
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/91E9F5FCEB7211F0B89C2E104F6F56BC.roa
File: 91E9F5FCEB7211F0B89C2E104F6F56BC.roa (raw, json)
Hash identifier: 4kY1N0JmfJKxXFlgpxTMmZzLvUHE7guNh7KUYwhQfXQ=
Subject key identifier: 6C:FF:8D:12:0D:77:E7:01:84:A0:90:E7:7E:53:70:09:FB:32:57:AC
Certificate issuer: /CN=A91A55C9/serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71
Certificate serial: 0194
Authority key identifier: 78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/91E9F5FCEB7211F0B89C2E104F6F56BC.roa
Signing time: Wed 11 Mar 2026 03:38:50 +0000
ROA not before: Wed 11 Mar 2026 03:38:50 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 17461
IP address blocks: 203.3.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl
rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404 (0x194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A55C9, serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71
Validity
Not Before: Mar 11 03:38:50 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69b0e3ca-d3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f9:b0:1a:16:fb:4a:66:35:22:65:7e:2e:87:
c3:4c:6d:a8:f3:34:d5:08:e6:22:61:fa:38:11:51:
11:9f:9d:65:ec:4c:3b:21:e8:1a:93:94:43:ba:61:
d4:4c:90:50:5b:13:2c:81:ec:1d:e3:eb:09:09:11:
ef:84:f7:27:0c:96:1c:7c:9c:60:b9:22:e4:64:f3:
8a:35:c1:a1:45:dd:71:19:3a:56:84:1e:69:6c:a3:
0c:89:e0:2e:3a:b6:7a:66:6f:e2:1a:51:98:40:51:
2e:b6:b8:36:94:47:83:70:77:fc:97:9d:a6:0c:4b:
8e:9c:d6:7a:fd:dd:2f:82:7c:5e:8f:e2:23:3e:dc:
85:6c:75:36:bb:4c:30:d5:95:90:e1:a2:c3:8c:27:
e3:65:08:10:ee:8d:89:ec:c7:55:3d:69:2b:6d:bc:
15:3a:e9:76:4c:bb:0e:d4:d3:32:2b:be:c5:79:ec:
ec:f5:6a:ab:8f:e6:0e:da:8d:ed:09:8d:c7:37:69:
6c:5f:f7:22:83:ea:d1:b9:54:b6:44:86:fe:bb:32:
c0:a2:0f:2e:78:b5:1b:08:bd:f6:6b:3f:81:b4:46:
7c:f9:03:73:52:3f:1b:c0:50:8b:16:a8:e5:10:5c:
15:be:d4:4f:ce:d5:41:b8:77:05:d7:79:ea:10:1b:
bc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FF:8D:12:0D:77:E7:01:84:A0:90:E7:7E:53:70:09:FB:32:57:AC
X509v3 Authority Key Identifier:
keyid:78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/91E9F5FCEB7211F0B89C2E104F6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
203.3.237.0/24
Signature Algorithm: sha256WithRSAEncryption
66:66:27:4e:b0:e6:fe:83:b0:50:ad:46:2f:1a:2d:e9:b9:43:
30:dc:83:23:c5:60:84:8f:01:c6:bc:20:d7:41:74:07:34:7b:
d8:bf:47:a1:00:b6:6b:d9:cf:f3:43:93:d7:de:72:be:7a:3f:
60:df:58:a4:d9:53:3c:f3:fe:8d:07:f8:ed:22:ef:4e:fa:55:
b7:34:77:2d:5c:63:0e:f7:9b:b5:fc:0b:9e:5c:97:c5:75:b8:
cc:2e:02:b5:1b:10:4d:cb:d4:b4:36:7c:bf:ce:41:44:04:05:
c3:60:6a:54:9d:ca:1e:85:2a:8e:a8:ee:6f:67:5a:60:44:7a:
73:e7:76:68:b9:5d:cc:12:ae:d4:88:99:eb:7c:29:a6:8e:0f:
b5:5c:44:11:90:0b:35:39:25:bb:40:58:be:6f:53:00:e0:67:
65:51:59:dc:91:0f:41:32:9b:c4:33:db:9c:c3:be:c4:ba:f0:
e4:46:ab:1f:8f:b0:c8:23:dd:8f:8d:5e:9f:c7:0a:06:ee:cf:
19:e8:24:ed:ea:5d:0c:6f:48:d2:13:d5:8e:11:7d:62:0a:56:
55:27:b3:19:d0:32:09:ba:97:b1:c4:99:d5:f3:da:c3:b3:60:
82:8c:2b:4b:c4:b9:93:4f:b4:5e:94:a7:8e:bb:a6:40:c0:d5:
3b:44:70:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:22:40 2026 by rpki-client