
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/98DC875C050111EA9BDD372BC4F9AE02.roa
File: 98DC875C050111EA9BDD372BC4F9AE02.roa (raw, json)
Hash identifier: 5533DLwfb8lKEthKaYM52eXd8IKuWbZVPlYIPrgz1MM=
Subject key identifier: 9C:9F:67:90:05:02:82:35:CE:0F:DA:0E:76:62:2B:74:7A:81:90:36
Certificate issuer: /CN=A91856C4/serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0
Certificate serial: 0D42
Authority key identifier: 9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/98DC875C050111EA9BDD372BC4F9AE02.roa
Signing time: Wed 26 Aug 2026 18:36:21 +0000
ROA not before: Wed 26 Aug 2026 18:36:21 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 136813
IP address blocks: 103.97.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl
rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 18:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3394 (0xd42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91856C4, serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0
Validity
Not Before: Aug 26 18:36:21 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a8f3225-7036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3f:99:f1:d9:02:a0:dd:2d:4c:b2:d7:61:d4:
6c:95:72:d5:50:50:41:4b:ce:d9:07:6b:de:fa:ee:
ca:4a:0b:90:98:4d:f4:aa:6c:91:ac:73:b3:ef:d3:
9b:ad:86:bd:4e:6f:d5:eb:43:9b:23:6e:b5:a9:0c:
cc:ef:f5:b2:fb:bb:df:d7:22:4f:7f:4a:e2:3e:c0:
2f:80:f6:cf:1a:ab:d3:72:a2:b5:32:88:2e:0e:9f:
65:93:3a:8e:2e:74:79:c3:c9:e1:8d:e0:9c:56:d3:
bf:fa:29:15:06:fc:3c:16:26:ea:2c:cb:b3:41:ee:
8b:05:c8:41:58:d4:a3:7d:c3:48:8e:67:b8:15:e2:
77:5e:6b:85:ee:06:43:90:eb:ec:39:6c:3c:bd:67:
76:51:c0:cf:6c:07:cb:0d:75:08:21:96:25:0c:e6:
23:ac:1d:68:49:07:da:ad:4f:ea:78:00:90:c3:95:
30:e9:ca:76:f3:48:ec:89:ab:a3:4b:8f:15:de:a5:
b8:30:52:ea:2f:ba:6a:71:7a:dd:6c:0d:15:f5:29:
ff:77:4e:a9:88:fb:30:d6:03:ba:77:45:ea:50:24:
69:58:f3:ed:65:f8:7e:3c:af:38:f9:ed:df:45:81:
f6:f1:b0:51:cf:30:f2:4e:a2:1e:b2:80:c0:b2:ed:
f0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9F:67:90:05:02:82:35:CE:0F:DA:0E:76:62:2B:74:7A:81:90:36
X509v3 Authority Key Identifier:
keyid:9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/98DC875C050111EA9BDD372BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.97.120.0/22
Signature Algorithm: sha256WithRSAEncryption
56:d5:c7:e8:f1:40:50:e2:ca:4a:b6:86:d6:67:3e:ef:d1:63:
d3:4c:2d:2d:aa:f3:9e:40:bd:7f:8d:34:64:30:43:04:42:59:
ea:0a:f5:62:bf:fc:25:ad:1c:07:57:39:40:4c:59:6a:35:dc:
f8:f5:41:21:d1:41:df:aa:b3:ba:fa:22:15:6b:97:6e:8a:7a:
33:2b:4f:44:51:27:b1:de:39:a8:65:e8:6a:a9:99:26:7b:ee:
fb:76:2f:e4:df:91:0e:51:29:21:96:6e:a3:5d:bc:50:d9:2d:
f5:02:f5:9a:6f:2c:61:20:01:75:24:da:85:a9:ea:91:ad:ad:
d1:f2:3d:7d:f7:84:ca:bd:0a:df:1d:00:55:62:92:dd:c9:75:
9e:de:2e:f7:13:fd:69:8c:09:b2:32:5c:84:86:88:9a:d4:b3:
cd:29:f8:03:9c:a5:f5:10:6d:90:36:cd:49:bf:6e:3a:64:33:
7d:57:7d:94:5a:27:f2:8b:d7:f2:e8:44:b1:9f:f0:ae:05:c4:
8b:9b:66:c6:00:4e:24:8f:4c:65:0f:ea:65:a3:e7:9e:aa:27:
c5:75:a6:24:d0:51:d0:3e:ec:95:83:cc:25:3f:de:3e:3b:1f:
7e:8f:46:71:3c:94:fe:fb:96:3c:c3:91:83:57:04:b2:b1:24:
da:ba:a2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 20:42:12 2026 by rpki-client