
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/A7E91DCE275A11F09892587AC4F9AE02.roa
File: A7E91DCE275A11F09892587AC4F9AE02.roa (raw, json)
Hash identifier: VodCQabq1IbPCus5pHQhyGD++qZLTtasy8SvCuAOjAA=
Subject key identifier: 57:23:14:FB:58:87:C2:0B:37:ED:70:F0:D7:1A:89:5E:7E:A8:08:FF
Certificate issuer: /CN=A917535F/serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C
Certificate serial: 012A
Authority key identifier: 3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/A7E91DCE275A11F09892587AC4F9AE02.roa
Signing time: Sat 07 Nov 2026 06:52:30 +0000
ROA not before: Sat 07 Nov 2026 06:52:30 +0000
ROA not after: Mon 31 Jan 2028 00:00:00 +0000
asID: 55720
IP address blocks: 203.99.148.0/24 maxlen: 24
203.99.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl
rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 06:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298 (0x12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917535F, serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C
Validity
Not Before: Nov 7 06:52:30 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=6aeecaae-dad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c1:b7:72:16:f0:b9:80:a7:e1:c9:22:c2:ea:
0e:11:11:bc:89:da:09:07:39:2f:76:cd:7e:32:05:
b6:3a:7d:f1:09:36:28:03:b2:cb:87:9e:bf:34:14:
a5:3c:9a:0f:f8:2d:4b:87:87:28:7d:e8:99:79:86:
7d:a5:2b:cd:2b:12:1f:1f:8a:a5:68:da:d1:98:24:
e5:a3:a1:a3:ff:39:c8:6e:fe:9a:55:96:0b:44:4a:
ef:e6:02:a4:be:f4:0b:e0:03:fd:62:d1:9a:56:73:
3f:88:c7:ba:3d:0d:4e:01:cb:10:24:f1:60:8c:ca:
c7:9c:5d:06:c8:b0:13:b6:01:06:68:38:d7:58:e7:
f4:64:f2:d5:66:9a:ed:25:34:4b:84:19:06:c5:8b:
43:7e:bd:77:9e:0e:02:ba:95:57:9c:da:1e:bc:8e:
e7:81:2c:95:cd:af:d7:8a:b6:e7:39:38:65:23:22:
35:80:2d:cd:c2:93:1d:24:6b:5b:9c:ac:79:f0:e9:
f1:8e:52:a1:89:e2:0b:09:84:fb:a0:fd:b0:b2:1b:
95:34:38:64:96:1f:d4:9c:9f:34:57:20:35:e4:9a:
cb:48:85:a1:d5:40:87:24:29:4a:b0:56:af:cb:68:
ad:ae:46:19:05:96:02:6a:46:41:49:54:ca:ae:a8:
3f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:23:14:FB:58:87:C2:0B:37:ED:70:F0:D7:1A:89:5E:7E:A8:08:FF
X509v3 Authority Key Identifier:
keyid:3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/A7E91DCE275A11F09892587AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.99.148.0/23
Signature Algorithm: sha256WithRSAEncryption
32:a8:79:33:5d:f6:0b:77:b5:2b:97:6e:41:a5:c7:8a:c9:83:
b1:80:cf:7f:4b:e4:fa:9d:10:b0:ea:0c:af:38:33:51:07:60:
f9:f6:22:a2:7c:76:25:d9:dc:7d:d6:ac:60:0e:17:7f:3f:fe:
cc:df:50:e0:6c:a9:a5:0d:7c:9f:5e:bf:04:02:97:6c:73:7e:
3e:df:91:43:3a:3d:cb:51:4f:15:93:20:42:1b:0d:3e:5a:59:
b9:77:18:96:0f:80:3a:9b:13:bf:46:d7:2d:84:20:7d:3b:44:
fa:68:7e:d8:1a:d5:a5:e0:fe:fa:fa:e5:cb:19:3c:e4:c2:4d:
b7:9c:d8:4f:77:0a:d8:bf:3f:91:d1:fd:19:35:b2:d3:c8:d8:
03:55:d9:1f:a7:65:c7:66:f8:cc:a1:7e:47:a9:36:66:12:d8:
d6:41:d2:40:bb:09:20:74:c7:d4:33:5f:23:21:f8:b0:38:03:
92:16:85:c6:21:f4:1f:39:3d:d8:3f:a7:f6:b3:bd:7e:6f:96:
87:c9:8f:50:fe:a2:b6:d1:66:c3:67:94:6f:04:a1:e1:81:54:
45:e2:5a:52:b5:e4:ba:32:d0:1f:78:73:16:e5:69:f4:e2:4c:
5a:98:eb:c3:85:25:38:79:3e:68:b0:ee:7c:56:b7:d1:b7:d3:
37:bd:51:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:51:10 2026 by rpki-client