
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/AC82414A392511EF88F70D39C4F9AE02.roa
File: AC82414A392511EF88F70D39C4F9AE02.roa (raw, json)
Hash identifier: hKQ2h489zBdCdDYcUOKChPL8Ijm3M758tY3uGhwDTqA=
Subject key identifier: 6F:E0:54:9A:1D:7B:F1:B9:33:F7:7C:8C:51:94:ED:D6:EA:DF:5A:A6
Certificate issuer: /CN=A91AB193/serialNumber=7B1AE27D3CF51499C5056E7DA873665E4E415179
Certificate serial: 0177
Authority key identifier: 7B:1A:E2:7D:3C:F5:14:99:C5:05:6E:7D:A8:73:66:5E:4E:41:51:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/AC82414A392511EF88F70D39C4F9AE02.roa
Signing time: Tue 03 Mar 2026 04:41:03 +0000
ROA not before: Tue 03 Mar 2026 04:41:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140991
IP address blocks: 203.223.88.0/24 maxlen: 25
2001:df3:a3c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.crl
rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375 (0x177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB193, serialNumber=7B1AE27D3CF51499C5056E7DA873665E4E415179
Validity
Not Before: Mar 3 04:41:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69a6665f-3362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:71:f8:c2:92:63:65:c8:cb:8b:73:ca:78:eb:
22:d2:3e:e1:5d:02:30:4b:2e:1c:9f:f4:2f:8b:11:
f5:83:1c:e3:96:1e:5b:af:17:b3:dc:43:58:4c:a5:
78:dd:5b:00:a6:f8:0e:f9:55:5d:26:7a:59:90:5f:
07:d3:13:78:57:6f:91:c0:d4:42:ca:68:1b:70:ec:
1d:bc:b7:b2:18:2b:fc:81:dd:f7:eb:6c:73:aa:da:
c7:d9:ac:d1:74:b4:cb:19:b5:11:e0:2f:e3:09:6a:
3f:da:da:1c:5f:7e:7c:e6:82:67:04:08:59:0f:a8:
53:82:05:88:b0:3a:c1:76:71:90:98:8e:bb:c4:b8:
af:0d:ad:ce:70:95:3a:f7:a1:ba:ad:6f:0f:33:b1:
ca:00:7c:91:bb:ad:ed:8d:7e:4f:99:50:29:cd:5c:
22:4a:59:d5:01:9e:bd:f4:b3:5b:a2:d5:1a:29:11:
02:95:7d:f9:82:75:41:10:dd:2e:9d:dc:c5:28:b9:
9b:61:a5:74:a7:1e:0b:15:e4:19:75:b5:c6:51:e1:
0c:c8:53:99:44:7b:5b:f6:05:ad:e1:71:e4:b3:59:
97:ef:cd:38:12:69:37:a2:5b:5c:bc:d2:b6:af:90:
55:91:59:e0:32:80:d4:eb:0c:29:f4:95:1c:31:f4:
99:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E0:54:9A:1D:7B:F1:B9:33:F7:7C:8C:51:94:ED:D6:EA:DF:5A:A6
X509v3 Authority Key Identifier:
keyid:7B:1A:E2:7D:3C:F5:14:99:C5:05:6E:7D:A8:73:66:5E:4E:41:51:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/AC82414A392511EF88F70D39C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.223.88.0/24
IPv6:
2001:df3:a3c0::/48
Signature Algorithm: sha256WithRSAEncryption
60:b7:98:81:3a:c9:2b:12:a3:c5:f1:7c:51:26:e2:79:04:9a:
23:26:45:d3:eb:ae:86:97:fd:1d:24:03:b6:32:ab:41:3e:99:
0b:cb:5f:c2:08:3e:33:4e:1e:cf:bb:34:e3:1e:bf:1b:f6:c5:
4f:9a:e3:0f:b5:81:a2:df:2f:6e:a8:60:84:4a:f1:79:d0:ed:
66:59:7b:ec:56:cf:74:37:14:e7:67:52:46:0b:25:72:19:a2:
17:39:8a:bd:fe:87:fe:35:39:e3:09:3e:f3:68:99:bc:71:14:
e1:b2:93:53:fb:8f:d6:32:4f:2a:78:e9:5a:81:99:07:47:8c:
35:8e:34:9a:73:ae:60:21:c0:a7:c6:e6:ea:9d:49:4f:66:85:
36:77:5c:7e:fb:95:73:6d:71:33:78:1d:08:f2:3b:fd:32:c3:
38:3d:d2:92:f9:77:7c:6f:66:51:8d:5c:48:b3:86:f7:fa:0d:
16:74:00:5a:64:cc:a0:b1:d7:74:c2:80:c4:2a:fd:99:72:fe:
06:16:93:2d:fc:03:10:e7:41:97:55:65:e5:99:db:9b:bb:b2:
8d:77:10:22:dd:6c:60:c4:2b:81:36:26:82:25:57:a2:d6:53:
47:2a:3b:45:54:9e:e9:39:0d:ad:87:92:fa:ad:c1:8c:9d:c5:
ca:d0:a3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:56:30 2026 by rpki-client