
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/A10812CA0CD511EB9433AE69C4F9AE02.roa
File: A10812CA0CD511EB9433AE69C4F9AE02.roa (raw, json)
Hash identifier: YumOATI/4NppEFAS3vwXFXSjDtb9xmsE1aBFsK6y/JI=
Subject key identifier: 93:1A:A9:2F:B4:68:E1:98:EF:E8:47:FF:3C:F7:B3:60:BB:A9:7B:96
Certificate issuer: /CN=A91EBC50/serialNumber=4354D5CFA564EE71B34E8874EEB1B9868F8807DD
Certificate serial: 0837
Authority key identifier: 43:54:D5:CF:A5:64:EE:71:B3:4E:88:74:EE:B1:B9:86:8F:88:07:DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/A10812CA0CD511EB9433AE69C4F9AE02.roa
Signing time: Wed 04 Mar 2026 21:27:55 +0000
ROA not before: Wed 04 Mar 2026 21:27:55 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 9290
IP address blocks: 103.11.144.0/22 maxlen: 22
110.34.52.0/22 maxlen: 22
121.127.35.0/24 maxlen: 24
202.47.95.0/24 maxlen: 24
203.83.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.crl
rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 20:42:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2103 (0x837)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBC50, serialNumber=4354D5CFA564EE71B34E8874EEB1B9868F8807DD
Validity
Not Before: Mar 4 21:27:55 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69a8a3da-4d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:eb:4f:ee:15:57:8e:d6:54:d3:1f:d2:01:c9:
91:86:03:00:fb:63:bd:a2:d8:2e:05:3f:f2:9f:cd:
8a:4e:32:85:18:ea:4c:5c:48:c8:0e:92:c1:2b:e7:
3d:4c:7e:96:08:27:86:9a:f7:fe:4f:a5:9f:80:c0:
2d:e1:79:09:9d:09:a5:8c:9a:ea:c7:13:0d:66:ae:
ed:45:78:9d:ec:ad:f1:49:86:05:b6:0b:2f:36:20:
4b:2c:bb:95:26:9b:42:5a:94:c9:40:11:86:ae:9a:
6d:8a:cc:08:d9:9f:cf:8f:2f:33:6d:45:52:c3:9d:
c6:0c:d9:b9:38:cf:d1:8e:2b:69:cc:85:7d:0a:e8:
ca:46:d5:a3:ca:94:c4:2c:7b:d3:fe:57:ed:14:0a:
26:ba:c5:f7:2f:a4:e3:f8:81:e3:ea:3b:c9:f0:85:
c9:7c:e4:f0:f6:9a:0e:f4:2d:0e:cf:dd:76:8f:d3:
15:0c:fa:96:67:1f:cc:70:93:6b:e2:7e:bb:49:97:
b5:60:61:57:45:a9:eb:e6:16:d9:fd:4c:de:ab:15:
1e:a8:ac:ef:ce:ce:0e:f1:0c:17:2d:d1:b0:40:46:
da:c7:60:8c:80:4b:b0:98:9d:f8:9c:13:a4:b0:92:
03:3a:04:a5:b3:ec:99:66:91:e0:72:7c:74:33:08:
62:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1A:A9:2F:B4:68:E1:98:EF:E8:47:FF:3C:F7:B3:60:BB:A9:7B:96
X509v3 Authority Key Identifier:
keyid:43:54:D5:CF:A5:64:EE:71:B3:4E:88:74:EE:B1:B9:86:8F:88:07:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/A10812CA0CD511EB9433AE69C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.11.144.0/22
110.34.52.0/22
121.127.35.0/24
202.47.95.0/24
203.83.219.0/24
Signature Algorithm: sha256WithRSAEncryption
98:d2:f0:82:38:1e:a8:26:ac:68:56:65:6b:f9:c4:5c:bf:09:
a7:d7:32:53:75:f0:b1:c0:99:ff:12:1d:04:ed:fa:14:97:0a:
02:10:57:16:38:87:a8:e5:fd:e3:f7:81:5b:59:29:12:e2:25:
ff:07:56:ca:6d:c4:62:32:42:e0:36:10:b1:30:be:c9:42:7a:
0a:8d:ec:8f:c7:7e:04:45:99:b0:2e:71:06:cb:ca:0f:bc:63:
4b:a7:7c:13:0d:bd:52:df:30:9b:1c:2c:09:e2:21:52:5f:d9:
1b:ca:00:5b:0a:87:df:3c:47:f2:4f:e2:b4:4a:d0:ea:bc:41:
51:02:af:e7:73:d4:f8:2e:88:e9:69:d6:63:7c:47:10:e6:0b:
44:37:8d:69:0e:0d:d7:a5:42:b8:1f:70:ca:98:4f:96:06:8c:
a9:4d:5a:1b:ab:0e:5c:3e:7b:1b:8c:a1:32:22:08:1b:4a:ab:
e7:6c:b8:14:52:0c:c7:4d:76:f7:55:02:7c:04:0d:3e:9b:0c:
d6:14:05:c8:9e:83:76:38:97:f3:66:ba:7b:88:fc:79:d7:a6:
cd:61:9f:2c:06:98:96:93:87:94:04:b4:81:e1:74:0e:12:c6:
b5:fa:d0:49:14:52:20:3b:11:46:3d:12:fb:36:0b:ed:70:be:
dd:72:ad:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 01:51:06 2026 by rpki-client