
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F73A83F4721511EFA7D82D3EC4F9AE02.roa
File: F73A83F4721511EFA7D82D3EC4F9AE02.roa (raw, json)
Hash identifier: BuYD3kccAImr/2bEs9uWEzBAfMJUAqyH4yIvtnEH5g0=
Subject key identifier: F3:55:15:B3:4A:7E:F7:DB:44:1B:CE:67:C4:F8:27:55:C2:50:FA:A1
Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial: 02A3
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F73A83F4721511EFA7D82D3EC4F9AE02.roa
Signing time: Wed 06 May 2026 02:53:21 +0000
ROA not before: Wed 06 May 2026 02:53:21 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 9464
IP address blocks: 202.29.144.0/21 maxlen: 21
202.29.144.0/24 maxlen: 24
202.29.145.0/24 maxlen: 24
202.29.146.0/23 maxlen: 23
202.29.148.0/22 maxlen: 22
2001:3c8:9007::/48 maxlen: 48
2001:3c8:9009::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 675 (0x2a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Validity
Not Before: May 6 02:53:21 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69faad21-494b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ac:62:ff:94:18:a1:ad:d1:35:44:64:80:d5:
2d:77:cb:3b:2a:21:fa:de:ca:82:30:40:97:21:d8:
60:40:92:f8:39:70:a6:c3:26:1d:d2:70:1e:e2:30:
48:7e:0c:32:fa:a2:c0:1d:87:b2:ae:7f:4c:e4:65:
dd:e4:20:e4:01:4c:1d:a1:8a:3b:4f:3a:9f:fb:9d:
49:4f:93:d6:d0:c4:d8:1c:8c:4b:54:59:6b:f3:01:
99:47:7a:89:0c:39:6a:ba:f9:67:44:b7:0d:1a:0b:
e6:a0:0c:3d:1f:27:07:76:0a:ec:4a:d6:99:48:e1:
75:a8:9d:7f:1d:d1:74:67:02:5a:aa:cc:2c:53:5f:
26:45:0f:4f:fa:7c:16:7f:35:3e:04:cb:67:af:9f:
bf:1b:27:0c:2d:86:65:15:6d:2d:af:6c:13:69:ec:
87:9a:e5:93:7e:ee:ca:d0:03:b7:39:a2:be:27:3a:
70:a0:7d:24:ac:b7:21:8c:61:66:04:df:4c:55:85:
4d:76:93:74:1f:87:9f:65:21:c1:93:a2:5a:df:92:
49:f3:43:c3:b6:d5:65:b6:1e:d0:b6:03:dd:50:03:
fd:97:2b:86:19:80:4b:2a:43:c3:ee:9b:cd:ea:e2:
b6:4a:00:f8:09:2a:93:75:2b:5f:fd:67:0e:91:43:
d7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:55:15:B3:4A:7E:F7:DB:44:1B:CE:67:C4:F8:27:55:C2:50:FA:A1
X509v3 Authority Key Identifier:
keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F73A83F4721511EFA7D82D3EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.29.144.0/21
IPv6:
2001:3c8:9007::/48
2001:3c8:9009::/48
Signature Algorithm: sha256WithRSAEncryption
86:3e:db:b6:58:1f:40:06:ad:6e:a4:2d:94:b1:80:ed:d7:a7:
8a:6e:e8:5d:69:f9:94:df:e5:31:f1:25:a6:44:e0:a7:a7:cd:
77:b5:ee:77:1a:29:31:a8:3c:2e:da:8b:e6:df:4a:75:3e:b6:
56:af:96:1e:0d:72:41:81:6b:11:fa:4e:b0:6e:42:e5:61:98:
3a:db:c2:8d:07:f1:58:ed:cb:d2:1c:db:3b:af:c6:e0:57:c9:
35:b9:3d:28:71:b1:82:72:10:4d:f2:26:e8:c5:b6:57:c7:d3:
6a:d1:cb:d6:da:59:36:60:c4:a7:54:44:09:6c:ff:a6:bc:0c:
43:45:ac:8f:66:84:cd:0a:36:ee:cd:6b:54:36:72:5f:08:19:
79:90:d2:78:e1:5f:3f:72:95:ce:a8:35:e5:30:2b:7c:98:96:
a9:84:89:c3:6f:c3:74:c1:31:82:e4:56:44:b3:78:b2:33:0f:
30:34:4d:95:25:4f:c2:c2:91:ba:8b:7d:fa:68:13:db:9b:59:
0a:bc:c6:3c:53:5c:cd:83:27:3c:fe:03:cc:e8:1e:26:0f:f4:
70:d5:78:f1:2c:c1:4a:36:c3:a1:82:b4:cf:1c:ba:f6:ad:94:
16:99:90:36:23:47:c7:c1:87:c8:42:bb:73:87:52:1c:fe:86:
c9:5d:53:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:27:44 2026 by rpki-client