
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/89BDDA4A2F6F11EEB73F3231C4F9AE02.roa
File: 89BDDA4A2F6F11EEB73F3231C4F9AE02.roa (raw, json)
Hash identifier: 7UTbDfcLmJAZQJQEWgKL+Wduw1Ayjfv8pyNh7/ymhzQ=
Subject key identifier: 12:B3:18:E0:FD:B0:D9:E9:C3:0A:2A:9E:B6:A1:0E:10:AC:28:B3:7B
Certificate issuer: /CN=A91EE099/serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8
Certificate serial: 0264
Authority key identifier: F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/89BDDA4A2F6F11EEB73F3231C4F9AE02.roa
Signing time: Sat 29 Aug 2026 02:53:30 +0000
ROA not before: Sat 29 Aug 2026 02:53:30 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 151640
IP address blocks: 103.245.24.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl
rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 02:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 612 (0x264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE099, serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8
Validity
Not Before: Aug 29 02:53:30 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a9249a9-8db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b3:c0:21:94:3e:08:c1:b2:2f:e7:2f:54:7e:
42:f8:bc:ab:e6:2d:19:5d:43:83:0c:66:e4:f2:2a:
01:03:11:5b:ea:f3:1f:ad:24:11:00:58:19:b1:61:
2a:0a:ea:57:87:08:49:b0:f1:89:9c:44:ce:88:0d:
70:4c:e4:24:ac:0f:e6:4b:fe:23:09:3a:87:7f:30:
47:06:95:51:36:f7:b3:86:46:22:11:e7:a1:96:68:
8b:bf:42:92:ee:ae:41:72:a3:94:df:6f:2c:d4:cd:
cd:b7:0f:eb:e4:ed:55:19:7e:d6:c3:fe:fe:10:74:
c8:e1:4f:3d:de:10:d7:79:40:6a:5b:b1:29:c0:19:
5c:d3:5b:23:ae:17:da:90:10:2d:e3:9a:bc:58:78:
ab:22:7d:51:05:03:3c:a3:b0:c4:6c:4a:b4:01:03:
56:26:b6:6e:3c:1a:4a:51:5d:22:18:e4:ff:a0:ad:
35:55:40:45:d6:d1:09:89:60:8f:0b:6c:6c:65:13:
59:a6:2a:fb:77:b3:c8:0a:0e:54:61:4a:7f:e4:a0:
7e:c0:fe:c0:64:e5:5d:cb:ab:8e:e9:21:41:42:99:
4e:46:db:5f:88:4a:b8:b7:3f:d9:09:f0:3b:18:f1:
de:fc:59:0c:1d:dc:2c:05:18:87:f7:13:6c:f6:07:
79:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B3:18:E0:FD:B0:D9:E9:C3:0A:2A:9E:B6:A1:0E:10:AC:28:B3:7B
X509v3 Authority Key Identifier:
keyid:F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/89BDDA4A2F6F11EEB73F3231C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.245.24.0/23
Signature Algorithm: sha256WithRSAEncryption
63:4c:9e:22:47:a5:b7:77:eb:ec:aa:e4:c4:1e:e5:08:7f:35:
70:53:42:cb:64:be:1a:30:87:9b:87:31:65:b3:d5:43:fe:a9:
bb:5d:d7:b0:3d:bc:ab:40:ce:96:ff:5d:82:d3:7e:7e:d5:ea:
ad:a8:dd:d6:8c:00:3e:4f:a0:03:50:68:8c:c4:97:e8:71:8a:
f8:f2:d9:07:ba:7c:74:28:1a:60:0f:a4:6a:bc:e2:00:fb:f9:
05:ea:14:12:5e:5b:bf:e5:ae:1f:83:4a:4a:fe:7e:9d:76:b0:
db:95:af:e9:30:4f:88:44:4e:d5:1d:2b:47:6a:de:dc:1b:07:
f1:33:e1:61:b4:0b:db:1c:69:88:3f:ba:d6:29:f8:4d:27:ed:
fa:6a:22:a3:17:f7:98:4c:5e:39:51:75:6c:f5:48:2a:d9:77:
bb:b0:1f:15:9d:12:0a:fc:2b:2c:e9:67:c7:be:42:a3:b4:1a:
13:6e:e0:dd:20:04:33:b2:69:36:83:8b:11:4b:8e:e7:26:19:
7f:a9:96:17:8f:be:5c:32:22:56:51:c1:a9:94:93:1f:5b:d9:
50:57:fc:37:08:f8:d6:c8:b7:a2:c5:d3:0f:e1:aa:5a:4b:e8:
9b:1a:4c:d9:44:14:40:4b:a3:98:83:a3:22:c4:b3:58:d8:96:
90:27:32:21
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUUwOTkxMTAvBgNVBAUTKEY5QUE2MzZCNUMzRTMwQzdBMEJBOTc0MzAxNUI1QjEy
MTA0Q0I3QTgwHhcNMjYwODI5MDI1MzMwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTkyNDlhOS04ZGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp7PAIZQ+CMGyL+cvVH5C+Lyr5i0ZXUODDGbk8ioBAxFb6vMfrSQRAFgZsWEq
CupXhwhJsPGJnETOiA1wTOQkrA/mS/4jCTqHfzBHBpVRNvezhkYiEeehlmiLv0KS
7q5BcqOU328s1M3Ntw/r5O1VGX7Ww/7+EHTI4U893hDXeUBqW7EpwBlc01sjrhfa
kBAt45q8WHirIn1RBQM8o7DEbEq0AQNWJrZuPBpKUV0iGOT/oK01VUBF1tEJiWCP
C2xsZRNZpir7d7PICg5UYUp/5KB+wP7AZOVdy6uO6SFBQplORttfiEq4tz/ZCfA7
GPHe/FkMHdwsBRiH9xNs9gd5CwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBKzGOD9
sNnpwwoqnrahDhCsKLN7MB8GA1UdIwQYMBaAFPmqY2tcPjDHoLqXQwFbWxIQTLeo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5OS8wMjIxRDdDRTJG
NjcxMUVFODI0QURDNTlDNEY5QUUwMi8tYXBqYTF3LU1NZWd1cGREQVZ0YkVoQk10
NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1hcGphMXctTU1lZ3VwZERBVnRiRWhCTXQ2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUUwOTkvMDIyMUQ3Q0UyRjY3MTFFRTgyNEFEQzU5QzRGOUFFMDIvODlCRERBNEEy
RjZGMTFFRUI3M0YzMjMxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ/UYMA0GCSqGSIb3DQEBCwUAA4IBAQBjTJ4iR6W3d+vsquTEHuUI
fzVwU0LLZL4aMIebhzFls9VD/qm7XdewPbyrQM6W/12C035+1eqtqN3WjAA+T6AD
UGiMxJfocYr48tkHunx0KBpgD6RqvOIA+/kF6hQSXlu/5a4fg0pK/n6ddrDbla/p
ME+IRE7VHStHat7cGwfxM+FhtAvbHGmIP7rWKfhNJ+36aiKjF/eYTF45UXVs9Ugq
2Xe7sB8VnRIK/Css6WfHvkKjtBoTbuDdIAQzsmk2g4sRS47nJhl/qZYXj75cMiJW
UcGplJMfW9lQV/w3CPjWyLeixdMP4apaS+ibGkzZRBRAS6OYg6MixLNY2JaQJzIh
-----END CERTIFICATE-----
Generated at Sat Sep 19 01:56:23 2026 by rpki-client