
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/62512E2C73D311EABC99D63AC4F9AE02.roa
File: 62512E2C73D311EABC99D63AC4F9AE02.roa (raw, json)
Hash identifier: 69Hh0J+L+6D5El7B0qbhyv5Br90p9YiCbQw2deQTNhM=
Subject key identifier: 55:04:66:D7:74:5B:38:5C:91:19:8C:11:86:35:7A:A1:F5:E2:A5:4A
Certificate issuer: /CN=A91F7DCD/serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86
Certificate serial: 0AC6
Authority key identifier: 3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/62512E2C73D311EABC99D63AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:31:12 +0000
ROA not before: Thu 04 Sep 2025 20:00:27 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 137969
IP address blocks: 39.109.92.0/22 maxlen: 22
39.109.92.0/24 maxlen: 24
39.109.93.0/24 maxlen: 24
39.109.94.0/24 maxlen: 24
39.109.95.0/24 maxlen: 24
103.120.228.0/23 maxlen: 23
103.120.228.0/24 maxlen: 24
103.120.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl
rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Mar 2026 19:12:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2758 (0xac6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7DCD, serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86
Validity
Not Before: Sep 4 20:00:27 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a469d0-fd5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:13:c0:40:5d:ab:f5:40:aa:8b:71:c4:9b:d0:
67:11:89:38:c7:7c:0f:57:ed:04:cb:fd:61:11:26:
f9:7b:c7:20:27:ca:da:89:67:bc:3b:ae:2a:31:da:
d3:87:06:7f:3a:2b:53:4a:ac:a6:a8:29:a9:aa:b6:
fa:c7:cb:1d:cb:6a:f2:bd:ff:df:b3:04:6e:3a:5a:
42:76:3e:60:24:f6:99:1b:54:61:b9:df:f3:1b:e3:
cf:32:c9:60:0e:cf:22:c8:9e:3f:9e:e5:39:be:be:
65:ed:09:66:83:0d:40:e8:95:70:9c:cd:4b:3d:57:
cd:ba:c7:f8:ff:f3:ec:d0:7a:dc:e5:a8:63:66:52:
e4:3a:2b:d1:2d:28:2a:47:4e:a7:2f:f6:c2:0c:0c:
89:9c:1f:e2:fb:b0:dc:b1:2b:16:9e:8b:35:ad:c3:
89:3d:e6:20:d7:72:70:67:49:15:b5:f8:5a:65:5e:
06:0b:41:e3:34:b2:24:c2:d9:1a:ff:a9:51:57:8b:
f9:46:44:65:15:98:13:c7:ba:a9:c6:88:fb:c8:ab:
b7:95:2d:25:71:69:a6:ef:65:f5:30:86:73:d7:37:
1a:db:db:4e:db:87:26:02:f4:ca:0e:eb:bf:6a:51:
c0:c7:5d:67:5a:d8:3c:02:5b:69:33:b3:89:bf:c6:
60:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:04:66:D7:74:5B:38:5C:91:19:8C:11:86:35:7A:A1:F5:E2:A5:4A
X509v3 Authority Key Identifier:
keyid:3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/62512E2C73D311EABC99D63AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
39.109.92.0/22
103.120.228.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:82:c7:a1:34:70:f2:b7:46:19:3a:2e:9d:81:ee:0b:9b:14:
a4:8f:02:a8:58:2f:36:4e:72:3b:f4:2a:a9:93:77:fc:79:dc:
9b:db:63:86:b2:97:97:b1:c2:e3:73:d0:0f:bb:1f:9c:c8:1c:
41:35:f9:65:d3:43:42:52:fd:04:b9:d1:19:27:ad:83:cc:ac:
34:17:e5:d3:01:61:6b:f6:7b:d3:86:64:c9:47:44:b0:2b:5b:
95:1d:54:37:2e:f7:28:7f:23:39:fa:9f:39:cb:c1:f0:4e:47:
ef:82:01:1b:26:60:e7:af:bb:83:f7:12:53:72:ca:e1:11:47:
80:a5:cd:80:98:db:67:62:00:c4:b3:1c:6b:53:b0:9c:be:e6:
dd:66:2c:77:08:44:44:c4:65:2f:35:7e:dd:d3:f1:35:c3:00:
fc:c3:44:71:4f:50:b9:b8:02:d8:e5:92:58:d7:ae:2b:8e:44:
e0:e5:02:b2:f4:ac:41:4b:05:dd:2a:6b:f8:26:77:6e:19:8c:
58:ec:c2:75:a9:0b:76:65:54:aa:9b:4e:b0:16:f8:95:0e:e6:
bf:90:e6:09:10:9a:a8:eb:e7:3e:cb:03:95:e7:e3:1e:1b:e8:
cf:12:48:2c:a7:71:61:cd:40:23:a9:a2:e0:30:01:e6:7a:ad:
5b:96:92:da
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICCsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjdEQ0QxMTAvBgNVBAUTKDNCRDMwMkZBN0EyRTg2NkE2NzlCMUI2MDk2REI2NzQ1
M0EwM0FCODYwHhcNMjUwOTA0MjAwMDI3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjlkMC1mZDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmBPAQF2r9UCqi3HEm9BnEYk4x3wPV+0Ey/1hESb5e8cgJ8raiWe8O64qMdrT
hwZ/OitTSqymqCmpqrb6x8sdy2ryvf/fswRuOlpCdj5gJPaZG1Rhud/zG+PPMslg
Ds8iyJ4/nuU5vr5l7Qlmgw1A6JVwnM1LPVfNusf4//Ps0Hrc5ahjZlLkOivRLSgq
R06nL/bCDAyJnB/i+7DcsSsWnos1rcOJPeYg13JwZ0kVtfhaZV4GC0HjNLIkwtka
/6lRV4v5RkRlFZgTx7qpxoj7yKu3lS0lcWmm72X1MIZz1zca29tO24cmAvTKDuu/
alHAx11nWtg8AltpM7OJv8ZggwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFFUEZtd0
WzhckRmMEYY1eqH14qVKMB8GA1UdIwQYMBaAFDvTAvp6LoZqZ5sbYJbbZ0U6A6uG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0RDRC84NDQyOEIwRTcz
RDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWhtcG5teHRnbHR0blJUb0Rx
NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL085TUMtbm91aG1wbm14dGdsdHRuUlRvRHE0WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjdEQ0QvODQ0MjhCMEU3M0QxMTFFQTlDREVDNTM0QzRGOUFFMDIvNjI1MTJFMkM3
M0QzMTFFQUJDOTlENjNBQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCJ21cAwQBZ3jkMA0GCSqGSIb3DQEBCwUAA4IBAQC1gsehNHDyt0YZ
Oi6dge4LmxSkjwKoWC82TnI79Cqpk3f8edyb22OGspeXscLjc9APux+cyBxBNfll
00NCUv0EudEZJ62DzKw0F+XTAWFr9nvThmTJR0SwK1uVHVQ3LvcofyM5+p85y8Hw
TkfvggEbJmDnr7uD9xJTcsrhEUeApc2AmNtnYgDEsxxrU7CcvubdZix3CERExGUv
NX7d0/E1wwD8w0RxT1C5uALY5ZJY164rjkTg5QKy9KxBSwXdKmv4JnduGYxY7MJ1
qQt2ZVSqm06wFviVDua/kOYJEJqo6+c+ywOV5+MeG+jPEkgsp3FhzUAjqaLgMAHm
eq1blpLa
-----END CERTIFICATE-----
Generated at Thu Mar 12 16:50:11 2026 by rpki-client