
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/832503DCAD0311ED8DFD5339C4F9AE02.roa
File: 832503DCAD0311ED8DFD5339C4F9AE02.roa (raw, json)
Hash identifier: DEHa9wU+Ix9r57aVN3GaYMWyOOaqTPBIMaPsZXZX4DU=
Subject key identifier: 5E:D3:A2:6D:57:33:69:8E:08:21:61:7C:F2:59:63:EA:71:04:6D:98
Certificate issuer: /CN=A91A1860/serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C
Certificate serial: 024D
Authority key identifier: 35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/832503DCAD0311ED8DFD5339C4F9AE02.roa
Signing time: Fri 27 Mar 2026 02:36:27 +0000
ROA not before: Fri 27 Mar 2026 02:36:27 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 140072
IP address blocks: 103.86.70.0/23 maxlen: 23
103.86.70.0/24 maxlen: 24
103.86.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl
rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:53:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 589 (0x24d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1860, serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C
Validity
Not Before: Mar 27 02:36:27 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69c5ed2a-e7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:16:da:0e:4b:4f:70:96:85:9f:be:9e:b1:94:
d5:b9:3a:f9:79:84:72:ee:10:03:a1:2b:8a:7c:76:
95:83:41:1b:64:28:a2:aa:03:10:80:97:1b:bb:84:
11:68:dd:49:8d:43:01:ca:9b:93:0b:75:5f:b5:e2:
d9:8f:75:ae:8d:0a:aa:a7:5e:73:fa:37:e6:bb:98:
2d:45:56:73:33:a1:e4:8d:4a:91:ca:49:42:af:fe:
6e:2f:41:0e:00:67:dc:50:d8:12:3e:bf:3b:c6:07:
0c:26:41:28:10:6f:b7:1b:73:59:7d:be:53:46:d1:
20:36:8f:81:6d:19:16:ff:ad:ba:3b:b2:7e:f2:05:
1f:95:39:2c:c3:37:3a:82:8b:bd:30:e8:52:34:be:
b3:a0:02:35:14:d7:84:a6:b9:5f:5c:b5:d9:cb:06:
7b:df:d2:4c:68:b2:67:2a:5f:67:b6:b1:a3:8f:0c:
d7:1e:13:09:f7:bf:38:0f:a4:88:62:22:9b:10:72:
e8:2b:8c:9d:c5:40:10:f2:cd:08:1d:94:b3:0d:c3:
6a:9f:56:31:b3:ea:cb:85:61:e4:2a:d3:09:b3:c5:
8e:a9:21:82:36:9b:92:e1:cf:b5:c2:e2:c5:eb:a3:
a6:b2:1e:ef:9d:46:a1:cf:be:21:31:fd:e4:9b:60:
db:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D3:A2:6D:57:33:69:8E:08:21:61:7C:F2:59:63:EA:71:04:6D:98
X509v3 Authority Key Identifier:
keyid:35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/832503DCAD0311ED8DFD5339C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.86.70.0/23
Signature Algorithm: sha256WithRSAEncryption
07:a5:45:33:20:6a:b1:b8:01:61:b2:d2:96:0d:bf:d4:9b:cd:
b2:95:f1:06:c0:ed:f6:e4:0c:d2:6f:a4:a9:1a:e0:3e:db:81:
90:00:4e:4e:2d:fe:29:6a:d3:c6:3b:87:74:13:41:77:78:77:
80:bf:61:c5:7e:b4:12:0d:80:26:77:01:c4:8e:d1:81:a9:8d:
ee:a0:00:e4:5d:8a:f8:5b:32:a8:48:0f:fd:d1:2b:7d:de:85:
f5:d9:01:5a:66:d6:f2:58:33:ec:46:84:ee:ce:35:bb:ab:a7:
a6:56:7b:df:44:a5:80:54:c6:9b:a1:6e:05:7a:9d:57:ec:8f:
09:d3:c3:08:11:af:65:0a:72:39:bb:9a:a9:1d:e1:9d:74:09:
c1:99:71:59:42:27:ed:f3:8a:6d:a5:b3:ec:00:09:c8:77:42:
13:e5:3d:cd:24:aa:56:f3:d9:77:ea:e5:da:e1:f7:5a:c5:df:
7e:6f:8a:89:a6:5c:a9:fb:61:09:5a:22:77:f0:3b:06:f8:b1:
fb:49:14:1d:0d:7f:4e:d1:d8:e8:22:2a:91:fb:d3:25:69:02:
0f:bd:3c:b4:46:5f:7c:17:f3:fe:10:46:ac:35:70:0c:f7:8f:
31:fd:31:8d:bd:29:b8:b1:c3:58:c7:e2:f2:76:02:8e:7a:dd:
06:56:c9:39
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTE4NjAxMTAvBgNVBAUTKDM1RjIxMEMzRkNCRUYwRDYyQTNERTg4RjVGM0ZBMjRF
MTE5Mzc0NEMwHhcNMjYwMzI3MDIzNjI3WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWM1ZWQyYS1lN2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAshbaDktPcJaFn76esZTVuTr5eYRy7hADoSuKfHaVg0EbZCiiqgMQgJcbu4QR
aN1JjUMBypuTC3VfteLZj3WujQqqp15z+jfmu5gtRVZzM6HkjUqRyklCr/5uL0EO
AGfcUNgSPr87xgcMJkEoEG+3G3NZfb5TRtEgNo+BbRkW/626O7J+8gUflTkswzc6
gou9MOhSNL6zoAI1FNeEprlfXLXZywZ739JMaLJnKl9ntrGjjwzXHhMJ9784D6SI
YiKbEHLoK4ydxUAQ8s0IHZSzDcNqn1Yxs+rLhWHkKtMJs8WOqSGCNpuS4c+1wuLF
66Omsh7vnUahz74hMf3km2DbnwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFF7Tom1X
M2mOCCFhfPJZY+pxBG2YMB8GA1UdIwQYMBaAFDXyEMP8vvDWKj3oj18/ok4Rk3RM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTg2MC80MjIyRTY2NEFD
RkYxMUVEODEwMzU3MzNDNEY5QUUwMi9OZklRd195LThOWXFQZWlQWHotaVRoR1Rk
RXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05mSVF3X3ktOE5ZcVBlaVBYei1pVGhHVGRFdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTE4NjAvNDIyMkU2NjRBQ0ZGMTFFRDgxMDM1NzMzQzRGOUFFMDIvODMyNTAzRENB
RDAzMTFFRDhERkQ1MzM5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ1ZGMA0GCSqGSIb3DQEBCwUAA4IBAQAHpUUzIGqxuAFhstKWDb/U
m82ylfEGwO325AzSb6SpGuA+24GQAE5OLf4patPGO4d0E0F3eHeAv2HFfrQSDYAm
dwHEjtGBqY3uoADkXYr4WzKoSA/90St93oX12QFaZtbyWDPsRoTuzjW7q6emVnvf
RKWAVMaboW4Fep1X7I8J08MIEa9lCnI5u5qpHeGddAnBmXFZQift84ptpbPsAAnI
d0IT5T3NJKpW89l36uXa4fdaxd9+b4qJplyp+2EJWiJ38DsG+LH7SRQdDX9O0djo
IiqR+9MlaQIPvTy0Rl98F/P+EEasNXAM948x/TGNvSm4scNYx+LydgKOet0GVsk5
-----END CERTIFICATE-----
Generated at Mon Apr 6 12:44:40 2026 by rpki-client