
$ rpki-client -vvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/F6E7CED8B8C611EEAC13CC11C4F9AE02.roa
File: F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (raw, json)
Hash identifier: fakttJYQzarYugL3HPUrscxEzZ0ExJMcVxvX8m8OadA=
Subject key identifier: 40:FE:A5:7F:66:9C:82:48:83:2F:C8:05:89:E1:69:FD:CB:FA:26:87
Certificate issuer: /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053
Certificate serial: 0192
Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/F6E7CED8B8C611EEAC13CC11C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:35:23 +0000
ROA not before: Wed 21 May 2025 04:35:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 131239
IP address blocks: 202.37.64.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl
rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 03:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402 (0x192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91573B8, serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053
Validity
Not Before: May 21 04:35:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a5921b-1493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:de:bd:34:6f:fd:09:f5:0b:8c:64:8f:ae:86:
51:6a:3f:87:09:50:12:39:fc:cd:80:17:90:73:4b:
70:88:37:c0:af:d0:54:6e:a2:16:3d:57:67:e4:cb:
6c:aa:df:89:04:51:24:0b:5c:ba:00:65:a5:79:b3:
ed:72:02:21:e3:dc:b6:4e:a0:e1:9f:9f:3c:72:af:
49:0f:9a:ec:ad:64:ae:51:07:06:ec:53:7e:ab:22:
56:5a:d6:77:b1:a2:fd:06:7a:b4:25:1b:67:c6:f4:
05:f6:fe:6b:77:f4:4b:91:29:b4:c9:e7:57:ed:c6:
2e:0b:c8:bf:93:06:45:bd:40:76:54:12:18:f9:83:
bd:0c:7d:53:b4:ff:cf:19:3c:dd:f5:1b:07:3b:87:
48:5f:44:5b:e5:c8:62:65:d4:7c:f3:84:17:9e:0e:
9e:f1:81:37:c0:8e:17:71:54:d6:83:aa:27:5a:41:
86:2e:88:a1:2b:ad:9f:84:72:14:0c:2b:0d:e0:f8:
50:d2:1d:19:c7:00:02:45:5c:c8:61:c6:90:e8:e2:
7e:a0:4c:a7:26:85:7f:af:d1:ba:3a:b1:11:f7:b1:
5a:c9:3e:f8:64:41:27:3c:38:fb:65:e5:e9:2b:ae:
90:e6:47:d3:75:cb:ed:c7:39:c1:5e:80:3f:10:79:
af:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FE:A5:7F:66:9C:82:48:83:2F:C8:05:89:E1:69:FD:CB:FA:26:87
X509v3 Authority Key Identifier:
keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/F6E7CED8B8C611EEAC13CC11C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.37.64.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:02:fd:0a:81:f4:be:74:21:6f:89:9c:d2:a8:d8:93:a1:ec:
ea:ae:9a:b8:59:c2:bb:de:cf:cc:75:95:92:3a:bb:de:d3:53:
52:fb:b1:c0:9f:5b:92:bc:af:8a:a3:07:7a:b8:8c:48:8d:73:
87:c2:0e:19:84:cd:d8:41:37:03:b7:16:83:ea:ff:b9:95:5a:
da:dc:7d:65:a8:24:28:f3:ce:14:1e:d9:5a:50:0e:f3:c1:99:
4e:d5:ae:e4:e5:ce:21:90:6a:3e:7c:4a:99:57:06:b6:3b:b8:
9b:4f:41:75:ae:4f:2e:a9:7b:f0:b9:66:03:6b:2b:f2:6c:9f:
ce:2d:77:5f:4c:46:64:09:13:80:12:99:60:19:2c:83:14:8c:
8f:d0:ef:f6:e4:d1:f6:cb:0d:6a:fb:ea:d1:8e:de:7a:ee:5e:
66:10:b7:7a:91:10:4a:f2:b8:af:16:0c:c9:0e:14:3e:ed:44:
a2:b1:52:be:ad:ab:d7:50:87:2d:c7:14:7c:a4:ac:c1:42:7b:
5d:95:d8:78:d0:fd:f8:0d:2b:e3:0f:41:51:20:0f:b6:a3:4b:
5c:6b:72:cb:c2:9b:b1:a3:27:e8:4b:d9:55:01:6e:2e:c8:16:
6f:79:6a:96:b5:44:7c:0b:3e:37:ae:f0:d7:bc:ad:10:89:ef:
ac:cb:8b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 18:56:41 2026 by rpki-client