
$ rpki-client -vvf rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/0009532CC8A811F0BA23CF62C4F9AE02.roa
File: 0009532CC8A811F0BA23CF62C4F9AE02.roa (raw, json)
Hash identifier: Ifd00EOvpFVraLSaS+uwp7hd0qhp96PD39COnivMtFM=
Subject key identifier: D4:29:73:18:1D:5A:7C:5C:B7:21:66:E2:B9:09:03:CB:9F:1C:01:31
Certificate issuer: /CN=A91372E6/serialNumber=E46EACDC214385C142034674E46C68E7BBE29525
Certificate serial: 016F
Authority key identifier: E4:6E:AC:DC:21:43:85:C1:42:03:46:74:E4:6C:68:E7:BB:E2:95:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/0009532CC8A811F0BA23CF62C4F9AE02.roa
Signing time: Tue 03 Mar 2026 04:41:19 +0000
ROA not before: Tue 03 Mar 2026 04:41:19 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 153892
IP address blocks: 203.16.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.crl
rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 04:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367 (0x16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91372E6, serialNumber=E46EACDC214385C142034674E46C68E7BBE29525
Validity
Not Before: Mar 3 04:41:19 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a6666f-99ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:39:a9:67:2e:a1:54:0e:9f:b7:75:92:fb:a0:
60:41:68:de:5f:b0:d0:62:04:b8:e7:b2:12:9c:3b:
39:b2:0c:04:f2:22:5f:04:03:d1:e6:00:c2:11:8b:
1a:c6:63:a5:6e:b5:6e:be:56:9b:b4:02:9e:18:af:
ea:a9:a8:1b:00:6c:d4:f1:85:ac:63:b8:f1:7f:bd:
cf:e7:95:3a:d4:7d:25:bf:06:33:56:64:89:96:b8:
bd:c3:b2:78:1b:a8:e0:d5:87:6e:25:73:fb:f1:3f:
47:56:f8:78:df:5d:47:a9:7c:49:e1:59:0b:d7:2c:
20:df:66:ed:87:8a:5c:04:97:0f:e5:93:65:05:23:
43:a3:8c:c3:cc:86:56:cf:fb:8f:bf:9f:ce:e8:16:
ac:14:39:37:32:93:c0:7b:71:01:99:17:92:a0:6c:
72:88:b4:f8:c0:55:2a:0f:6d:84:35:f9:89:5d:95:
e1:f0:dd:a9:43:93:7e:fd:a8:09:af:5f:a5:c0:0b:
5c:6c:24:74:93:1c:4a:42:27:51:61:97:57:e3:e6:
57:93:bc:26:a0:1f:9d:e7:21:3b:d2:e4:7f:9e:d2:
fb:f7:50:9d:c1:21:08:98:92:a4:e2:0a:d4:50:69:
f0:4b:31:e5:cd:96:3d:89:fd:81:d1:14:be:0e:5e:
1f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:29:73:18:1D:5A:7C:5C:B7:21:66:E2:B9:09:03:CB:9F:1C:01:31
X509v3 Authority Key Identifier:
keyid:E4:6E:AC:DC:21:43:85:C1:42:03:46:74:E4:6C:68:E7:BB:E2:95:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/0009532CC8A811F0BA23CF62C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.16.177.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:dc:ec:11:13:09:ce:1e:17:18:7c:3a:d9:aa:89:22:15:69:
07:0f:a0:f8:78:21:f3:77:3c:4f:25:2c:d6:08:dc:1e:d3:f3:
ac:a8:f4:28:9a:cd:38:5a:70:a5:eb:94:59:68:5e:86:af:23:
52:89:a8:f8:31:f1:2b:4d:a1:f2:a7:32:d6:3a:ec:5f:40:1e:
e3:da:7d:fd:a3:f4:bf:34:5b:05:df:f8:82:8b:6a:a0:1b:72:
94:25:4e:da:f3:32:36:1e:3d:10:80:aa:e0:6a:61:fb:10:cb:
0f:9c:51:6e:30:3a:55:a1:62:b8:dc:f0:86:35:c0:a3:a1:1d:
40:bd:e6:48:20:79:e4:42:52:ed:75:94:28:5f:87:b4:3b:b4:
c5:f5:98:05:97:16:3d:85:e8:29:d2:93:14:d5:6a:64:86:29:
f6:a5:83:d3:4e:cd:b7:28:33:46:9c:63:6f:c4:e5:e8:b6:dd:
65:76:5c:97:50:a1:0a:41:0a:8a:d4:1c:7a:61:28:bb:39:c1:
4e:77:75:cc:45:c5:62:d9:5c:97:78:1f:9f:82:bd:3c:20:c6:
7f:bc:8e:03:9f:71:ba:00:53:53:ef:7e:b9:2f:f6:d2:ee:2f:
90:ae:92:30:02:57:f9:76:ad:a3:fb:69:5d:f5:72:ea:88:c3:
6d:0f:0d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 09:24:11 2026 by rpki-client