
$ rpki-client -vvf rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/692243D640AA11F096F2746AC4F9AE02.roa
File: 692243D640AA11F096F2746AC4F9AE02.roa (raw, json)
Hash identifier: hrId0XK3QT59rfCxOyEsibtNRieUfn4KutYpjg3t3lE=
Subject key identifier: B7:BC:AD:85:D7:21:2A:55:BA:74:FB:8F:BD:59:8A:30:69:6E:92:E9
Certificate issuer: /CN=A91516FF/serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99
Certificate serial: D0
Authority key identifier: DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/692243D640AA11F096F2746AC4F9AE02.roa
Signing time: Mon 02 Mar 2026 15:16:58 +0000
ROA not before: Mon 27 Oct 2025 09:50:55 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 38195
IP address blocks: 202.40.164.0/22 maxlen: 24
2401:c0e0::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl
rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:17:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208 (0xd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91516FF, serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99
Validity
Not Before: Oct 27 09:50:55 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a5a9ea-1446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ac:2c:cb:b2:18:67:df:a6:af:6c:57:56:ae:
00:46:72:7e:ea:1f:66:50:f3:a7:9c:d6:77:c8:2e:
56:b9:8d:aa:5a:3f:3c:05:c1:03:92:c8:69:53:ea:
be:e9:43:71:a1:75:a9:5d:7f:e0:8d:b8:78:17:62:
6e:73:92:eb:06:e2:eb:ee:ee:a6:39:0a:e3:a6:8e:
b8:f9:13:72:ef:7c:36:70:8d:0b:6c:7d:e8:b2:71:
28:98:be:50:7e:f0:ed:d5:e0:d8:ed:a6:4b:47:5c:
7d:34:7b:b1:83:89:45:4e:a6:27:25:fe:53:64:04:
e6:e2:af:cd:f6:5d:21:06:3e:98:4f:10:76:25:7a:
a4:7e:73:f7:6f:88:f1:5c:e1:f9:aa:2b:93:aa:2f:
e4:20:83:55:6a:6f:2e:cd:3e:65:b4:69:4b:f5:80:
d9:50:75:9b:49:67:98:b1:6a:f2:8d:03:6f:84:a0:
96:81:3f:c6:36:bc:2a:24:75:23:22:26:8d:14:13:
01:37:78:78:4b:70:d8:e6:cb:04:76:d0:db:e8:92:
f2:78:5b:68:e5:93:f2:9f:c1:df:df:e2:10:75:af:
f4:1a:bc:e8:d9:fc:d2:84:79:f7:aa:2a:16:2d:7f:
1e:e8:49:cb:6e:22:3c:b0:94:7d:16:5a:53:54:d8:
4b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BC:AD:85:D7:21:2A:55:BA:74:FB:8F:BD:59:8A:30:69:6E:92:E9
X509v3 Authority Key Identifier:
keyid:DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/692243D640AA11F096F2746AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.40.164.0/22
IPv6:
2401:c0e0::/32
Signature Algorithm: sha256WithRSAEncryption
d7:bd:83:e2:82:8c:bd:b7:38:9d:17:6b:d9:1e:72:9c:21:94:
6b:e5:97:d5:11:61:57:74:13:3a:24:72:7a:0c:be:ba:ca:40:
77:35:69:79:26:7e:0a:9e:f5:d1:b9:a4:e8:d3:b7:67:f1:24:
6c:84:d3:fa:6d:d1:ad:0a:70:70:10:6b:70:4e:da:e7:cc:de:
99:ea:0e:f0:ee:fe:fc:28:49:71:50:41:56:c6:73:a2:d6:c0:
25:76:3b:f7:bf:d6:6f:28:c8:c4:ba:ed:33:8d:fd:c1:0b:b5:
80:b5:29:b8:61:90:5b:ae:c0:a1:48:ee:07:a9:0f:bd:0e:aa:
aa:e4:74:59:bb:09:06:d6:84:14:12:5c:c3:9e:d9:e5:e3:29:
12:10:29:98:c2:dd:7f:f2:06:7c:bf:5e:9f:f2:7c:c0:a0:c6:
f1:44:0f:86:14:91:7b:58:79:9c:6a:cc:48:17:fa:9d:d9:9f:
f1:d1:31:cb:5b:38:30:cf:83:7e:7f:f1:b1:c9:fe:18:26:94:
d2:b8:90:f8:0c:49:b6:f0:c4:15:85:8b:ef:ef:84:ec:1c:4d:
45:3c:af:68:64:db:19:4c:27:f6:8d:f1:97:91:08:3d:d2:7e:
c3:a2:8e:0b:1a:a9:71:02:30:ba:ae:ec:eb:c1:65:08:8e:71:
2e:a5:0f:64
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTE2RkYxMTAvBgNVBAUTKERGQ0E4RkRBQTVGRUY5NDhFMEVDRjZGOUM3MDM2MzlC
NTY1MzlEOTkwHhcNMjUxMDI3MDk1MDU1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1YTllYS0xNDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApqwsy7IYZ9+mr2xXVq4ARnJ+6h9mUPOnnNZ3yC5WuY2qWj88BcEDkshpU+q+
6UNxoXWpXX/gjbh4F2Juc5LrBuLr7u6mOQrjpo64+RNy73w2cI0LbH3osnEomL5Q
fvDt1eDY7aZLR1x9NHuxg4lFTqYnJf5TZATm4q/N9l0hBj6YTxB2JXqkfnP3b4jx
XOH5qiuTqi/kIINVam8uzT5ltGlL9YDZUHWbSWeYsWryjQNvhKCWgT/GNrwqJHUj
IiaNFBMBN3h4S3DY5ssEdtDb6JLyeFto5ZPyn8Hf3+IQda/0Grzo2fzShHn3qioW
LX8e6EnLbiI8sJR9FlpTVNhLvwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFLe8rYXX
ISpVunT7j71ZijBpbpLpMB8GA1UdIwQYMBaAFN/Kj9ql/vlI4Oz2+ccDY5tWU52Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTZGRi8yREE1NTkxMjE0
MTYxMUYwQTg1MjMyMTlDNEY5QUUwMi8zOHFQMnFYLS1Vamc3UGI1eHdOam0xWlRu
WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzM4cVAycVgtLVVqZzdQYjV4d05qbTFaVG5aay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTE2RkYvMkRBNTU5MTIxNDE2MTFGMEE4NTIzMjE5QzRGOUFFMDIvNjkyMjQzRDY0
MEFBMTFGMDk2RjI3NDZBQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCyiikMA0EAgACMAcDBQAkAcDgMA0GCSqGSIb3DQEBCwUAA4IBAQDX
vYPigoy9tzidF2vZHnKcIZRr5ZfVEWFXdBM6JHJ6DL66ykB3NWl5Jn4KnvXRuaTo
07dn8SRshNP6bdGtCnBwEGtwTtrnzN6Z6g7w7v78KElxUEFWxnOi1sAldjv3v9Zv
KMjEuu0zjf3BC7WAtSm4YZBbrsChSO4HqQ+9Dqqq5HRZuwkG1oQUElzDntnl4ykS
ECmYwt1/8gZ8v16f8nzAoMbxRA+GFJF7WHmcasxIF/qd2Z/x0THLWzgwz4N+f/Gx
yf4YJpTSuJD4DEm28MQVhYvv74TsHE1FPK9oZNsZTCf2jfGXkQg90n7Doo4LGqlx
AjC6ruzrwWUIjnEupQ9k
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:53:27 2026 by rpki-client