
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/F189CB86C81D11EBA4C0E321C4F9AE02.roa
File: F189CB86C81D11EBA4C0E321C4F9AE02.roa (raw, json)
Hash identifier: LQVhGLWyxc1pklBD2t803Fkz24sxL0uwFy0c3cUoiwk=
Subject key identifier: 97:D6:8A:5D:ED:75:3B:5C:DF:BC:60:DA:5C:A8:ED:DD:37:8D:F6:3D
Certificate issuer: /CN=A91FB5CE/serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643
Certificate serial: 0629
Authority key identifier: 58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/F189CB86C81D11EBA4C0E321C4F9AE02.roa
Signing time: Tue 06 Jan 2026 03:17:14 +0000
ROA not before: Tue 06 Jan 2026 03:17:14 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 137968
IP address blocks: 103.9.49.0/24 maxlen: 24
103.195.66.0/24 maxlen: 24
103.195.67.0/24 maxlen: 24
203.25.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl
rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 22:05:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1577 (0x629)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB5CE, serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643
Validity
Not Before: Jan 6 03:17:14 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=695c7eba-fe37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:94:d0:1f:d2:c8:81:48:1e:0b:d3:e4:a0:7b:
54:67:91:93:6e:95:ad:50:79:69:73:2b:0a:58:5c:
a8:aa:5d:c6:6f:33:62:89:af:5e:8d:34:2e:9b:e9:
53:0a:2a:97:07:c6:ef:4e:f3:0c:66:0f:82:3d:3d:
2f:92:10:30:c7:1c:a3:43:60:62:0d:37:85:cd:a0:
5e:ac:cc:3d:b0:b7:80:e9:f7:ce:75:54:c9:61:9f:
e3:8c:5c:26:4b:c0:7b:e8:a6:c3:15:8b:ff:20:ca:
cf:33:7c:55:b1:30:36:87:67:bc:1c:e1:20:24:31:
b8:30:47:39:70:ca:1a:6f:00:68:5b:aa:6a:d0:7f:
0e:4c:70:22:cf:80:6a:da:68:c6:96:e3:be:df:ec:
43:f1:c6:2a:08:63:43:d2:d6:33:f3:61:5b:69:3a:
c1:b8:4d:16:e3:e8:9a:b5:42:ad:a8:1c:7c:9c:31:
44:14:98:1d:a2:25:8e:11:ad:0a:c9:95:e9:82:f7:
bf:11:3e:b0:6c:02:bc:83:07:66:03:66:8a:67:c0:
a6:d7:c4:05:31:d5:b5:4d:9f:4c:2c:2d:98:8e:1c:
83:a2:17:9b:b6:eb:ea:4e:85:dc:bc:45:73:46:e2:
bc:11:cf:61:e9:ce:96:18:7f:b1:bf:85:9d:ff:17:
2c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D6:8A:5D:ED:75:3B:5C:DF:BC:60:DA:5C:A8:ED:DD:37:8D:F6:3D
X509v3 Authority Key Identifier:
keyid:58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/F189CB86C81D11EBA4C0E321C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.9.49.0/24
103.195.66.0/23
203.25.144.0/24
Signature Algorithm: sha256WithRSAEncryption
77:96:91:e8:7a:fa:72:9c:db:78:d1:b8:d8:f8:ac:40:6c:0d:
c6:b8:fc:b2:40:b5:f4:24:2a:4f:12:78:09:e9:96:cd:6c:d2:
49:65:40:b6:c3:c7:f1:92:14:e4:82:61:db:59:ae:d3:d1:47:
e6:41:54:d3:1b:c9:5e:c9:7f:2f:6a:56:a8:b6:2d:da:e5:20:
b4:f8:e8:f5:42:5e:76:e5:f9:d6:bf:0e:71:19:d5:8c:76:d5:
85:d8:6f:01:06:17:0c:01:d4:6c:f2:34:b6:76:d1:f3:e7:fb:
ec:07:25:a3:fc:a5:74:ff:bb:0e:f6:a1:77:b0:bc:56:53:08:
bd:00:c0:e7:e2:56:d2:ac:da:4f:6b:80:ae:b3:3a:da:b2:28:
ed:bd:da:1d:af:4c:9a:0c:06:b0:e5:4e:82:ee:d5:71:86:d6:
31:0c:e3:dd:0e:1d:96:a7:19:2f:37:7a:53:98:a6:02:f4:57:
d2:7a:60:28:d6:86:18:b6:cc:af:cf:99:55:c9:9f:1b:34:57:
56:a5:cc:35:ff:ca:3c:03:9b:49:02:6f:21:af:d2:9c:a6:81:
11:e8:78:b9:57:76:65:80:72:00:c7:07:cf:78:79:2d:a9:51:
7e:3b:d0:ca:05:ea:66:96:c8:d2:35:cb:7d:57:1f:3b:f0:cc:
62:0b:a6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:13:26 2026 by rpki-client