
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9C9784905E4411EFA84E2085C4F9AE02.roa
File: 9C9784905E4411EFA84E2085C4F9AE02.roa (raw, json)
Hash identifier: FD7tJoMEKY0LuA58T0jUSLxkQwNUwGbVTdbZWgqAjO4=
Subject key identifier: D0:B1:6D:7A:9E:4F:49:61:25:0D:65:93:79:62:75:42:37:CD:0F:07
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 5DDD
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9C9784905E4411EFA84E2085C4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:15:45 +0000
ROA not before: Thu 28 Aug 2025 14:53:10 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 135911
IP address blocks: 103.89.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24029 (0x5ddd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:53:10 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a60c11-336a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:73:8f:bb:23:be:8f:3b:98:a3:29:02:f6:e6:
7d:d1:58:b6:be:8b:9c:fd:5d:1b:ed:ee:69:4c:20:
7a:b5:9a:9f:96:4f:90:70:6f:bf:42:55:9e:b1:5f:
fe:c2:b9:c4:39:48:9e:c3:f1:3a:6b:c0:41:f1:4b:
4c:e8:69:66:e9:11:bf:e2:c3:ff:d5:e9:42:69:ad:
93:58:4c:df:8d:86:23:24:01:94:1a:b8:f5:29:cf:
74:3a:32:d8:3a:7b:93:68:cf:50:eb:b4:25:53:78:
e7:89:de:19:f4:dc:24:57:54:02:1c:c9:0c:9f:33:
a7:a7:c5:10:58:83:7a:fb:4e:f7:87:1d:75:64:57:
e8:9e:3a:68:23:57:d0:8d:00:ea:d3:cc:60:76:30:
fc:bf:a2:22:b8:86:38:97:47:19:1b:dd:02:a1:1b:
e7:f8:8d:c9:a1:1a:6d:a1:52:7b:1f:fc:f0:b3:17:
79:08:16:7d:f1:58:cd:53:d2:8f:58:2f:84:6b:7b:
d5:56:ab:6f:55:15:54:0b:0f:8c:c4:19:cb:78:3e:
2f:54:b8:c9:d7:a4:be:99:28:50:1f:be:ff:49:58:
be:6c:00:89:e6:82:68:4b:13:74:10:17:8a:5e:a6:
f2:2c:29:3c:ad:25:ac:79:7d:71:5c:bd:1c:de:97:
75:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B1:6D:7A:9E:4F:49:61:25:0D:65:93:79:62:75:42:37:CD:0F:07
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9C9784905E4411EFA84E2085C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.89.120.0/22
Signature Algorithm: sha256WithRSAEncryption
76:80:1b:4b:29:83:1b:8c:14:43:25:33:8f:19:55:98:33:66:
e2:12:8b:24:5b:3e:21:66:b2:8c:41:46:0d:0e:be:cc:7e:a7:
93:39:08:4e:bf:d1:74:81:be:36:d2:29:91:89:e5:82:48:93:
ec:6e:95:5a:ca:03:5d:21:17:ea:76:fb:c7:9c:42:47:66:f6:
e6:ad:61:da:4d:12:92:9a:4a:80:bb:aa:65:b5:4d:fe:c7:20:
49:e9:1b:cc:89:ad:04:9a:11:8d:50:e9:d1:1c:af:cb:4b:61:
fe:e0:5d:9a:59:f7:6a:68:47:f7:1b:9d:07:0d:1e:db:39:98:
95:69:4f:22:67:e8:dd:03:88:8c:2f:92:6e:1a:59:79:72:4d:
b7:34:05:79:95:93:c4:df:57:50:ad:42:12:7f:21:b5:5a:46:
a6:e4:63:93:96:ba:e0:7a:56:1d:55:41:f5:f1:ac:65:5c:1d:
9a:01:10:ca:61:9c:a1:62:c6:72:0b:26:e2:34:01:3a:f5:b6:
82:c0:2a:ec:d6:87:13:29:a2:f0:cd:d7:80:b2:b5:63:a5:73:
3c:03:f8:ef:99:76:8b:5c:7f:8a:36:76:5f:3c:ff:44:e4:04:
9e:1c:76:d5:e2:66:52:4d:b6:e4:b7:4f:81:b5:f7:15:9e:01:
2d:09:79:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:48:15 2026 by rpki-client