
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/3701B6ECAB3511F18DD665A26C11F970.roa
File: 3701B6ECAB3511F18DD665A26C11F970.roa (raw, json)
Hash identifier: AtFyjSzJpmwJS5++D9ZwxOebly4i8uSwVic2GM31Rrg=
Subject key identifier: 50:50:91:C4:34:6D:8E:CA:88:09:1C:F4:C6:BB:DA:5F:AA:FF:97:32
Certificate issuer: /CN=A91620ED/serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815
Certificate serial: 2B38
Authority key identifier: AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/3701B6ECAB3511F18DD665A26C11F970.roa
Signing time: Tue 08 Sep 2026 03:27:27 +0000
ROA not before: Tue 08 Sep 2026 03:27:27 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 4913
IP address blocks: 202.80.160.0/24 maxlen: 24
202.80.161.0/24 maxlen: 24
202.80.162.0/24 maxlen: 24
202.80.163.0/24 maxlen: 24
202.80.165.0/24 maxlen: 24
202.80.166.0/24 maxlen: 24
202.80.167.0/24 maxlen: 24
202.80.169.0/24 maxlen: 24
202.80.170.0/24 maxlen: 24
202.80.171.0/24 maxlen: 24
202.80.172.0/24 maxlen: 24
202.80.174.0/24 maxlen: 24
202.80.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl
rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 15:35:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11064 (0x2b38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91620ED, serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815
Validity
Not Before: Sep 8 03:27:27 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6a9f809f-05d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d3:00:dc:a1:da:df:02:30:1f:2a:12:aa:43:
40:b8:df:06:8d:0a:79:4b:5b:1c:70:b1:35:db:65:
e1:bf:a8:71:3b:9e:f9:06:41:1f:6d:30:62:38:ae:
13:9d:74:0a:dc:27:ba:43:7e:4f:45:01:a1:02:63:
46:30:f2:61:6d:99:cc:80:20:65:fc:78:5c:58:5e:
27:63:2f:a1:11:57:8c:e1:26:30:97:0a:e0:e2:e2:
48:d5:04:cf:33:a8:1e:68:8c:1a:f3:f3:df:98:65:
ec:5a:37:03:ef:1b:78:18:8d:f8:30:b3:3e:85:8b:
72:54:8a:ca:93:a1:be:c4:ee:0c:d3:7e:13:d7:d2:
cb:0a:b8:3e:fa:b6:13:d2:59:b3:c8:f2:00:7b:53:
38:7d:06:fb:af:9f:12:17:b0:f6:02:49:0f:58:05:
86:0d:79:ac:0e:fa:c5:de:63:27:15:5b:9c:16:5a:
4a:a3:e3:2b:31:db:d4:70:fd:25:ea:32:c4:e3:3d:
71:9b:16:6a:90:2e:04:85:09:12:ed:5b:ef:10:d8:
e2:c5:9e:49:0b:a0:41:4e:9f:97:bd:d0:da:79:92:
27:db:67:1f:22:de:54:12:c5:88:ea:13:54:3e:11:
be:e3:43:6c:94:c8:08:96:f5:9d:4c:07:01:b3:10:
b5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:50:91:C4:34:6D:8E:CA:88:09:1C:F4:C6:BB:DA:5F:AA:FF:97:32
X509v3 Authority Key Identifier:
keyid:AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/3701B6ECAB3511F18DD665A26C11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
202.80.160.0/22
202.80.165.0-202.80.167.255
202.80.169.0-202.80.172.255
202.80.174.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:c9:89:49:23:88:9d:6a:4f:b2:5a:c1:5d:0e:a1:94:90:b8:
ea:c8:a0:21:b8:7a:5d:bf:b0:9c:60:3f:39:1a:8e:c9:33:52:
05:44:26:7a:04:6a:00:38:84:90:e2:4e:b6:ff:57:9b:4a:58:
dc:cf:a8:40:71:fc:b0:a8:a2:09:66:cc:da:04:8e:20:03:7e:
43:e3:d1:8d:9c:2c:c6:d6:3a:98:51:04:7d:cd:99:11:5c:e6:
39:81:84:f4:1e:19:d2:e5:3b:7d:b5:9e:47:91:2d:f5:c8:3a:
18:27:12:e1:fe:d8:db:4c:69:22:58:8f:34:54:0a:7b:44:04:
c4:50:e5:b2:5b:84:b8:94:88:05:46:78:08:8f:ef:a3:d7:1a:
67:44:2a:f3:60:f8:f3:a4:47:86:7c:4c:56:42:a9:33:7d:ea:
3c:fa:db:f9:23:df:e0:91:1f:fa:5c:a0:0a:f0:4e:08:84:e6:
14:e6:19:c2:f9:06:f8:77:a1:d4:a9:91:88:5b:2f:72:a8:2f:
00:51:a0:23:7d:4e:f7:13:f4:e3:48:5f:06:91:c7:53:7a:76:
d1:67:2d:ea:b5:05:ec:4d:5d:d5:78:11:53:cb:c8:2f:57:fb:
94:69:65:ae:15:81:66:07:6d:fa:81:c2:f8:48:24:f4:6e:86:
fb:bb:e8:8c
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgICKzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjIwRUQxMTAvBgNVBAUTKEFGNkFFMzI1QjRGODgwRTM2MjA1MUU3QzNERkRGMUI4
QjJBNUE4MTUwHhcNMjYwOTA4MDMyNzI3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTlmODA5Zi0wNWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5tMA3KHa3wIwHyoSqkNAuN8GjQp5S1sccLE122Xhv6hxO575BkEfbTBiOK4T
nXQK3Ce6Q35PRQGhAmNGMPJhbZnMgCBl/HhcWF4nYy+hEVeM4SYwlwrg4uJI1QTP
M6geaIwa8/PfmGXsWjcD7xt4GI34MLM+hYtyVIrKk6G+xO4M034T19LLCrg++rYT
0lmzyPIAe1M4fQb7r58SF7D2AkkPWAWGDXmsDvrF3mMnFVucFlpKo+MrMdvUcP0l
6jLE4z1xmxZqkC4EhQkS7VvvENjixZ5JC6BBTp+XvdDaeZIn22cfIt5UEsWI6hNU
PhG+40NslMgIlvWdTAcBsxC12QIDAQABo4ICgjCCAn4wHQYDVR0OBBYEFFBQkcQ0
bY7KiAkc9Ma72l+q/5cyMB8GA1UdIwQYMBaAFK9q4yW0+IDjYgUefD398biypagV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFRC9FN0UyMzFFNjM3
MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdPTmlCUjU4UGYzeHVMS2xx
QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3IycmpKYlQ0Z09OaUJSNThQZjN4dUxLbHFCVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjIwRUQvRTdFMjMxRTYzNzAwMTFFNEIzMkJEMDZCQzRGOUFFMDIvMzcwMUI2RUNB
QjM1MTFGMThERDY2NUEyNkMxMUY5NzAucm9hMEEGCCsGAQUFBwEHAQH/BDIwMDAu
BAIAATAoAwQCylCgMAwDBADKUKUDBAPKUKAwDAMEAMpQqQMEAMpQrAMEAcpQrjAN
BgkqhkiG9w0BAQsFAAOCAQEAbsmJSSOInWpPslrBXQ6hlJC46sigIbh6Xb+wnGA/
ORqOyTNSBUQmegRqADiEkOJOtv9Xm0pY3M+oQHH8sKiiCWbM2gSOIAN+Q+PRjZws
xtY6mFEEfc2ZEVzmOYGE9B4Z0uU7fbWeR5Et9cg6GCcS4f7Y20xpIliPNFQKe0QE
xFDlsluEuJSIBUZ4CI/vo9caZ0Qq82D486RHhnxMVkKpM33qPPrb+SPf4JEf+lyg
CvBOCITmFOYZwvkG+Heh1KmRiFsvcqgvAFGgI31O9xP040hfBpHHU3p20Wct6rUF
7E1d1XgRU8vIL1f7lGllrhWBZgdt+oHC+Egk9G6G+7vojA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:22:20 2026 by rpki-client