
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/89FBAC6CC14311ECB81F4A78C4F9AE02.roa
File: 89FBAC6CC14311ECB81F4A78C4F9AE02.roa (raw, json)
Hash identifier: FITpoMTobT3bpViLRgHiziHbZbhetBwjEC5mII0xpe8=
Subject key identifier: 96:13:A1:30:A4:B9:3B:7E:CE:0A:36:BF:82:79:F7:BD:C8:B4:4D:1C
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6D86
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/89FBAC6CC14311ECB81F4A78C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:22:30 +0000
ROA not before: Fri 02 Oct 2026 15:22:30 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 131387
IP address blocks: 103.250.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28038 (0x6d86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:22:30 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcc36-ff49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dd:70:2a:bd:5c:8c:f7:c7:97:7f:51:1a:50:
00:da:fc:45:13:ac:a5:c3:fa:9b:02:de:1a:96:fb:
42:e9:32:2d:3d:f7:4d:4c:81:d9:eb:0e:81:2a:be:
95:5d:57:77:8c:94:6c:c9:7a:e8:08:a6:c9:7d:2a:
82:b4:66:20:2e:82:53:bf:1f:89:85:5f:bd:3a:02:
5a:de:7e:34:3f:12:a1:36:04:a4:4e:98:c0:41:fc:
78:a5:9d:bb:8a:e1:fe:5d:11:c8:c3:3a:ae:ef:5b:
f5:87:06:21:74:46:16:78:cb:34:82:65:71:ab:80:
bd:9a:2b:77:fa:c5:aa:a2:76:36:12:43:af:c9:f5:
ba:09:12:4f:97:d8:69:5b:70:89:5d:fe:fa:07:55:
0c:f3:47:81:96:0d:ef:ca:a9:2a:78:49:bd:73:f5:
7d:e6:de:33:07:fd:da:a1:18:9d:79:4a:81:18:b4:
3f:7c:57:fd:36:50:81:74:45:f3:de:66:40:dc:5c:
21:1b:f5:4c:1d:13:2b:10:d4:25:8b:bb:6e:83:ef:
6e:7b:42:05:60:ec:9f:53:55:8a:fa:2b:03:51:7c:
75:d0:3e:b7:7f:7d:d3:7f:a6:18:af:d9:31:a6:87:
5c:01:28:84:0b:3d:3b:fa:dc:41:97:e3:50:bd:5a:
61:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:13:A1:30:A4:B9:3B:7E:CE:0A:36:BF:82:79:F7:BD:C8:B4:4D:1C
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/89FBAC6CC14311ECB81F4A78C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.250.24.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:ba:fa:27:ce:f1:7f:5b:37:18:5e:86:c9:83:7d:42:a6:a8:
4e:1e:d8:34:6a:9e:7a:cd:37:08:08:d0:c2:7c:d6:66:32:c4:
7e:01:06:64:b3:8d:8b:23:80:c0:65:a4:a5:91:5d:b2:5e:5c:
5f:3c:91:7c:47:58:ab:97:bc:aa:18:8a:90:d4:b7:a6:94:2f:
7a:24:96:6c:ce:3e:2a:0a:1c:92:43:28:23:f5:e5:3b:9f:de:
46:c1:e5:22:73:1d:5c:5b:a3:fe:37:49:ab:47:3f:20:97:26:
9e:76:d7:cc:85:b4:55:3f:cf:31:cf:c9:d2:67:80:6e:90:ed:
12:62:ee:4e:f7:50:b9:64:11:a2:82:42:62:a1:21:9a:74:71:
77:c8:d2:96:ce:27:b6:01:09:a4:cf:22:26:97:fe:2b:97:c5:
0b:67:20:42:71:91:74:21:86:c3:90:57:b4:5d:e2:53:56:b0:
9f:30:7f:3b:81:4c:d4:6c:33:43:52:b2:b3:d3:c8:a3:da:65:
ab:fc:35:6f:83:cb:9e:37:d1:f9:98:46:6c:af:22:f3:ef:f7:
1a:d2:8d:c1:53:37:50:d8:2c:58:89:f5:0d:e1:41:3c:e7:dc:
6c:8a:0e:3d:22:4e:fa:4a:db:e9:e9:a1:14:4f:7d:07:b1:9b:
30:77:15:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 10:45:57 2026 by rpki-client