
$ rpki-client -vvf rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/67CB5FC0629411F0B7FA070FC4F9AE02.roa
File: 67CB5FC0629411F0B7FA070FC4F9AE02.roa (raw, json)
Hash identifier: OTM0h3x/rG6DzgQGl54EMsBYVfOYhG4EfKaVuusqLjw=
Subject key identifier: 1B:D3:25:16:65:FA:A6:77:47:E6:7F:E4:C1:99:91:70:9C:17:09:A5
Certificate issuer: /CN=A91466E8/serialNumber=4C22121ADFAE3F575280165151C3FD30E3AAFD01
Certificate serial: C7
Authority key identifier: 4C:22:12:1A:DF:AE:3F:57:52:80:16:51:51:C3:FD:30:E3:AA:FD:01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/67CB5FC0629411F0B7FA070FC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:06:22 +0000
ROA not before: Fri 15 Aug 2025 07:45:29 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 132584
IP address blocks: 203.62.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.crl
rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91466E8, serialNumber=4C22121ADFAE3F575280165151C3FD30E3AAFD01
Validity
Not Before: Aug 15 07:45:29 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a58b4e-9651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e4:8f:cb:55:83:82:44:e5:ec:a9:a4:4f:2d:
5e:36:dd:9c:55:a2:6f:5a:a6:22:70:a4:21:d5:3a:
bf:6d:59:cf:db:15:37:90:c5:42:b3:8c:8c:26:09:
9e:57:c7:e1:46:8b:2c:74:ec:7a:0d:d5:55:dd:94:
a2:e9:e9:86:33:bf:09:b0:6e:e6:0e:75:08:20:24:
44:a9:64:b2:2d:68:d8:9e:3d:b5:db:42:2d:9a:be:
5d:e1:7b:e0:07:07:dd:44:f3:82:bc:b6:56:82:2d:
92:61:67:01:c3:da:a0:94:89:90:5d:84:ea:2f:16:
13:81:37:5a:ba:1c:0b:8c:8b:ab:d4:91:3e:2d:d5:
4f:f3:50:b9:15:18:da:41:91:91:a9:f6:a0:56:02:
b1:ea:07:91:87:21:73:62:f2:af:1c:05:c4:84:bf:
0e:75:f6:69:c1:60:b8:8b:75:5c:99:3e:99:89:c2:
8d:d2:5e:82:22:3d:26:20:e6:c3:ec:e5:43:cb:c2:
e7:0e:7b:03:cc:f0:9e:1c:26:6c:c7:6b:cd:3b:52:
68:25:cf:20:2c:ee:4e:71:4d:d7:b7:4f:2d:be:63:
38:1e:a5:04:78:e6:98:56:d8:04:26:57:2a:83:41:
29:e3:e3:47:7d:64:12:f8:ce:89:09:f0:5d:02:1c:
a1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D3:25:16:65:FA:A6:77:47:E6:7F:E4:C1:99:91:70:9C:17:09:A5
X509v3 Authority Key Identifier:
keyid:4C:22:12:1A:DF:AE:3F:57:52:80:16:51:51:C3:FD:30:E3:AA:FD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/TCISGt-uP1dSgBZRUcP9MOOq_QE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCISGt-uP1dSgBZRUcP9MOOq_QE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91466E8/D8388D34F3FC11EF926CE630C4F9AE02/67CB5FC0629411F0B7FA070FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.62.134.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:3b:24:ba:2a:50:35:46:03:16:e0:c3:08:51:a0:13:25:d0:
bc:a4:fb:20:cf:a0:dd:66:57:e4:f7:14:79:81:4c:b3:66:28:
7d:d4:6a:2c:ba:8a:47:f0:d8:58:a1:f1:66:1b:aa:f2:9d:89:
84:ef:e2:26:81:63:f4:17:d0:2f:77:f2:6b:80:11:a3:2d:8f:
1f:0a:7e:1c:4d:c7:a2:69:e1:43:39:61:85:6a:47:e3:0d:eb:
5a:8d:e9:46:15:c4:f5:6b:86:bd:16:80:16:ac:fb:82:7c:c0:
d6:56:c5:4b:c4:9e:30:a2:b4:1a:69:75:66:a2:43:ba:5f:d6:
d0:f1:7c:89:da:c3:3a:dc:d6:fe:e2:f2:94:dc:36:fe:99:80:
c2:9b:2b:c4:10:82:54:c7:08:68:01:35:b1:65:7f:a0:87:42:
75:ad:72:08:89:5c:f0:39:c0:c9:42:0b:97:6f:39:42:38:08:
c3:47:9d:08:db:2b:36:3a:32:16:5f:89:f1:6e:3c:eb:e5:5a:
01:f9:9d:14:db:87:9c:a9:38:70:05:66:eb:6a:02:01:00:72:
03:65:c7:3b:15:17:c8:77:18:f4:88:12:92:b9:d9:8a:cb:97:
21:be:f4:15:f5:8c:fa:2b:bb:d7:fb:0a:41:14:ab:bf:0b:63:
12:19:13:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:01 2026 by rpki-client