
$ rpki-client -vvf rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/CAB4E520455111F1948CBD49A9833773.roa
File: CAB4E520455111F1948CBD49A9833773.roa (raw, json)
Hash identifier: QPCmy8z5Tsl2gxw51p+EgKnHOdeHl/XaVRVpoOC+to0=
Subject key identifier: CB:F1:B3:35:54:D0:71:3C:43:DC:7F:45:06:E1:5E:23:6E:67:76:31
Certificate issuer: /CN=A91644E2/serialNumber=76A4972561FBE52A3A670B78245113B83BE8D806
Certificate serial: 03
Authority key identifier: 76:A4:97:25:61:FB:E5:2A:3A:67:0B:78:24:51:13:B8:3B:E8:D8:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqSXJWH75So6Zwt4JFETuDvo2AY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/CAB4E520455111F1948CBD49A9833773.roa
Signing time: Fri 01 May 2026 11:35:02 +0000
ROA not before: Fri 01 May 2026 11:35:02 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 132279
IP address blocks: 203.2.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/dqSXJWH75So6Zwt4JFETuDvo2AY.crl
rsync://rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/dqSXJWH75So6Zwt4JFETuDvo2AY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqSXJWH75So6Zwt4JFETuDvo2AY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91644E2, serialNumber=76A4972561FBE52A3A670B78245113B83BE8D806
Validity
Not Before: May 1 11:35:02 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69f48fe6-fca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:27:43:b2:18:e1:e9:7a:e0:37:53:b8:a5:ba:
e3:6b:f3:d4:7d:7f:83:c4:29:fa:52:37:92:20:25:
b6:68:8e:a3:cd:b9:76:76:17:19:a0:3e:bc:c7:57:
ed:d2:d6:2c:c4:76:9a:7a:50:53:86:39:77:93:60:
3d:e2:1c:56:12:32:60:f7:8f:fd:cd:83:4d:41:3b:
0b:a5:14:7c:13:22:82:e0:4e:6c:13:d6:9f:85:a2:
9a:2c:19:ea:31:25:b7:49:4a:ee:7d:42:6d:50:d1:
b9:a7:99:1a:74:0c:a8:c2:48:41:e9:b5:89:7f:81:
34:99:67:2b:ab:95:d6:c7:70:2d:2b:4a:34:26:69:
70:2a:5e:52:b6:a7:d4:01:f1:38:83:c8:01:ae:a9:
ee:70:33:11:5d:82:78:82:c4:b9:4c:3a:13:c8:85:
98:f2:a9:18:f2:e8:50:46:3c:0f:0b:d6:1c:05:8a:
35:d7:29:70:a8:95:8f:65:40:29:a4:15:2f:76:6c:
0d:ef:cf:b3:5e:2d:9a:cd:82:15:1f:68:b8:93:3b:
9c:0e:b5:ba:0a:60:5e:12:84:d5:58:30:fd:a1:16:
1b:23:c4:2d:96:81:76:17:63:b3:25:dc:d5:1a:9a:
8c:64:75:37:a3:65:f3:d5:f8:95:1f:be:bf:f5:8e:
db:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F1:B3:35:54:D0:71:3C:43:DC:7F:45:06:E1:5E:23:6E:67:76:31
X509v3 Authority Key Identifier:
keyid:76:A4:97:25:61:FB:E5:2A:3A:67:0B:78:24:51:13:B8:3B:E8:D8:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/dqSXJWH75So6Zwt4JFETuDvo2AY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqSXJWH75So6Zwt4JFETuDvo2AY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91644E2/ECD45028452411F186BF7CF699833773/CAB4E520455111F1948CBD49A9833773.roa
sbgp-ipAddrBlock: critical
IPv4:
203.2.186.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:11:7e:1a:44:02:fc:76:0a:8b:df:22:1a:90:53:fc:d1:e8:
9e:7c:49:c7:c5:7a:88:52:7d:d4:b5:fe:d6:68:03:cd:39:9a:
4e:79:24:d8:1c:ee:2d:18:dd:32:cd:ed:cf:cc:51:b5:36:0d:
b1:62:8a:97:37:cf:26:d8:3d:06:87:3d:00:24:2f:74:ee:cd:
cb:ba:5c:ea:66:23:89:ad:c5:7c:77:6f:af:7f:8b:11:5d:17:
ed:1f:19:27:e8:17:ee:29:53:a1:30:2f:6f:ec:aa:09:e1:68:
b8:6b:84:fb:77:30:73:14:04:14:a1:30:ec:54:c3:3d:9d:0a:
b3:0f:43:53:bb:96:82:dc:32:a2:b4:e9:7c:b1:eb:52:35:0d:
54:bc:25:67:38:41:ad:69:55:4c:ee:49:1e:41:18:b6:51:ab:
4e:b2:e8:d1:2d:2e:ad:90:ee:48:bc:77:4d:4a:44:a1:82:35:
58:32:44:d6:f8:f8:84:44:82:72:3f:b0:ba:0b:d7:e1:2c:d3:
ab:4b:5b:53:a6:2b:86:dd:89:68:82:92:29:32:ac:30:51:3e:
f5:4a:1e:d7:bb:df:2d:8e:86:71:f7:ec:59:5d:44:7c:c9:cd:
04:e5:0f:30:44:bf:f4:23:44:23:fd:f0:a7:1a:04:2d:fb:cc:
67:c2:a6:8b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 12:18:06 2026 by rpki-client