
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9C9784905E4411EFA84E2085C4F9AE02.roa
File: 9C9784905E4411EFA84E2085C4F9AE02.roa (raw, json)
Hash identifier: Fm2dQ/SjrCc+JInLjEoXzPeGi+x4mj/MpJeXQAnZvlA=
Subject key identifier: 87:0E:3F:04:F6:F5:5B:49:41:51:4E:71:6F:70:0D:4C:B9:6C:A4:16
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6DB5
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9C9784905E4411EFA84E2085C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:24:07 +0000
ROA not before: Fri 02 Oct 2026 15:24:07 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 135911
IP address blocks: 103.89.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 10:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28085 (0x6db5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:24:07 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcc97-145b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1d:17:7d:c4:8b:46:36:2d:4e:01:82:73:d5:
bc:52:f6:fb:35:28:ba:e6:c9:c7:ab:21:6e:6f:a6:
c7:26:d9:58:eb:79:75:9e:f2:6e:46:35:a8:0f:81:
2d:f0:c3:1e:b8:59:85:85:a3:2b:58:56:07:3e:f4:
83:50:53:1f:a6:b1:d0:33:97:7c:82:a4:42:38:c2:
5b:30:ca:43:7b:a2:ef:9a:4a:52:79:af:0f:15:c5:
0d:6e:97:5c:04:c1:71:ee:b2:55:63:ff:aa:6c:a7:
df:e3:6a:fe:76:a2:b2:30:ea:b9:38:e0:4e:4c:2a:
ca:2b:20:d4:ae:62:bc:36:c6:e7:c8:32:e8:58:8d:
eb:85:be:f8:ad:df:ad:75:1d:96:d6:07:9b:8d:af:
9e:21:58:da:7a:55:62:aa:cd:16:44:93:11:ed:20:
f3:37:3d:cd:4f:ce:50:9b:fa:df:8d:93:46:3b:b2:
91:75:c4:c0:ca:fb:a8:62:03:dd:cd:4f:61:fc:19:
ce:e2:0b:df:76:20:45:f1:49:d7:65:0c:e6:eb:82:
52:c0:f9:65:8f:d7:28:4c:da:0e:4d:34:20:57:cb:
86:06:c8:bf:24:2b:4b:03:97:0f:38:fa:2d:04:90:
6d:ae:8a:45:67:d4:7e:b0:72:c2:a5:85:de:9b:f1:
33:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0E:3F:04:F6:F5:5B:49:41:51:4E:71:6F:70:0D:4C:B9:6C:A4:16
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9C9784905E4411EFA84E2085C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.89.120.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:49:31:8a:62:83:4e:a0:5a:1e:95:3f:28:1e:e0:a7:31:3f:
fb:26:88:9e:c8:d1:51:65:29:2a:0b:d3:bf:cb:d9:25:85:d0:
4d:92:f1:e8:50:76:b8:88:34:27:46:8a:85:db:ee:06:3f:ac:
5f:7b:e0:5a:f9:0d:fc:8c:22:da:d7:82:d6:7b:0a:9f:fb:74:
22:3a:30:36:4b:14:c9:85:0e:ac:38:ad:a8:38:1d:67:3d:d6:
95:df:ba:b9:8e:ed:8b:5c:41:d5:e3:d9:b9:37:c6:7d:9e:05:
6c:af:d9:14:ef:9b:ae:1c:84:59:67:a8:21:17:15:54:f8:d5:
29:d0:1e:f6:37:6a:ed:b3:d7:e2:4f:cf:26:6c:44:4a:79:ef:
cd:be:ab:72:51:5c:66:9a:49:b9:44:62:f7:3a:80:14:f9:c8:
7f:fa:ac:4a:a6:70:92:0a:af:a6:22:cf:36:39:d5:cf:d4:61:
39:15:a6:2a:a4:74:14:b0:e7:c9:b1:57:b0:ce:3f:f3:a4:da:
a0:35:b9:99:9f:7d:01:bd:24:76:c0:e1:d1:83:77:96:cb:ac:
66:9e:38:b3:98:0e:dd:ae:e2:78:77:73:6c:0b:81:68:0a:c6:
00:5a:1a:bb:06:80:2e:69:34:71:f5:f6:91:6e:70:13:7e:c9:
74:9e:e4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 15:43:09 2026 by rpki-client