
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/E098C4B6F3FE11E9BB4E931AC4F9AE02.roa
File: E098C4B6F3FE11E9BB4E931AC4F9AE02.roa (raw, json)
Hash identifier: QLA/RgvuaonKg9bW/z2IbJYEpT3gfx5VJ79vVBjWg0o=
Subject key identifier: 8D:78:ED:E0:97:10:A7:54:0E:EF:2B:19:43:8D:5C:1C:A3:DE:0A:91
Certificate issuer: /CN=A91F5868/serialNumber=2551900708A03140795BA1BA9B1DDAFCF417C93F
Certificate serial: 0D39
Authority key identifier: 25:51:90:07:08:A0:31:40:79:5B:A1:BA:9B:1D:DA:FC:F4:17:C9:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/E098C4B6F3FE11E9BB4E931AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:58:18 +0000
ROA not before: Mon 26 Jan 2026 18:15:07 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 58715
IP address blocks: 103.105.84.0/22 maxlen: 24
2402:2cc0::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.crl
rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 17:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3385 (0xd39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5868, serialNumber=2551900708A03140795BA1BA9B1DDAFCF417C93F
Validity
Not Before: Jan 26 18:15:07 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a4621a-dc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:96:1c:9c:52:33:a2:3f:cc:66:d9:a0:4f:
8a:1e:c1:00:6e:53:98:1c:9d:21:40:04:b9:b9:3b:
ab:78:3d:76:f7:83:10:b6:5a:db:e2:c0:db:d9:e8:
e2:60:94:e1:a2:2d:ae:38:63:e2:6d:21:bb:80:d5:
5f:f4:9a:99:4b:04:07:b8:6c:a0:91:71:0d:e8:cc:
41:35:43:d7:50:79:7a:b9:36:d5:cc:12:fe:f6:01:
b6:51:b0:5c:84:2a:64:7d:b1:16:8f:7c:de:63:08:
67:ce:8f:a2:34:11:b0:76:d7:9c:26:dd:c8:f2:9c:
df:5f:c3:74:ad:c2:52:56:a3:b8:4e:bd:e7:6c:ff:
0d:72:f5:0f:7b:0c:7d:c5:e2:d1:96:a2:da:c3:64:
75:4b:90:f8:c2:38:d4:3c:f7:22:3a:6e:46:cc:98:
ba:5f:93:c7:06:e6:4f:cb:62:f8:20:81:dc:a2:38:
3a:39:9b:71:a4:65:af:28:df:0f:95:b9:c7:6a:1c:
da:e5:0c:ed:89:f3:41:91:d6:d2:5f:fe:57:cd:f4:
fb:7a:ae:09:48:1f:55:11:dc:03:25:c3:35:19:ff:
c3:49:61:9f:a9:ca:7c:2b:e2:5b:1e:51:7c:2b:59:
f9:aa:1c:47:6f:65:db:63:37:a6:07:ad:53:b5:5b:
7f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:78:ED:E0:97:10:A7:54:0E:EF:2B:19:43:8D:5C:1C:A3:DE:0A:91
X509v3 Authority Key Identifier:
keyid:25:51:90:07:08:A0:31:40:79:5B:A1:BA:9B:1D:DA:FC:F4:17:C9:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/E098C4B6F3FE11E9BB4E931AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.105.84.0/22
IPv6:
2402:2cc0::/32
Signature Algorithm: sha256WithRSAEncryption
8f:c8:88:01:ad:6b:4b:19:8f:4e:23:e1:2f:71:56:e5:79:f7:
69:ba:49:7f:94:d3:e5:f6:bb:4e:5d:a3:04:e8:f3:46:16:b5:
e6:b4:3d:88:5d:e3:57:43:02:75:a8:86:0b:6e:60:29:b8:bb:
29:37:ad:66:24:c4:5f:65:e7:aa:a3:38:67:be:2d:67:67:73:
ea:74:af:b7:39:27:12:d1:b6:30:d9:fd:dd:23:22:9e:11:9d:
e8:1c:67:ed:a4:6c:60:28:9a:91:28:35:78:c8:00:16:d4:5a:
df:73:13:bf:0c:80:b8:ea:cd:14:d9:4a:a9:d4:e3:71:02:ea:
08:14:5f:22:ea:63:e0:7d:78:c1:c0:82:38:bd:2d:77:97:42:
5c:87:4f:b7:f3:67:59:92:3d:64:79:aa:9c:c3:3f:b9:45:34:
32:6f:db:3a:82:47:8b:f2:1c:95:b9:b9:f1:56:78:8f:51:67:
a3:f3:ec:a2:a6:6d:3c:50:62:7d:ff:34:f2:b4:a5:40:8e:85:
14:9d:1b:3a:b6:68:99:38:7f:8f:fa:bc:47:2d:24:c1:f9:e3:
d2:0e:5d:6c:55:6c:88:93:9c:6a:07:dd:1d:fc:38:13:a2:2c:
2f:cc:24:7b:88:0a:2b:a8:93:a6:9a:48:47:6a:07:a1:6a:b5:
95:ae:fe:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 06:43:30 2026 by rpki-client