
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/ECE2E908B34C11F1902F4B313511F970.roa
File: ECE2E908B34C11F1902F4B313511F970.roa (raw, json)
Hash identifier: VKdOcR7nd8Uy4p/yEaUCGqVIBZDXHU6mvcAdNqe4W5E=
Subject key identifier: B1:80:4E:0B:B8:51:A4:16:77:B5:A9:1A:24:7A:97:4D:22:23:DF:C2
Certificate issuer: /CN=A91423C1/serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8
Certificate serial: 0231
Authority key identifier: 41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/ECE2E908B34C11F1902F4B313511F970.roa
Signing time: Fri 18 Sep 2026 10:37:20 +0000
ROA not before: Fri 18 Sep 2026 10:37:20 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 152125
IP address blocks: 36.50.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl
rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 03:19:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 561 (0x231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91423C1, serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8
Validity
Not Before: Sep 18 10:37:20 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6aad1460-ed52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:79:ac:3d:c1:e8:49:c8:0d:17:c9:a6:ac:3b:
52:13:3e:9b:f6:95:42:d1:c8:43:96:b1:3e:75:fc:
72:e4:9e:45:c2:d8:e2:eb:e8:4a:b4:26:00:66:b5:
72:f2:51:cc:8c:c2:da:ec:7e:07:c8:15:21:7e:fd:
79:d5:1b:86:ba:eb:30:05:94:68:c5:6e:3e:e4:12:
f6:fb:16:f4:24:f9:ac:14:d2:9a:4d:fe:80:44:d6:
57:36:21:2a:03:60:49:a7:4d:f2:86:c6:a2:6f:ff:
4a:1a:65:cd:85:f0:5b:a9:57:32:e9:7d:25:21:a7:
6a:94:a2:6e:13:29:f1:fe:7f:08:17:46:d9:57:ea:
e4:2e:e8:34:66:43:01:c8:44:a9:9e:0d:1c:31:5f:
d4:d0:06:8f:5b:f6:c0:aa:19:72:c1:1d:ce:ab:20:
92:d9:66:52:6d:c3:52:1c:00:72:5e:41:9e:3d:82:
fe:a1:66:92:da:93:7f:37:6c:3e:01:47:f8:f1:af:
6a:1c:8f:f0:00:7c:4a:fe:95:77:c0:57:08:9f:71:
70:26:5d:31:af:8d:b4:e4:28:5d:81:b4:ca:9b:17:
a4:bb:70:f9:ac:a5:f5:ef:f5:17:38:da:80:a9:b5:
27:f5:4e:53:8b:e8:ee:67:29:2d:cd:7c:1b:f4:1b:
69:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:80:4E:0B:B8:51:A4:16:77:B5:A9:1A:24:7A:97:4D:22:23:DF:C2
X509v3 Authority Key Identifier:
keyid:41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/ECE2E908B34C11F1902F4B313511F970.roa
sbgp-ipAddrBlock: critical
IPv4:
36.50.31.0/24
Signature Algorithm: sha256WithRSAEncryption
93:5c:6b:bc:fe:4b:ea:17:5d:f0:03:45:0a:82:63:47:d6:c0:
49:3e:04:d8:63:4a:4d:77:5d:31:61:fb:ad:ef:1c:e4:4b:0e:
45:1a:80:a5:9a:96:47:98:d8:1e:b3:06:18:58:c0:80:20:3f:
46:1a:e8:b0:41:f2:1d:f2:2a:5a:f5:5b:87:8d:6d:05:c5:a0:
12:ef:08:0f:ad:b6:02:b8:33:3a:6c:31:f9:3b:be:71:e4:ca:
a9:58:c0:00:75:05:6a:8d:ad:08:50:e2:9f:8e:40:dd:20:3c:
ff:42:cc:03:16:fe:d1:f5:17:f3:53:aa:f4:18:a6:6d:8d:d9:
ac:d5:e0:cc:e6:f2:a3:9e:19:6d:29:b7:38:11:30:0b:b5:95:
ab:42:51:70:40:5f:60:65:af:2e:de:9c:32:ed:f9:7d:34:50:
4b:13:ec:0c:b8:d2:28:cb:c3:f3:5c:4d:ff:80:46:5e:f9:f9:
e2:43:e6:3d:c2:c4:5a:f2:f1:c0:ac:89:e1:81:2e:13:49:18:
45:cb:ab:fd:07:b9:72:3c:bb:86:70:f4:d2:4a:27:e2:53:89:
75:a0:87:df:b5:ba:46:5c:87:a3:a5:aa:20:90:68:b5:aa:46:
78:a6:47:e6:4c:35:73:de:51:a5:7b:10:7d:a8:15:01:55:b1:
24:97:32:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:26:23 2026 by rpki-client