
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/921900E0F38011EE9DA42620C4F9AE02.roa
File: 921900E0F38011EE9DA42620C4F9AE02.roa (raw, json)
Hash identifier: 7fuB6+LeR5ktPjfay093g+FxNhwa2ysev5QQw4PgJGs=
Subject key identifier: B6:A8:BC:26:67:1F:38:EF:2C:A6:A6:07:00:60:6F:53:80:4B:71:DD
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6BF8
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/921900E0F38011EE9DA42620C4F9AE02.roa
Signing time: Mon 02 Mar 2026 23:31:42 +0000
ROA not before: Thu 28 Aug 2025 14:53:47 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 135990
IP address blocks: 103.143.206.0/23 maxlen: 24
103.171.92.0/24 maxlen: 24
103.171.93.0/24 maxlen: 24
2405:5b40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27640 (0x6bf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:53:47 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a61dde-3e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4d:6b:6c:8f:e6:c5:b8:a3:fc:45:01:80:18:
c8:ab:87:60:7a:32:de:a9:e4:83:3c:74:2b:58:33:
05:11:90:5f:b4:dd:4c:32:cb:e9:0f:26:3e:e7:de:
e6:40:f7:73:74:bd:af:6c:79:fe:3f:80:c5:8a:61:
be:cd:63:8e:b1:80:e1:c9:82:b5:aa:ae:23:2a:d7:
28:94:51:aa:57:ac:a5:82:36:64:7a:fc:8c:73:e8:
8a:b6:c3:a4:4d:ca:38:f1:80:e1:20:b0:d2:06:f1:
3e:f2:33:18:c0:15:49:56:ae:a9:f6:4c:c0:ec:2d:
eb:dc:82:af:b9:5d:47:35:22:c0:22:b1:2b:eb:33:
1a:64:7f:f3:c3:9c:a5:49:3e:fc:63:7a:c8:08:f4:
75:f4:7e:a2:47:27:2f:20:5d:b1:5c:fa:66:44:6f:
fb:6f:9d:e1:5d:ab:6a:d1:5a:18:d9:54:05:e6:83:
80:97:9b:2d:dc:b0:21:d5:47:fc:8d:7f:c2:80:52:
f0:94:0f:c1:da:ed:c0:f5:fe:a8:54:78:5d:3f:5b:
6c:4f:64:c0:5f:df:a9:f6:27:fe:ac:32:6c:d4:97:
9a:58:7b:2b:cc:85:fe:06:f0:0d:88:88:23:c9:a4:
7d:9e:c4:04:bf:d1:ab:36:22:1b:95:f1:74:28:40:
d4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A8:BC:26:67:1F:38:EF:2C:A6:A6:07:00:60:6F:53:80:4B:71:DD
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/921900E0F38011EE9DA42620C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.143.206.0/23
103.171.92.0/23
IPv6:
2405:5b40::/48
Signature Algorithm: sha256WithRSAEncryption
4f:c7:64:e7:25:86:0e:ef:48:90:92:ee:12:79:ab:b7:1e:dc:
f2:7b:27:c6:0c:7e:14:33:de:4a:69:4c:4a:e3:09:61:ee:ab:
25:c1:06:20:a8:40:f8:e5:d4:b3:0f:d6:30:81:65:3f:88:bd:
70:d7:89:63:07:37:e8:be:33:b2:e2:cb:82:08:51:8a:1a:e0:
dd:2e:67:74:90:af:4e:79:45:d9:9a:fa:8b:ee:35:3c:e9:7a:
8b:e1:e6:50:94:01:53:b9:4a:47:da:3a:a3:b4:ff:01:17:e4:
4e:f6:be:b5:47:61:09:52:4c:58:7e:ad:5c:36:6b:c8:c5:25:
79:99:ad:82:86:46:21:65:ec:97:53:54:e5:88:10:9f:eb:d1:
b1:06:29:7f:6a:77:ba:db:50:1f:c8:de:69:34:f2:ce:6c:8a:
0d:d8:ee:11:21:7b:ef:bb:17:ce:21:cd:39:1f:e2:68:19:9b:
d5:ea:f6:f8:27:5b:bd:7a:3c:96:66:1f:ed:83:40:d6:87:66:
eb:fc:d4:8a:91:17:97:50:b7:de:9e:ee:27:01:3d:76:10:fd:
99:af:a8:2e:88:a4:02:e1:0a:5d:68:09:7e:b1:59:2f:3e:83:
34:db:b8:53:d8:30:50:eb:b0:ef:27:82:1e:5f:90:6f:60:0b:
57:fb:1c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:43:03 2026 by rpki-client