
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC075/DF74F3E21C2A11F19DD1604B353D8C67/4DA3595C1C2C11F186EF2187353D8C67.roa
File: 4DA3595C1C2C11F186EF2187353D8C67.roa (raw, json)
Hash identifier: cdbSmw6HOxYbjFcuV2vH9UkaTCX9VoO1d14+/BX+iio=
Subject key identifier: D2:07:2F:22:96:DA:10:8E:B4:5F:0B:82:B9:1B:C9:2A:B0:50:B4:A1
Certificate issuer: /CN=A91AC075/serialNumber=BEBFAE302C230DCF42B5EA9AE06FF9C5851D8B63
Certificate serial: 02
Authority key identifier: BE:BF:AE:30:2C:23:0D:CF:42:B5:EA:9A:E0:6F:F9:C5:85:1D:8B:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vr-uMCwjDc9Cteqa4G_5xYUdi2M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC075/DF74F3E21C2A11F19DD1604B353D8C67/4DA3595C1C2C11F186EF2187353D8C67.roa
Signing time: Tue 10 Mar 2026 02:53:23 +0000
ROA not before: Tue 10 Mar 2026 02:53:23 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 24120
IP address blocks: 202.44.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC075/DF74F3E21C2A11F19DD1604B353D8C67/vr-uMCwjDc9Cteqa4G_5xYUdi2M.crl
rsync://rpki.apnic.net/member_repository/A91AC075/DF74F3E21C2A11F19DD1604B353D8C67/vr-uMCwjDc9Cteqa4G_5xYUdi2M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vr-uMCwjDc9Cteqa4G_5xYUdi2M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:19:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC075, serialNumber=BEBFAE302C230DCF42B5EA9AE06FF9C5851D8B63
Validity
Not Before: Mar 10 02:53:23 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69af87a3-eba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e4:18:e6:e2:de:1f:4c:ae:02:3a:17:be:62:
97:9c:64:d7:f1:de:4a:80:38:ab:38:4d:16:6b:20:
59:8a:8b:24:b9:77:81:01:ed:6e:c2:1a:e0:ba:0e:
c4:a8:e4:3f:6b:3f:d8:bc:ec:7f:f3:fd:41:0e:3f:
ec:df:ff:91:9f:b6:a2:74:86:1d:eb:23:6d:d8:2f:
18:41:1c:04:8b:f1:6b:ba:29:34:10:62:0a:fd:9e:
c7:f0:77:6c:49:d5:87:a6:63:8a:e0:ec:44:1b:5e:
0f:c8:03:37:3b:fe:de:51:46:c8:f5:bc:44:08:61:
d7:5c:35:bf:04:77:e1:6e:8e:82:bc:85:5f:81:87:
88:c6:0c:64:bc:6c:0d:d3:5a:6c:98:77:f3:6a:9f:
8a:06:05:1b:f8:a6:5a:77:d3:b2:0a:5f:35:35:14:
bf:e3:80:d9:b5:5a:41:37:65:a4:b9:13:d3:d8:30:
18:9c:ea:37:fb:79:f5:7c:97:a9:b3:c6:bf:29:2b:
81:f6:7f:8d:c5:b0:5b:dd:ae:52:14:fd:7b:d8:12:
6e:69:04:32:4d:17:8b:6d:d9:fe:6f:80:5c:e9:09:
26:05:bb:73:d6:ae:d1:22:d5:cb:4a:85:c8:49:ae:
a2:f3:1a:2b:38:41:c4:d9:53:19:8d:02:19:fe:4c:
0c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:07:2F:22:96:DA:10:8E:B4:5F:0B:82:B9:1B:C9:2A:B0:50:B4:A1
X509v3 Authority Key Identifier:
keyid:BE:BF:AE:30:2C:23:0D:CF:42:B5:EA:9A:E0:6F:F9:C5:85:1D:8B:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC075/DF74F3E21C2A11F19DD1604B353D8C67/vr-uMCwjDc9Cteqa4G_5xYUdi2M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vr-uMCwjDc9Cteqa4G_5xYUdi2M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC075/DF74F3E21C2A11F19DD1604B353D8C67/4DA3595C1C2C11F186EF2187353D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
202.44.76.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:71:ab:0e:ba:65:d9:a2:28:4f:06:a7:1a:90:ed:f3:2d:90:
6b:e2:e9:9e:50:56:2e:cf:15:0d:7c:78:e3:f2:01:d4:50:83:
24:a6:18:16:9f:e3:53:62:0f:5e:80:12:0e:5b:23:a4:5d:ae:
5f:b1:8c:f3:fa:41:c6:68:e9:ae:a0:59:fa:4a:5e:b1:b5:f5:
08:5d:7b:61:ac:8c:25:17:a0:78:ae:14:49:71:71:8b:46:b4:
20:38:64:d3:12:0c:e7:96:a1:94:ad:45:7e:d7:06:b1:8b:9c:
94:9e:fe:3a:2e:b8:fe:3a:bc:56:55:fd:74:eb:8b:38:06:e6:
83:e3:fe:9e:37:e7:a7:c6:c8:3f:79:f5:53:31:e4:01:5b:7f:
47:72:a9:ee:ba:f9:20:91:e1:6c:f1:92:d7:02:79:96:dd:b9:
cc:cd:de:b7:a5:e9:e2:e6:f1:22:da:f5:65:13:61:e1:54:4f:
7b:8a:32:92:1a:d4:2f:1c:33:86:e8:71:d1:8f:76:60:c3:b7:
02:07:66:c2:68:4b:bf:27:2d:42:c1:39:3d:42:8b:ff:13:3f:
57:0c:52:e6:12:21:f0:72:e1:aa:a6:22:76:9c:9d:0f:8d:50:
ae:00:33:5c:28:d1:f0:4b:38:0e:00:26:e1:94:75:1f:c6:7a:
6b:d4:8e:b9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:48:49 2026 by rpki-client