
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/4034878C531411F0B5969F4DC4F9AE02.roa
File: 4034878C531411F0B5969F4DC4F9AE02.roa (raw, json)
Hash identifier: Z6ny3a79tk4mktg3oocnwafxfa8++GDa/6xXAsjURUM=
Subject key identifier: 9B:2D:5A:9C:80:65:84:E4:8D:2B:E3:42:9A:00:F4:3B:6D:21:57:FA
Certificate issuer: /CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8
Certificate serial: 01AB
Authority key identifier: 6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/4034878C531411F0B5969F4DC4F9AE02.roa
Signing time: Tue 05 May 2026 04:37:27 +0000
ROA not before: Tue 05 May 2026 04:37:27 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 9734
IP address blocks: 203.20.114.0/24 maxlen: 24
2001:df3:b540::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl
rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A54FE, serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8
Validity
Not Before: May 5 04:37:27 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69f97406-f910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6b:3c:53:17:44:11:bd:3f:e9:cb:79:f9:2d:
2d:98:f2:5e:fc:82:3d:8d:ed:a3:dc:4d:aa:90:58:
2b:78:8e:e0:09:fa:39:28:39:41:ca:44:cf:38:6a:
cb:60:c2:ef:cf:8d:bd:f2:ac:c3:12:b4:14:b1:3a:
34:5b:ad:97:3a:69:c3:24:57:d9:b7:9e:09:21:81:
8f:a5:49:1d:b8:57:0a:18:2e:a8:18:bf:16:82:d3:
a8:c2:cb:c1:df:22:2b:91:4e:d7:46:db:e5:44:f1:
9f:39:90:9f:f7:de:4c:ba:2d:11:3b:a8:1f:df:aa:
44:1c:2f:19:d3:77:99:0f:1e:b7:b0:9f:29:b6:04:
cf:93:c0:06:24:bd:62:95:b1:a3:70:35:0f:20:fc:
3a:02:22:04:bd:f1:71:a6:b9:73:05:de:21:9e:9b:
80:d0:93:54:a6:c3:ed:2e:de:a4:c9:dc:a8:ab:38:
3d:4d:25:6e:56:d3:f7:54:69:db:ca:5c:cd:84:14:
c6:d9:6a:07:5c:ad:4c:08:cb:f6:f3:f7:5d:83:0c:
cb:67:b1:92:a5:33:05:a2:5a:94:96:4f:42:8b:a1:
64:d9:2d:7e:82:2c:a8:1b:e3:55:24:5c:93:57:31:
b3:1a:7b:14:74:3a:c1:66:ca:3a:d8:2a:70:d3:31:
a0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2D:5A:9C:80:65:84:E4:8D:2B:E3:42:9A:00:F4:3B:6D:21:57:FA
X509v3 Authority Key Identifier:
keyid:6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/4034878C531411F0B5969F4DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.20.114.0/24
IPv6:
2001:df3:b540::/48
Signature Algorithm: sha256WithRSAEncryption
93:2e:2c:f0:5b:77:c6:97:af:b5:1d:97:95:b6:d6:37:b4:a4:
73:30:82:02:b7:59:3d:99:84:00:03:e0:6b:b9:b4:20:e0:e3:
90:94:07:1f:a9:4b:84:48:0f:f3:b3:64:a9:86:4c:b8:59:af:
1f:57:d1:20:e9:ed:ac:b5:66:09:46:78:2a:8b:2d:8f:9c:7e:
b1:f7:f0:fe:e7:ca:3b:87:25:89:bf:fb:70:12:0b:99:8b:15:
d8:82:c9:5f:de:a0:58:0e:ef:c8:d4:28:b8:80:cb:cc:4e:68:
03:6f:6b:52:fa:54:a4:fd:26:b8:dc:8e:42:42:60:87:db:a1:
dd:d3:29:03:30:2a:12:dc:fa:b3:35:08:5a:f1:aa:75:5c:a1:
1e:c6:8d:ae:39:9e:81:14:f7:74:40:c5:b9:8b:e4:d7:37:ad:
c5:8b:2d:89:ba:0a:e6:9b:8c:11:b1:84:f0:dd:9a:05:2f:f0:
27:47:23:6a:76:b4:4c:8c:5a:38:82:92:5c:a9:d3:82:a2:c9:
f7:c1:42:58:87:3e:5c:db:9b:03:dc:ae:70:1e:88:2a:03:e1:
c4:60:6d:6e:0a:7a:0a:89:b4:2c:44:51:71:03:9d:fe:e6:d4:
69:ce:56:3b:ca:f6:2f:18:58:12:ad:3f:96:8d:db:ac:31:42:
85:57:0b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:41:21 2026 by rpki-client