
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/94584738031A11ED934E3D58C4F9AE02.roa
File: 94584738031A11ED934E3D58C4F9AE02.roa (raw, json)
Hash identifier: OaWwFBJ2VuraLrnztPga6D3zvzu6QrQ5pOtTXqQFSQI=
Subject key identifier: EF:A8:B0:1A:51:DA:A1:E2:3B:12:CD:15:05:76:FC:09:52:6F:BA:4C
Certificate issuer: /CN=A91A5577/serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F
Certificate serial: 0336
Authority key identifier: 5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/94584738031A11ED934E3D58C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:04:54 +0000
ROA not before: Tue 29 Apr 2025 02:36:58 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 23727
IP address blocks: 202.94.32.0/20 maxlen: 20
203.24.63.0/24 maxlen: 24
203.27.44.0/24 maxlen: 24
203.29.208.0/23 maxlen: 23
203.55.134.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl
rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 822 (0x336)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5577, serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F
Validity
Not Before: Apr 29 02:36:58 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a42b66-9f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e8:28:a6:e0:62:4e:e0:1b:f5:2f:bf:47:12:
bb:38:cd:bf:cf:03:15:66:46:40:47:cd:cc:9d:fa:
7d:4e:e8:1f:c2:4f:c7:9d:6e:fc:e9:cb:ac:f2:1b:
52:d4:92:2e:bb:7b:a7:87:41:34:4f:3a:e2:2a:53:
c7:ce:a0:f1:ed:e2:3f:ef:78:e4:a6:62:bc:88:82:
4b:a8:45:a2:84:b6:ed:4a:6d:63:31:76:51:00:b4:
fd:e4:60:df:b9:c6:da:63:f4:e8:e9:3e:d3:20:ee:
df:08:a9:02:32:0e:71:b3:ac:44:f7:60:d5:5d:48:
48:2a:19:f2:ce:06:3e:88:ff:bb:4b:1b:cc:92:8d:
04:91:e6:2e:cd:a2:4d:5d:0c:1b:2d:2e:df:ea:c4:
29:fd:04:3f:c3:f6:dd:41:9c:7a:6e:10:95:d7:fa:
b2:1d:03:eb:59:f6:8a:b2:b4:7d:22:64:39:c5:87:
d2:4b:94:e7:99:09:1b:3b:ef:06:58:55:81:d9:07:
3f:72:e9:11:38:cf:47:89:ba:d7:c6:a6:39:d9:83:
71:b0:94:06:37:b7:13:dd:53:90:12:d5:c4:a8:6b:
db:7e:c1:ee:c3:63:5f:b1:a4:96:c6:80:6f:2a:e5:
5c:15:37:86:2d:fc:d6:2e:fa:52:54:8d:1a:64:32:
9e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A8:B0:1A:51:DA:A1:E2:3B:12:CD:15:05:76:FC:09:52:6F:BA:4C
X509v3 Authority Key Identifier:
keyid:5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/94584738031A11ED934E3D58C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.94.32.0/20
203.24.63.0/24
203.27.44.0/24
203.29.208.0/23
203.55.134.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:65:0e:7f:d4:bc:12:46:30:1f:b6:54:cc:48:02:57:6b:6e:
f8:9f:4d:5d:6c:01:5e:7c:31:b8:96:91:43:8b:ed:bb:a7:1e:
37:c0:b8:12:dc:1a:f5:66:41:09:1f:f1:b5:7b:ae:ce:63:47:
55:27:30:3e:9c:ec:05:66:2b:90:3f:ef:89:2d:4c:88:ee:50:
37:d7:8e:64:b0:ee:e3:4a:5c:9e:d5:cf:66:cb:6b:09:c4:62:
c8:7c:ec:29:36:7d:67:59:22:3a:14:92:63:c0:25:9b:9f:73:
6d:72:dc:5d:98:70:93:db:2d:f4:e6:a7:5f:dd:a4:d0:ea:00:
3b:7a:d3:11:62:1a:fc:45:f2:f6:30:a3:e0:fc:78:3d:36:ec:
61:13:7a:82:a2:52:ff:65:10:f0:1b:37:ae:5c:98:53:35:6d:
ef:52:23:56:bf:78:e1:9e:2b:2c:f1:c9:5a:7f:ef:71:99:43:
5e:24:65:e3:b0:45:71:4e:4c:cc:7c:ae:f4:72:2d:18:1e:18:
39:39:8e:54:7e:17:29:a8:67:b8:94:ce:a1:95:ca:85:40:82:
44:c8:a1:a7:79:a5:e1:45:01:09:da:f3:7d:7b:b1:f7:dc:00:
a3:c2:96:2d:2d:c8:8d:a2:1b:0e:63:60:e1:31:26:9c:3a:88:
93:a5:34:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:59:41 2026 by rpki-client