
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/99E2F960AF0911ECA3FB4F28C4F9AE02.roa
File: 99E2F960AF0911ECA3FB4F28C4F9AE02.roa (raw, json)
Hash identifier: O2FG6rr59suhzRLsuE7/b1jB98Dd+9OH7WL3l+5VdHo=
Subject key identifier: 97:AE:F6:55:E4:5E:30:1A:33:F5:1B:F3:4D:EB:C7:CF:1D:52:4B:16
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 5E09
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/99E2F960AF0911ECA3FB4F28C4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:16:30 +0000
ROA not before: Thu 28 Aug 2025 14:53:49 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 135997
IP address blocks: 103.146.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24073 (0x5e09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:53:49 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a60c3e-8f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:f2:b5:92:d5:e1:41:5d:b5:e8:34:22:7b:
76:d2:54:da:a8:21:21:8d:61:4a:11:26:c6:dd:02:
a8:90:12:31:26:49:f9:f1:5e:4f:4f:fc:d2:df:c5:
33:45:17:97:d8:55:d8:77:a7:c8:f6:78:2f:b6:ae:
f2:c9:02:fa:2c:03:1a:19:7c:d7:f7:f4:03:52:b3:
56:4e:6d:95:28:a0:c8:cb:77:37:25:2a:ad:3c:3e:
83:e5:3a:71:16:b8:e0:99:81:97:5e:40:e0:42:cd:
d3:fd:63:90:29:c5:91:0a:f7:5a:a8:07:57:44:7d:
07:80:68:2c:f3:ab:21:0d:56:32:6b:c4:10:85:fe:
85:22:ee:30:7b:31:b8:2e:c8:a4:41:94:e4:d7:30:
05:ad:d6:57:38:1c:9a:69:a2:b8:ac:db:66:63:b4:
49:47:67:c1:8d:fe:ac:c0:2b:cf:51:84:1d:89:b2:
38:34:4f:18:dd:3c:f1:f8:b6:ad:97:3e:86:80:fa:
5e:b2:80:b3:38:a9:cc:7b:74:38:97:39:06:80:a8:
bf:78:88:c2:dd:f5:0e:eb:b2:e1:48:5e:16:73:6d:
a1:bd:a1:b5:48:d4:25:83:e3:c1:cc:10:3a:4d:7c:
78:10:4a:2f:59:9c:db:ff:c4:5d:93:c0:46:05:dc:
19:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AE:F6:55:E4:5E:30:1A:33:F5:1B:F3:4D:EB:C7:CF:1D:52:4B:16
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/99E2F960AF0911ECA3FB4F28C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.146.18.0/23
Signature Algorithm: sha256WithRSAEncryption
23:da:e8:73:b2:64:bc:69:03:b9:9a:72:4a:76:5f:af:6b:6f:
a6:4c:98:03:85:df:f2:7c:39:fa:44:1a:2c:75:3e:be:bd:d7:
6e:d5:3b:22:f0:bd:60:a9:61:5c:79:d6:8c:77:32:bc:8f:ae:
b1:f7:46:11:2a:59:ea:1c:37:b4:23:6c:fe:1c:ff:db:24:5f:
e9:9a:1e:f9:ae:84:d5:00:df:79:ac:b4:b6:66:ff:99:77:df:
8d:dc:c0:65:bc:06:b4:99:8a:15:34:02:9e:a5:13:e4:81:2e:
e8:e3:a5:8f:73:b5:13:bf:53:65:3c:4f:58:03:f6:56:44:78:
c5:91:9c:48:e5:b2:10:81:27:1c:a3:9e:4b:c8:dc:6e:b3:af:
3f:65:14:e5:dd:ea:a3:10:54:df:16:25:8a:2b:f5:7b:67:7b:
e8:7f:dd:40:0e:24:a9:97:85:7d:46:4c:27:55:19:5a:09:54:
d0:da:e9:24:18:23:b2:8f:d7:0c:22:f0:3d:c0:de:59:5e:da:
1e:fa:2b:c4:e9:77:56:7a:c1:f7:3a:8a:cf:35:94:04:0d:76:
07:b6:0a:f1:e5:5e:c7:2d:40:7c:74:c3:27:75:51:63:80:dd:
27:21:6e:04:30:78:d9:ee:60:70:4e:d1:a8:1b:0b:de:28:8f:
98:bf:f0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:42:51 2026 by rpki-client