
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/D02785608C0911EAAFF6CD27C4F9AE02.roa
File: D02785608C0911EAAFF6CD27C4F9AE02.roa (raw, json)
Hash identifier: nPdlPveaGEn/o0RAhqipdNtydGVDIBxlaIUin+YvoPY=
Subject key identifier: 77:5A:DA:99:67:10:35:F7:FC:A8:8E:31:DB:AC:23:E4:1D:DB:81:95
Certificate issuer: /CN=A91A8666/serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592
Certificate serial: 0A64
Authority key identifier: 32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/D02785608C0911EAAFF6CD27C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:29:59 +0000
ROA not before: Fri 10 Oct 2025 21:20:35 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 17802
IP address blocks: 36.50.42.0/24 maxlen: 24
203.210.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl
rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2660 (0xa64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8666, serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592
Validity
Not Before: Oct 10 21:20:35 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a590d7-8ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f0:7b:a7:90:00:f4:aa:c0:91:97:7f:41:b9:
b9:34:bc:e9:2a:80:5f:d6:e9:41:81:59:e6:28:ea:
4b:46:7b:06:d8:0a:1e:44:50:45:08:63:b6:96:29:
d1:48:d8:c1:ba:fc:89:63:e2:ad:6e:b9:aa:db:8b:
71:4d:51:ca:32:db:45:84:b2:89:6e:65:c1:87:bf:
ff:a8:e4:0c:64:5d:64:b5:0e:fe:90:2b:c6:8a:08:
6a:d1:a6:a4:7e:f4:d8:76:b5:c7:f4:c2:99:16:70:
b7:9d:ab:46:53:2d:d4:fe:09:ec:e7:7a:91:34:58:
cf:29:13:a8:bc:c4:39:f0:db:5d:94:ff:df:2c:b2:
d4:bd:c3:0b:f5:91:b7:85:a1:89:c1:21:49:66:f9:
54:15:a1:d3:b0:c9:3c:40:2f:87:e2:71:dc:1e:9f:
df:37:3b:18:f2:92:60:c2:20:cb:e1:be:ea:ee:48:
36:47:be:a0:29:24:38:d6:ad:62:48:a3:d8:d0:52:
e7:b5:aa:5d:8e:8e:fb:a6:d7:d3:fc:d9:f6:1d:30:
db:bb:16:8e:48:d4:97:06:81:37:ef:e9:1d:0a:66:
bf:bf:c4:21:3b:de:42:41:af:be:f8:64:f7:43:16:
b5:d6:10:d8:b7:4a:d0:4f:cd:15:c4:30:76:5f:c9:
e2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5A:DA:99:67:10:35:F7:FC:A8:8E:31:DB:AC:23:E4:1D:DB:81:95
X509v3 Authority Key Identifier:
keyid:32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/D02785608C0911EAAFF6CD27C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
36.50.42.0/24
203.210.75.0/24
Signature Algorithm: sha256WithRSAEncryption
78:d2:69:d8:1b:d9:47:23:6e:9e:e9:2a:a7:bf:06:24:ed:59:
8d:22:d3:07:53:1e:24:49:a7:a9:60:0f:de:b2:c5:0b:f4:76:
e5:c5:a9:ca:78:ef:bb:0b:42:bb:97:38:94:7d:4a:96:a3:19:
9c:eb:d3:d2:7a:e5:49:c5:54:f1:a0:d0:54:f0:79:8d:5d:6c:
3a:ba:71:a5:13:82:90:b3:3b:01:8c:73:74:06:eb:be:d3:4a:
6c:1e:cb:3c:05:fe:6f:bb:04:2f:18:e1:54:8b:16:63:b2:45:
d0:23:88:e6:e1:59:eb:a5:e1:89:e9:44:9f:15:21:0c:9a:05:
d2:30:09:fd:d1:9e:29:aa:0f:0a:78:b1:e4:54:de:df:d5:a1:
86:25:51:10:a7:c3:70:d3:6e:34:14:2d:5d:c9:0d:60:19:0b:
67:cd:50:c8:9f:72:3e:ea:8b:ab:19:1e:22:65:cb:ff:5e:60:
38:0f:a9:d9:11:ed:43:06:13:62:8b:36:1b:c9:d0:c2:d4:1e:
38:61:fd:13:1f:fe:fd:76:df:bc:fc:37:e7:65:9b:f1:9a:06:
6a:f9:0d:1a:40:31:e7:d7:1c:8d:eb:0d:bd:fb:24:80:2d:20:
13:3a:96:62:8e:38:af:1f:dc:54:aa:ee:fe:5e:25:a8:f5:27:
8d:b0:ab:ea
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICCmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTg2NjYxMTAvBgNVBAUTKDMyODQzMzg0RkFFNkFGNkMzMTc2RTFERjc0RTkwODgx
RDZEOTc1OTIwHhcNMjUxMDEwMjEyMDM1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OTBkNy04YWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArvB7p5AA9KrAkZd/Qbm5NLzpKoBf1ulBgVnmKOpLRnsG2AoeRFBFCGO2linR
SNjBuvyJY+Ktbrmq24txTVHKMttFhLKJbmXBh7//qOQMZF1ktQ7+kCvGighq0aak
fvTYdrXH9MKZFnC3natGUy3U/gns53qRNFjPKROovMQ58NtdlP/fLLLUvcML9ZG3
haGJwSFJZvlUFaHTsMk8QC+H4nHcHp/fNzsY8pJgwiDL4b7q7kg2R76gKSQ41q1i
SKPY0FLntapdjo77ptfT/Nn2HTDbuxaOSNSXBoE37+kdCma/v8QhO95CQa+++GT3
Qxa11hDYt0rQT80VxDB2X8nibQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFHda2pln
EDX3/KiOMdusI+Qd24GVMB8GA1UdIwQYMBaAFDKEM4T65q9sMXbh33TpCIHW2XWS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODY2Ni82MjNDRDZFNDg0
RjMxMUVBQjFGQkJCMThDNEY5QUUwMi9Nb1F6aFBybXIyd3hkdUhmZE9rSWdkYlpk
WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01vUXpoUHJtcjJ3eGR1SGZkT2tJZ2RiWmRaSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTg2NjYvNjIzQ0Q2RTQ4NEYzMTFFQUIxRkJCQjE4QzRGOUFFMDIvRDAyNzg1NjA4
QzA5MTFFQUFGRjZDRDI3QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAJDIqAwQAy9JLMA0GCSqGSIb3DQEBCwUAA4IBAQB40mnYG9lHI26e
6SqnvwYk7VmNItMHUx4kSaepYA/essUL9HblxanKeO+7C0K7lziUfUqWoxmc69PS
euVJxVTxoNBU8HmNXWw6unGlE4KQszsBjHN0Buu+00psHss8Bf5vuwQvGOFUixZj
skXQI4jm4VnrpeGJ6USfFSEMmgXSMAn90Z4pqg8KeLHkVN7f1aGGJVEQp8Nw0240
FC1dyQ1gGQtnzVDIn3I+6ourGR4iZcv/XmA4D6nZEe1DBhNiizYbydDC1B44Yf0T
H/79dt+8/DfnZZvxmgZq+Q0aQDHn1xyN6w29+ySALSATOpZijjivH9xUqu7+XiWo
9SeNsKvq
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:46 2026 by rpki-client