
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/B9C587ACA61911EFAD319873C4F9AE02.roa
File: B9C587ACA61911EFAD319873C4F9AE02.roa (raw, json)
Hash identifier: zOcL6qgpIx7XnhqJzRS9iOlS0LPUx49sLB50ZIE0fC4=
Subject key identifier: 16:9C:0E:E3:74:D5:16:A0:0F:48:35:B6:03:E7:14:28:14:46:CE:AD
Certificate issuer: /CN=A91A55C9/serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71
Certificate serial: 0192
Authority key identifier: 78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/B9C587ACA61911EFAD319873C4F9AE02.roa
Signing time: Wed 11 Mar 2026 03:38:45 +0000
ROA not before: Wed 11 Mar 2026 03:38:45 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 14618
IP address blocks: 203.3.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl
rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402 (0x192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A55C9, serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71
Validity
Not Before: Mar 11 03:38:45 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69b0e3c5-82e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:05:16:ed:77:71:95:fe:04:47:4c:f8:a5:16:
f2:13:1a:12:0c:51:74:d1:7f:e0:18:47:f5:9d:40:
21:28:43:d4:3d:54:0d:16:15:c0:18:73:5e:3e:2e:
7f:cd:71:e7:d4:5b:0b:f0:ea:4f:d0:0f:e3:c1:b1:
65:61:c8:32:8c:d2:96:da:e2:21:ce:80:09:4c:aa:
d4:65:c6:f7:ef:0b:80:c7:28:e1:cf:e0:dd:d5:75:
c9:d5:bd:bc:42:bd:7e:d3:de:39:2a:07:48:da:03:
da:3c:ce:a8:b0:bb:df:1d:da:40:e3:4b:fc:36:4c:
3f:90:07:a9:cf:13:59:e8:46:dc:c8:83:36:b2:24:
87:ed:36:3d:08:b6:39:48:99:ad:2c:05:63:34:27:
3d:64:ff:5b:6a:f0:42:4c:86:f1:cc:f0:2f:92:75:
1e:55:e5:e6:14:f0:e8:3c:15:a6:07:16:f7:88:76:
80:93:1f:2f:f8:83:0e:d0:01:8d:5f:74:c3:6f:a2:
f3:10:03:6a:6a:e1:3f:e9:6d:7b:da:2a:af:76:16:
f2:d9:e5:d0:32:29:d2:b5:a8:b5:fa:c2:6d:23:62:
37:cf:5d:69:17:19:5b:6d:91:63:fd:d0:8b:86:86:
ff:e1:bc:ec:ee:a1:39:fb:38:d0:81:f4:89:0a:d7:
7b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9C:0E:E3:74:D5:16:A0:0F:48:35:B6:03:E7:14:28:14:46:CE:AD
X509v3 Authority Key Identifier:
keyid:78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/B9C587ACA61911EFAD319873C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.3.236.0/24
Signature Algorithm: sha256WithRSAEncryption
49:d5:c1:7c:f7:96:34:7e:37:81:a2:32:f0:69:86:2d:53:0a:
ad:cf:b8:1b:5e:a7:b9:c0:cd:8b:1a:d0:7b:c9:ed:32:76:11:
45:9d:5a:86:68:81:04:e7:4c:36:b1:d1:4f:f1:9e:c1:23:fa:
df:d9:a3:e2:6f:ab:2b:16:5a:a8:8b:45:ff:e1:f7:13:3f:6d:
be:70:61:3d:bc:97:26:2c:30:c0:17:57:2b:80:b7:85:6b:b0:
ad:8c:12:a5:f5:c4:16:80:78:b3:1a:c1:14:2f:00:0b:79:43:
e7:cc:e4:f6:e0:ab:98:f5:f1:3d:f6:73:90:45:a5:8b:44:49:
78:0e:78:da:29:b0:0f:c2:3d:64:e5:cb:d0:1b:f0:d8:ed:7e:
27:23:13:d3:9e:d0:53:ab:2b:25:dd:f4:da:2b:f8:5a:84:96:
b9:7e:03:f4:00:d0:c1:ac:3a:98:d2:8b:1d:84:76:00:3a:6d:
70:7f:89:79:58:3c:e7:5c:a1:a1:7d:2a:3d:30:32:8f:9b:b5:
d9:32:8e:aa:0f:7d:41:b9:3c:29:95:e8:04:cc:e5:c1:1a:8b:
1c:91:b9:c4:c6:3c:c6:73:7d:ec:7a:83:5c:1a:45:1d:dd:40:
55:4a:58:85:ff:08:91:9f:93:58:a1:cd:07:73:7f:0b:17:44:
26:82:d5:a9
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU1QzkxMTAvBgNVBAUTKDc4MzlBMUZDMDE3NDAyNEJDQkE4NEQwMTJEM0VDNENB
NDY3OUFDNzEwHhcNMjYwMzExMDMzODQ1WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWIwZTNjNS04MmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiwUW7Xdxlf4ER0z4pRbyExoSDFF00X/gGEf1nUAhKEPUPVQNFhXAGHNePi5/
zXHn1FsL8OpP0A/jwbFlYcgyjNKW2uIhzoAJTKrUZcb37wuAxyjhz+Dd1XXJ1b28
Qr1+0945KgdI2gPaPM6osLvfHdpA40v8Nkw/kAepzxNZ6EbcyIM2siSH7TY9CLY5
SJmtLAVjNCc9ZP9bavBCTIbxzPAvknUeVeXmFPDoPBWmBxb3iHaAkx8v+IMO0AGN
X3TDb6LzEANqauE/6W172iqvdhby2eXQMinStai1+sJtI2I3z11pFxlbbZFj/dCL
hob/4bzs7qE5+zjQgfSJCtd72QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBacDuN0
1RagD0g1tgPnFCgURs6tMB8GA1UdIwQYMBaAFHg5ofwBdAJLy6hNAS0+xMpGeaxx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVDOS84ODJGMjMyMEM5
RUIxMUVFOEI4NTdCMENDNEY5QUUwMi9lRG1oX0FGMEFrdkxxRTBCTFQ3RXlrWjVy
SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VEbWhfQUYwQWt2THFFMEJMVDdFeWtaNXJIRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU1QzkvODgyRjIzMjBDOUVCMTFFRThCODU3QjBDQzRGOUFFMDIvQjlDNTg3QUNB
NjE5MTFFRkFEMzE5ODczQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAywPsMA0GCSqGSIb3DQEBCwUAA4IBAQBJ1cF895Y0fjeBojLwaYYt
Uwqtz7gbXqe5wM2LGtB7ye0ydhFFnVqGaIEE50w2sdFP8Z7BI/rf2aPib6srFlqo
i0X/4fcTP22+cGE9vJcmLDDAF1crgLeFa7CtjBKl9cQWgHizGsEULwALeUPnzOT2
4KuY9fE99nOQRaWLREl4DnjaKbAPwj1k5cvQG/DY7X4nIxPTntBTqysl3fTaK/ha
hJa5fgP0ANDBrDqY0osdhHYAOm1wf4l5WDznXKGhfSo9MDKPm7XZMo6qD31BuTwp
legEzOXBGosckbnExjzGc33seoNcGkUd3UBVSliF/wiRn5NYoc0Hc38LF0QmgtWp
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:31:30 2026 by rpki-client