
IP address blocks: 103.155.90.0/23 maxlen: 23
103.155.90.0/24 maxlen: 24
103.155.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl
rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 01 Sep 2026 02:52:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 621 (0x26d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91706CE, serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597
Validity
Not Before: Aug 25 02:52:24 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a8d0368-44d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:88:67:c6:12:ec:f7:ee:25:3c:24:b4:b2:05:
4a:e1:ed:d5:3b:72:1c:01:2d:41:48:fa:9c:78:44:
4c:f9:b3:61:6e:b0:76:31:05:86:00:8a:ea:51:f2:
9d:06:a3:d0:06:33:8a:c5:61:10:3f:95:29:b9:09:
ec:71:74:2a:4b:f2:7b:de:53:bf:cf:4b:63:14:1e:
e8:da:fb:dc:80:e3:ab:42:91:b6:b6:7f:c8:db:d0:
66:37:50:60:94:5c:c2:9f:71:90:4b:c3:e2:4e:d7:
15:f6:9d:11:78:b2:e5:08:f5:d3:50:11:c6:d3:96:
31:22:54:28:f3:99:dc:98:fc:16:f3:71:b3:1a:cf:
7b:56:8b:ff:7c:18:47:cc:0d:e8:80:b2:fe:39:69:
ae:f0:f9:2b:47:bc:5c:13:52:62:bf:d2:67:6b:45:
f4:f2:2e:f9:24:b5:f1:1b:4a:81:3c:20:ae:45:ca:
de:a0:da:1b:5a:c7:e8:32:33:11:f7:20:92:c9:70:
a2:6c:7e:d3:a8:66:f1:eb:0b:9f:f1:3c:72:19:a0:
a0:64:db:98:7f:7a:7a:c8:9c:bd:83:8e:1e:7f:b7:
1f:a2:be:0b:a3:8c:b9:07:a2:be:a6:0c:ef:dc:42:
d9:7b:cb:dc:72:ff:39:62:9c:97:b4:57:10:e2:84:
0e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C9:31:CF:32:7E:8F:51:AD:95:56:DE:8C:62:31:7C:8E:07:56:28
X509v3 Authority Key Identifier:
keyid:CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/4C93B0C80F8E11EEA5B58045C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.155.90.0/23
Signature Algorithm: sha256WithRSAEncryption
34:95:af:d1:6c:2e:97:3c:91:64:8f:9c:00:70:ff:22:72:b7:
35:1a:94:06:e7:26:b4:44:7b:db:11:0f:15:1f:c3:23:72:39:
27:71:6e:c7:34:bb:1d:72:af:56:e8:b3:5c:01:5f:74:51:fa:
3a:ca:f0:43:fa:a4:db:a5:29:d0:98:5f:b8:88:02:9a:5a:4d:
34:f9:78:c7:46:0d:db:f3:83:28:cc:c0:3c:89:48:12:d1:7a:
6b:7e:47:f8:d3:15:1c:15:c9:8f:09:f4:ba:16:94:43:eb:9b:
5d:35:ff:93:20:7b:29:d4:5c:c9:c4:d1:a1:fb:9a:e8:4d:ce:
e7:74:89:8d:a7:18:66:c9:3d:27:bf:59:d7:d3:3a:37:fc:5b:
eb:b0:3e:62:2a:a3:4b:a7:99:4a:d8:9d:75:6a:fe:ef:26:bf:
45:f3:ba:f9:39:4a:d1:72:1d:a6:20:00:99:3f:dc:96:5e:5b:
8e:88:5d:66:41:b3:25:aa:01:d1:3f:83:d5:2a:d3:4e:c1:43:
d1:d3:02:8f:b7:dd:0c:f9:9a:9e:2f:7d:8e:39:49:1c:08:f4:
92:e5:eb:84:94:c0:89:51:89:31:3d:2e:71:c6:65:34:d6:bb:
3f:3f:ad:1b:8e:98:ee:9f:62:5d:74:ed:ee:5a:12:dc:df:2a:
aa:bf:d6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 00:45:14 2026 by rpki-client