
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/91FAB1ECDA6011ED9BC6175FC4F9AE02.roa
File: 91FAB1ECDA6011ED9BC6175FC4F9AE02.roa (raw, json)
Hash identifier: GKQTSqIzwIY4GOth+FkYLT5SOAlB26R/4wVLOg8mq+Q=
Subject key identifier: EA:D8:AC:DB:1B:04:E3:94:C1:17:1C:77:28:EE:F4:B4:A4:FD:3D:0C
Certificate issuer: /CN=A9170C53/serialNumber=E1D143D9D8EA02224C1CB0C915ECB84EE28B5AAA
Certificate serial: 0253
Authority key identifier: E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/91FAB1ECDA6011ED9BC6175FC4F9AE02.roa
Signing time: Wed 11 Mar 2026 02:36:11 +0000
ROA not before: Wed 11 Mar 2026 02:36:11 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 38079
IP address blocks: 210.48.176.0/24 maxlen: 24
210.48.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.crl
rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 595 (0x253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170C53, serialNumber=E1D143D9D8EA02224C1CB0C915ECB84EE28B5AAA
Validity
Not Before: Mar 11 02:36:11 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69b0d51b-32e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4e:ac:9f:fc:41:49:33:73:72:7b:c3:af:93:
4b:04:d8:d3:61:c5:91:b1:1e:25:c3:5d:3b:d5:8c:
41:e1:57:4a:5e:a8:e5:53:88:38:b4:88:37:d3:e7:
ce:d3:89:d7:9b:9e:1b:e5:8e:f1:e0:bf:ec:43:eb:
5d:e3:f6:a0:12:25:79:d6:23:32:ca:db:5b:ac:a8:
09:ec:ad:83:e9:f9:56:fc:b4:d6:d1:f7:b4:92:c9:
9a:88:03:c4:f5:86:51:7f:7d:33:e4:bc:68:29:49:
af:da:8f:14:0b:49:5d:fa:a2:10:78:1e:57:c7:5b:
38:13:b3:7c:44:22:68:04:5d:40:eb:f9:01:54:74:
66:15:f9:dc:4c:10:bc:bd:22:88:58:47:ef:b5:c2:
2c:27:2e:d6:7d:d0:47:d0:03:a9:9b:47:cc:20:78:
6f:6c:35:71:29:6c:4b:2d:3f:2d:16:9a:69:51:b6:
26:6c:a7:8b:f1:a5:19:01:d8:9f:fe:24:77:1a:ea:
49:b5:44:cf:51:ac:34:b2:d0:2a:9d:96:ec:dd:72:
69:5b:1a:da:30:73:84:51:65:53:26:9e:93:87:e8:
91:f8:1f:21:97:ed:fe:1a:fc:45:44:0c:fc:45:80:
c7:b9:bc:6c:24:3a:bb:8e:a9:bf:ee:af:26:7b:29:
b4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D8:AC:DB:1B:04:E3:94:C1:17:1C:77:28:EE:F4:B4:A4:FD:3D:0C
X509v3 Authority Key Identifier:
keyid:E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/91FAB1ECDA6011ED9BC6175FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.48.176.0/24
210.48.178.0/24
Signature Algorithm: sha256WithRSAEncryption
36:35:a0:d5:82:dc:1f:5b:d7:3d:39:70:3a:50:e0:42:47:13:
81:d3:1e:9e:49:17:cb:76:95:80:3c:0b:e9:bf:f2:95:47:a7:
ec:86:f4:fb:c9:b6:cc:bd:99:bd:59:5a:8e:f3:05:d2:6d:2f:
91:07:75:58:97:be:22:2f:16:1f:64:61:25:36:3e:9e:e6:a7:
71:4d:be:22:85:cf:a7:49:8e:de:8c:fc:4e:f1:e3:50:97:2d:
8c:a5:06:62:6c:69:3c:d0:98:ea:9e:06:16:d1:63:49:bb:1d:
53:79:e0:a7:e6:53:aa:3c:f8:63:21:c5:b9:fe:93:ff:06:cc:
97:00:98:5c:f9:39:8f:0c:45:d0:45:11:36:dd:79:b5:81:4c:
19:ff:3e:cb:60:1c:b5:70:15:ae:f7:fe:bd:31:7b:b2:e1:9d:
c9:cb:22:bf:7c:78:13:99:98:47:1a:13:87:13:4c:47:0a:7d:
9e:2a:b2:77:c3:88:fb:84:29:e4:d5:ea:2e:53:95:dc:2f:cf:
9c:3e:7c:21:fa:81:79:f1:15:ca:72:76:f1:20:e6:da:f0:f5:
7d:96:cd:08:41:ef:c1:9e:e3:f6:9f:d4:13:47:19:83:e4:e1:
bf:8e:66:dc:8d:92:8e:3a:f8:8b:43:63:7e:31:1a:66:d6:6a:
55:1a:ec:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:26:50 2026 by rpki-client