
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/967D5ED65E0811EFBBB08B84C4F9AE02.roa
File: 967D5ED65E0811EFBBB08B84C4F9AE02.roa (raw, json)
Hash identifier: iJJvotNIy7UqNe4aMnim05SLAfqufCe73zAtzOftdsM=
Subject key identifier: DA:F0:7F:E9:E5:AF:3D:D8:08:91:4C:44:B5:0A:40:9D:4C:A0:4B:A0
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 5DAA
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/967D5ED65E0811EFBBB08B84C4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:14:55 +0000
ROA not before: Thu 28 Aug 2025 14:52:23 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 131363
IP address blocks: 103.9.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23978 (0x5daa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:52:23 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a60bdf-65dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:2e:15:98:47:3e:b8:68:ef:52:db:83:69:
07:89:b5:a3:79:14:06:8b:98:59:84:38:ee:f4:88:
0d:0a:9d:c7:9e:90:7f:97:3e:06:93:e2:65:b1:68:
fd:0e:59:e5:3e:26:20:67:e9:7f:06:75:70:ca:d1:
1d:33:5c:8e:2e:77:81:3a:6c:7a:e7:ed:82:d0:77:
04:44:28:a8:3d:e9:40:ba:ce:d0:24:2e:44:97:bf:
b9:b9:61:87:48:38:a6:49:26:19:a7:8a:5c:0b:13:
4f:51:72:4a:19:c9:e7:5c:4e:0c:ee:5b:2b:9b:8f:
47:81:64:72:d7:d9:12:04:a9:70:4d:b6:da:0a:01:
04:b2:33:bd:0d:55:d3:e7:92:5d:a9:65:5f:0e:85:
26:03:d9:96:14:41:28:2e:c3:28:42:e2:b4:a2:2d:
9c:f2:78:f5:a1:f0:7b:7a:c8:31:f4:9f:b1:a0:62:
e6:2f:d5:e9:6b:40:9c:52:69:a6:3f:ce:f7:49:a9:
ee:dd:37:e8:48:46:96:81:d0:97:68:b0:98:3a:16:
cf:6c:85:a9:7f:66:23:56:e2:38:0a:70:94:2a:fc:
4a:db:1c:02:42:8c:5b:38:0e:26:88:68:a1:83:ce:
b4:d2:84:84:0f:44:51:3f:3f:e3:61:6c:e9:9a:af:
7d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F0:7F:E9:E5:AF:3D:D8:08:91:4C:44:B5:0A:40:9D:4C:A0:4B:A0
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/967D5ED65E0811EFBBB08B84C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.9.200.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:57:c0:aa:cd:2c:ad:ca:ce:34:29:18:01:9b:3e:7e:1f:d7:
94:dd:40:45:60:a6:20:4e:46:6e:af:97:21:0f:8c:af:48:5e:
6c:86:d8:b6:df:73:90:52:88:6b:ff:a9:6c:4c:62:d5:78:56:
5b:a4:d6:be:14:45:eb:68:68:2b:14:e6:35:21:6b:9a:74:6f:
69:4d:0a:26:a5:d6:60:db:f3:fd:b0:d6:0e:00:0b:58:a7:ba:
ea:4f:8d:58:f1:c9:b3:f9:e1:df:3d:ea:3a:5f:b3:c1:62:ae:
dc:24:e8:c4:ac:80:ba:f4:44:14:9d:ba:05:27:63:e0:3d:ac:
1e:d1:99:63:21:b2:9f:06:da:23:f1:b0:95:f3:a6:ad:f8:7f:
5f:f6:d6:e4:5a:b4:a7:01:35:06:7c:e5:74:3c:56:8d:56:23:
ce:38:02:dd:4f:69:5b:e9:94:9a:28:3c:23:f3:c1:c5:45:dd:
10:fa:a2:3d:e7:a8:a5:e1:20:96:6e:c4:4e:6a:d4:04:49:f7:
2e:2a:9e:99:03:f4:58:a1:89:a6:a0:16:e5:38:be:0f:f0:3b:
50:a7:30:7f:9c:ae:1d:09:83:8b:d3:95:09:48:d8:73:25:5f:
a7:e0:27:51:4f:74:e1:c1:d3:a8:bb:5b:9e:dd:eb:a9:9d:8e:
33:45:f4:af
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICXaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwODI4MTQ1MjIzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MGJkZi02NWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu10uFZhHPrho71Lbg2kHibWjeRQGi5hZhDju9IgNCp3HnpB/lz4Gk+JlsWj9
DlnlPiYgZ+l/BnVwytEdM1yOLneBOmx65+2C0HcERCioPelAus7QJC5El7+5uWGH
SDimSSYZp4pcCxNPUXJKGcnnXE4M7lsrm49HgWRy19kSBKlwTbbaCgEEsjO9DVXT
55JdqWVfDoUmA9mWFEEoLsMoQuK0oi2c8nj1ofB7esgx9J+xoGLmL9Xpa0CcUmmm
P873Sanu3TfoSEaWgdCXaLCYOhbPbIWpf2YjVuI4CnCUKvxK2xwCQoxbOA4miGih
g8600oSED0RRPz/jYWzpmq99kQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNrwf+nl
rz3YCJFMRLUKQJ1MoEugMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvOTY3RDVFRDY1
RTA4MTFFRkJCQjA4Qjg0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZwnIMA0GCSqGSIb3DQEBCwUAA4IBAQAtV8CqzSytys40KRgBmz5+
H9eU3UBFYKYgTkZur5chD4yvSF5shti233OQUohr/6lsTGLVeFZbpNa+FEXraGgr
FOY1IWuadG9pTQompdZg2/P9sNYOAAtYp7rqT41Y8cmz+eHfPeo6X7PBYq7cJOjE
rIC69EQUnboFJ2PgPawe0ZljIbKfBtoj8bCV86at+H9f9tbkWrSnATUGfOV0PFaN
ViPOOALdT2lb6ZSaKDwj88HFRd0Q+qI956il4SCWbsROatQESfcuKp6ZA/RYoYmm
oBblOL4P8DtQpzB/nK4dCYOL05UJSNhzJV+n4CdRT3ThwdOou1ue3eupnY4zRfSv
-----END CERTIFICATE-----
Generated at Sat Mar 7 22:48:13 2026 by rpki-client