
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/A9AC92A6D2C311F1A0349A210666CEF9.roa
File: A9AC92A6D2C311F1A0349A210666CEF9.roa (raw, json)
Hash identifier: Ip2p8iXWv2hA4rtmjAlbuNMvcHvIjXqMYUGUSyi+7SU=
Subject key identifier: F3:51:A9:D4:1C:1F:3E:E8:49:92:A1:90:33:B9:87:10:38:A5:14:F8
Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742
Certificate serial: 1284
Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/A9AC92A6D2C311F1A0349A210666CEF9.roa
Signing time: Wed 28 Oct 2026 11:35:23 +0000
ROA not before: Wed 28 Oct 2026 11:35:23 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 138482
IP address blocks: 103.86.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl
rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 17:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4740 (0x1284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742
Validity
Not Before: Oct 28 11:35:23 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6ae1ddfb-abf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2b:e4:ab:63:45:f1:a2:7b:aa:73:03:45:b3:
ef:19:02:2f:2b:e7:e4:93:8e:3e:ff:b0:da:39:74:
bb:c8:52:9d:26:d1:9d:b1:28:2a:c6:8e:25:c4:53:
be:1f:eb:a6:9a:cd:e1:fe:6e:65:1a:9a:e8:07:64:
7f:7f:56:fc:41:15:a9:37:4c:51:f4:5d:78:98:a2:
43:1c:74:52:7c:56:ef:5d:54:90:6a:63:f9:69:1e:
98:47:b0:6c:49:05:4c:80:29:3e:0d:b2:67:88:c1:
2c:85:cd:6a:d5:14:83:e5:e4:67:af:5e:0e:2c:f6:
a0:4c:3d:e0:6d:2c:e7:d7:22:c4:3d:47:af:ea:53:
df:c5:26:6b:10:97:32:33:28:15:ed:52:f4:c7:a5:
67:8b:66:11:55:0b:f3:15:aa:6b:fb:f0:56:b7:69:
2c:e4:fa:a2:5a:7b:72:00:67:56:bf:18:62:6b:82:
44:37:f2:5e:2c:a4:d7:a7:44:02:52:fa:ae:47:b5:
89:75:00:4a:db:52:d8:7c:21:95:4f:0a:fe:db:28:
79:35:71:d8:da:80:fe:e9:8e:53:b6:ad:e4:cc:0f:
48:8f:9b:2a:d2:85:05:83:3c:fe:b2:1d:8d:75:ce:
ad:27:d0:07:1f:2e:10:38:91:78:0a:2e:17:cb:99:
d0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:51:A9:D4:1C:1F:3E:E8:49:92:A1:90:33:B9:87:10:38:A5:14:F8
X509v3 Authority Key Identifier:
keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/A9AC92A6D2C311F1A0349A210666CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
103.86.194.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:4c:b2:27:59:50:c8:ef:ec:ee:5b:09:42:cc:e0:3c:21:85:
1f:3e:4c:8a:dd:71:68:92:16:bc:71:5e:83:53:ef:91:34:d0:
1a:35:d3:bc:fa:9e:92:15:49:07:40:b3:02:c3:92:4a:06:c7:
9d:c7:a2:68:40:28:90:7f:55:48:eb:16:57:f2:3b:f7:7b:18:
72:ac:e8:f0:c0:35:0c:8b:ad:f5:6f:09:b9:69:f2:40:0f:3a:
81:d4:25:5b:92:cd:75:a5:c1:e7:32:97:81:40:45:dc:50:39:
38:05:9a:88:02:e8:e7:21:14:92:de:e5:b0:49:8a:72:2a:a8:
9c:09:c8:30:46:0a:55:a0:96:3a:2c:34:34:0e:b3:25:20:98:
f2:04:65:d5:bb:41:5d:78:35:dc:de:94:3e:a8:14:2f:0f:30:
b6:09:5c:45:03:d3:41:14:e0:41:0b:a8:00:66:cd:e5:ae:7d:
02:ae:08:a5:83:f6:b4:d4:41:09:ee:66:e1:5a:55:63:fa:18:
83:9a:0d:ff:b4:18:34:1c:ac:23:98:7e:42:07:fb:86:e2:37:
bf:09:44:54:48:1f:e9:69:60:d2:c0:f3:4a:63:66:7b:84:25:
da:de:61:62:de:5a:fe:27:98:3e:96:6c:85:cc:bc:17:78:5d:
29:20:2d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 14:12:09 2026 by rpki-client