
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/89526C82036711F18D03459D2E3D8C67.roa
File: 89526C82036711F18D03459D2E3D8C67.roa (raw, json)
Hash identifier: g3Z/lb3zPni8T0QaNGFB/2aCLxhD3wsFvotEa6Pu0yk=
Subject key identifier: 94:CF:BE:8A:90:82:39:2D:16:8B:2A:07:4A:2E:AA:C9:AE:F9:9A:30
Certificate issuer: /CN=A91CC0C9/serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620
Certificate serial: BE
Authority key identifier: 47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/89526C82036711F18D03459D2E3D8C67.roa
Signing time: Tue 03 Mar 2026 17:42:59 +0000
ROA not before: Tue 03 Mar 2026 17:42:59 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 402158
IP address blocks: 103.50.88.0/24 maxlen: 24
103.50.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl
rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 06:38:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC0C9, serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620
Validity
Not Before: Mar 3 17:42:59 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a71da2-af77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:d9:9d:ee:a5:a5:5b:85:ef:95:ff:66:3e:
39:fb:7c:f0:eb:57:27:67:a4:25:59:60:98:70:49:
1e:3c:7d:4e:87:83:ee:dc:78:60:5c:29:c2:c9:80:
5e:ac:d7:37:2e:c2:25:77:78:7f:16:70:5e:b9:90:
a2:68:bc:0b:84:84:4a:de:63:90:3c:04:b0:57:7e:
6f:7f:f3:32:41:ca:b8:ab:fe:85:a4:38:79:4c:7d:
22:de:80:fa:97:4c:e6:28:84:5d:9c:7f:75:28:b2:
e3:36:4d:fa:85:af:ca:5c:e6:f4:df:c7:11:13:c3:
95:30:9a:14:f1:f2:34:b7:9f:d3:ff:d6:76:e3:fa:
f3:34:cd:a2:f6:95:c1:2a:b4:6a:6a:38:ef:f7:59:
0b:3c:20:83:8d:7d:22:f8:26:7e:b9:dd:5c:a5:d5:
12:51:3c:49:71:32:23:d6:84:c7:ca:62:17:e2:d9:
5a:16:0a:dd:9f:5f:8d:44:a0:da:b7:04:2a:b2:95:
e5:4e:27:69:29:cf:50:e9:26:5c:27:cf:4a:f0:ba:
c6:0a:25:0e:4b:5b:55:7e:29:2e:4b:fa:14:58:fb:
ec:8c:92:1c:d6:f6:5b:ef:5e:9a:7e:d1:1c:00:f1:
af:35:c8:14:52:8b:c1:d4:28:f9:dd:da:db:68:97:
ba:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CF:BE:8A:90:82:39:2D:16:8B:2A:07:4A:2E:AA:C9:AE:F9:9A:30
X509v3 Authority Key Identifier:
keyid:47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/89526C82036711F18D03459D2E3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.50.88.0/24
103.50.91.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:c7:5b:a6:7c:bc:e9:f1:30:93:ef:5b:42:4a:2e:06:56:89:
f1:d9:c0:5f:6f:d8:ef:45:ee:3e:12:93:04:6e:b6:a8:2d:12:
05:ce:99:18:52:f5:d0:2b:04:d1:b7:94:ab:19:1d:d5:47:24:
32:ed:20:88:a1:9b:d7:6e:21:23:5c:e4:e3:ca:a6:1c:37:70:
71:c5:86:a5:3d:a5:16:b3:b9:22:47:11:77:a7:1b:74:e3:3d:
94:bf:9a:8f:9b:ae:8f:c5:6f:c9:36:83:e6:f2:bd:21:07:49:
4d:6c:a7:20:c6:aa:4f:94:74:4d:8a:5f:2d:94:46:25:f8:a4:
9a:10:fe:60:6d:e1:b4:24:37:fd:6e:36:84:6e:37:f2:b3:4f:
ca:62:e3:0f:8f:01:14:d8:8f:5d:92:46:9c:bc:ac:ac:26:3a:
86:d1:27:1a:a5:8b:6d:ff:18:21:cf:24:69:21:94:f2:2b:39:
de:af:d0:e8:7f:a7:d3:15:6c:a7:ab:56:d4:8f:71:09:e1:03:
95:87:90:cb:cb:6f:e3:ab:89:57:1b:4b:b1:c9:f1:aa:33:2b:
d0:e8:80:36:e3:6e:30:41:76:50:b2:f3:57:9e:b8:a3:fe:8f:
8e:a2:92:dc:a8:ad:4e:47:fe:07:d7:20:45:ba:94:8c:53:a0:
c7:76:63:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 09:47:54 2026 by rpki-client