
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/10E905682CCE11F1BB1925E192833773.roa
File: 10E905682CCE11F1BB1925E192833773.roa (raw, json)
Hash identifier: HkIXrKm45gEIaL69eK9NolITOExBggdE2/CFBbaKfNc=
Subject key identifier: 07:5A:A7:10:08:FD:0B:0A:52:1B:32:90:88:BF:81:FF:4E:A5:30:76
Certificate issuer: /CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2
Certificate serial: 0FAC
Authority key identifier: 28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/10E905682CCE11F1BB1925E192833773.roa
Signing time: Wed 12 Aug 2026 17:35:24 +0000
ROA not before: Wed 12 Aug 2026 17:35:24 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 149299
IP address blocks: 103.5.0.0/22 maxlen: 22
103.5.0.0/23 maxlen: 23
103.5.0.0/24 maxlen: 24
103.5.1.0/24 maxlen: 24
103.5.2.0/23 maxlen: 23
103.5.2.0/24 maxlen: 24
103.5.3.0/24 maxlen: 24
126.209.88.0/22 maxlen: 22
126.209.88.0/23 maxlen: 23
126.209.88.0/24 maxlen: 24
126.209.89.0/24 maxlen: 24
126.209.90.0/24 maxlen: 24
126.209.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl
rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 17:39:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4012 (0xfac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E868C, serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2
Validity
Not Before: Aug 12 17:35:24 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a7caedc-49f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:48:ff:c3:87:62:10:0f:7c:b2:bb:d2:98:72:
b9:26:56:9d:eb:cf:6b:b8:3c:4d:41:24:fa:fe:19:
37:44:1f:3f:75:e0:c5:87:44:b3:39:00:b5:23:16:
1b:f3:ca:8e:7f:27:38:a0:ec:13:f9:e8:48:93:fc:
e8:30:6e:26:76:c5:ca:71:d7:07:3b:fb:9a:fc:a3:
73:9a:dc:10:fa:84:cb:08:50:70:41:0b:95:74:11:
80:4d:f8:70:4b:55:9b:db:c9:6c:16:05:e9:e9:81:
8d:83:ca:d5:01:a3:a9:6e:ed:52:80:5a:e7:f1:0c:
eb:e5:53:e6:c7:42:e3:e6:c5:f9:aa:d0:ad:7e:c6:
24:e3:01:98:fe:9c:3b:dc:65:fc:52:66:6b:25:91:
f4:c2:ea:74:b6:24:d3:bf:e0:b5:49:47:dc:8a:88:
df:13:67:c5:d6:08:45:b1:f8:d7:59:d9:a9:6c:31:
90:15:cc:dc:ee:77:20:dc:3b:a5:3f:48:93:aa:93:
d9:b3:a8:cd:26:70:fa:53:20:80:83:b6:11:90:f4:
b7:0b:26:f8:12:df:48:ae:a7:ed:63:9b:74:10:20:
34:7b:79:49:9e:5f:5e:8e:52:36:d2:14:dc:97:b7:
1c:4b:24:87:a4:af:d1:01:2b:a1:4a:e3:1e:46:92:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5A:A7:10:08:FD:0B:0A:52:1B:32:90:88:BF:81:FF:4E:A5:30:76
X509v3 Authority Key Identifier:
keyid:28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/10E905682CCE11F1BB1925E192833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.5.0.0/22
126.209.88.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:16:69:bc:e3:7d:7a:b9:3f:37:83:d0:fd:67:c1:03:a3:d1:
fe:2f:fd:ca:67:07:0a:7f:af:51:85:d7:87:99:58:2e:2c:b3:
ce:98:f4:d1:0b:ae:9e:bd:88:cb:34:75:9a:98:87:7d:bb:70:
a2:e2:ca:75:b3:fb:f3:0b:a6:85:31:a7:d3:15:14:69:aa:00:
f2:1d:00:5c:26:ae:66:1a:f8:c2:41:2c:19:23:6c:40:bd:2c:
4b:6d:45:33:bd:03:50:da:bf:13:fd:c7:6b:08:9a:58:da:8d:
0f:69:3c:5a:1a:c3:bc:0b:67:47:14:21:6f:4e:32:18:d4:0e:
7c:9e:36:78:16:18:37:5d:15:12:42:49:07:70:09:8a:93:65:
af:b3:d6:6f:3f:35:f4:38:40:47:15:04:d7:7b:4a:0f:53:9c:
c3:77:6b:23:82:dc:29:b3:1a:93:13:d9:ee:04:10:5e:80:bc:
56:b0:8c:a8:5d:24:a7:ed:ab:93:65:1d:c2:a0:11:03:b2:0c:
e3:8b:c9:28:d6:cb:42:ef:5b:6b:cb:80:1b:8d:6a:ee:bd:4b:
bd:63:97:4e:5f:a0:e8:10:f5:f0:9f:fa:3f:dd:5b:1d:df:48:
40:1c:7c:6f:d7:f6:79:ed:92:d9:e7:5f:a8:06:d3:1d:83:0f:
92:ba:54:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 09:04:22 2026 by rpki-client