
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/90065F424DB511F0A1C8D30DC4F9AE02.roa
File: 90065F424DB511F0A1C8D30DC4F9AE02.roa (raw, json)
Hash identifier: vqS90tievR3HU16OsLXcBKQDauAULDoOuFd6Vz6BI+U=
Subject key identifier: 18:75:FF:7F:6D:CF:C3:68:60:E7:5E:E0:13:61:B6:4D:95:A0:24:95
Certificate issuer: /CN=A91A300F/serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520
Certificate serial: 04CE
Authority key identifier: DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/90065F424DB511F0A1C8D30DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:59:26 +0000
ROA not before: Fri 20 Jun 2025 09:04:25 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 134196
IP address blocks: 202.181.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl
rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1230 (0x4ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A300F, serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520
Validity
Not Before: Jun 20 09:04:25 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a40dfe-a7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:16:47:da:24:f2:7f:bc:d1:71:78:d0:6f:ec:
e0:ca:4f:a7:aa:48:56:ee:8b:1f:d8:ee:2f:91:e3:
92:cd:4c:c8:d3:b8:5c:0f:bf:3e:95:7b:26:07:78:
7f:e0:83:e7:2f:09:24:fd:b2:2b:f6:51:97:32:38:
ac:d4:15:ad:c4:e4:5f:d2:ea:78:99:60:cb:03:bd:
91:2b:0d:a9:dd:c0:61:f1:3d:3e:6d:83:0d:b1:0c:
47:c9:90:7b:41:ed:13:52:45:35:52:10:57:73:5c:
93:b9:32:93:b5:e6:d5:a2:ca:24:2a:f1:ea:bf:b7:
3f:40:dc:86:4d:5f:68:d7:e4:d3:76:0a:1e:ae:73:
06:65:21:6d:a7:bf:4c:99:97:c7:58:45:82:0e:79:
5e:6a:57:b3:e8:c9:b1:9a:d4:e6:be:0e:dc:72:fc:
41:b5:19:5e:0a:f3:ab:63:5f:a5:9a:fb:8f:fb:f0:
6c:cc:a8:4c:2c:fa:e0:9b:78:e3:14:d6:7c:5b:87:
6d:7e:ed:73:89:93:56:22:ab:b2:a2:82:8b:15:64:
66:1c:5c:33:92:11:5d:09:0b:ee:b8:6a:29:f3:f1:
6d:34:4d:e2:e3:d2:da:70:af:65:29:ee:c9:55:0d:
d7:6f:cc:23:a8:18:ce:0f:8f:ec:6a:b0:0e:33:3b:
bf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:75:FF:7F:6D:CF:C3:68:60:E7:5E:E0:13:61:B6:4D:95:A0:24:95
X509v3 Authority Key Identifier:
keyid:DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/90065F424DB511F0A1C8D30DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.181.27.0/24
Signature Algorithm: sha256WithRSAEncryption
90:22:30:d0:c1:62:62:61:9e:91:d5:9c:bb:05:70:fe:6d:ef:
94:97:7f:c1:e2:12:be:77:17:13:8d:ff:e5:19:f2:43:36:ed:
2b:d2:b4:35:ed:85:be:92:25:c2:9b:bc:26:fd:34:3a:4a:a1:
72:b5:a8:bb:84:7e:72:cc:66:9b:75:05:17:5f:54:03:6d:b5:
d3:14:ba:60:4a:0e:fc:a5:dd:15:cc:9d:85:8f:1d:dd:f2:9f:
6b:d2:e7:d4:af:c2:36:dc:13:b0:9a:94:2c:be:97:1e:fc:f6:
1d:8f:da:3d:89:c1:f7:03:c6:6e:2e:91:d7:78:aa:53:2b:b1:
ff:85:18:5f:23:27:73:a2:91:2f:ad:70:83:81:33:34:dd:f9:
dc:2c:db:54:4b:fd:80:a4:5a:53:48:67:f0:01:e4:ea:a8:59:
69:ca:2c:99:15:12:f6:e0:c3:be:e4:06:8e:ea:5a:7d:18:e0:
be:f9:5f:61:35:6f:3f:81:82:82:54:6e:aa:88:c7:91:0d:9c:
85:b0:75:33:be:12:8c:c9:c1:a2:df:47:ac:81:ef:9d:1a:0a:
35:67:bf:f3:2e:28:f6:f4:4f:de:06:99:ef:5b:ef:90:a5:82:
0f:d7:09:f9:aa:63:79:9c:1d:c7:9d:dc:8a:b9:0b:54:1f:67:
e7:fb:74:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:22:32 2026 by rpki-client