
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/4D45F08C1E3B11EFB02B0184C4F9AE02.roa
File: 4D45F08C1E3B11EFB02B0184C4F9AE02.roa (raw, json)
Hash identifier: o/R0jEjjnB/zFb12F0yOXo0IMZH9+3ea7WsJdD7D1DM=
Subject key identifier: FA:6E:24:41:CA:CA:DF:E1:D5:3C:6D:CA:F1:2C:9A:12:57:99:A4:08
Certificate issuer: /CN=A91AE9F6/serialNumber=B1E8C11C140E0FA751E8BFA65A59C715DD7E1C53
Certificate serial: 01C4
Authority key identifier: B1:E8:C1:1C:14:0E:0F:A7:51:E8:BF:A6:5A:59:C7:15:DD:7E:1C:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sejBHBQOD6dR6L-mWlnHFd1-HFM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/4D45F08C1E3B11EFB02B0184C4F9AE02.roa
Signing time: Mon 05 Oct 2026 04:53:04 +0000
ROA not before: Mon 05 Oct 2026 04:53:04 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 38079
IP address blocks: 202.12.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.crl
rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sejBHBQOD6dR6L-mWlnHFd1-HFM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 03:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452 (0x1c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE9F6, serialNumber=B1E8C11C140E0FA751E8BFA65A59C715DD7E1C53
Validity
Not Before: Oct 5 04:53:04 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6ac32d30-060f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:48:b7:91:e0:3b:53:1e:8e:46:a1:df:c7:c8:
c0:4c:33:ed:68:95:c6:f8:0e:c3:b7:c7:5f:01:63:
1a:8c:55:6f:f6:7d:8e:be:bd:6b:c4:07:57:95:c5:
93:ef:b5:63:08:c7:4b:0a:f1:67:ef:a5:7f:6e:82:
33:b5:30:95:34:75:5b:41:d0:94:e0:82:90:6a:eb:
04:96:44:00:f3:0d:fa:a9:bb:52:26:6a:82:fc:b5:
97:a6:8e:86:39:0a:bb:87:11:a6:78:4c:ab:2b:71:
ad:40:c4:76:21:2f:b0:3e:5e:d1:48:27:ff:a3:d1:
5f:14:4a:2a:cd:55:b0:14:8a:db:74:04:8e:71:85:
a9:a1:34:e5:5d:f4:5f:51:8c:d6:58:a3:1c:24:60:
34:cb:46:b6:af:64:6c:d0:03:1f:7f:67:d1:f0:b5:
4d:4d:7f:84:23:10:f9:1e:fa:d4:87:90:5f:a1:ff:
aa:92:df:ed:f4:85:f5:25:dd:b7:27:45:e8:21:8d:
b1:bc:c1:c8:b4:12:56:2d:54:58:8c:d1:6e:36:24:
62:a0:49:22:5c:a9:42:58:e6:5f:3e:3b:71:fe:d0:
5f:a7:d5:75:31:53:ce:2a:0a:55:e2:df:f2:8c:9c:
8d:15:91:cf:03:a2:b2:bb:de:d9:7c:93:b5:dc:7d:
90:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6E:24:41:CA:CA:DF:E1:D5:3C:6D:CA:F1:2C:9A:12:57:99:A4:08
X509v3 Authority Key Identifier:
keyid:B1:E8:C1:1C:14:0E:0F:A7:51:E8:BF:A6:5A:59:C7:15:DD:7E:1C:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sejBHBQOD6dR6L-mWlnHFd1-HFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/4D45F08C1E3B11EFB02B0184C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.12.91.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:f0:7d:31:71:fc:00:e2:ea:96:fa:4f:7c:ec:4d:f1:1c:05:
9f:68:7e:49:0d:f0:85:18:d8:27:d0:2f:5e:e3:03:bf:ef:6f:
82:1c:c1:8d:1b:31:8a:02:9e:ee:98:47:d6:5f:3e:90:4e:a0:
d5:59:fb:71:95:d8:a0:23:4b:38:10:14:42:21:13:e0:50:05:
24:1a:0c:38:0b:d9:cf:6d:c4:f7:e5:d4:43:1e:f4:24:d3:d5:
b6:e4:cb:6c:27:c1:37:8c:71:d8:32:ec:48:12:a3:1e:65:23:
8d:9b:51:9f:64:62:7b:7d:55:03:2b:d0:34:7d:bd:14:c7:63:
bd:88:5b:a3:0b:b4:b9:85:d8:b4:ae:2e:0f:d3:0f:65:25:52:
54:d2:56:76:9c:80:b5:86:c4:30:f3:08:85:9d:38:ca:4c:fa:
57:17:6b:03:44:03:b5:dd:33:15:44:54:b2:14:b8:4b:ad:10:
8f:48:6d:47:f7:5b:7c:b0:3a:4e:79:a9:53:83:ba:ff:45:21:
2a:e7:bb:9f:f6:60:10:7f:90:0b:80:91:ea:ed:66:6c:ae:92:
ae:71:03:a2:89:60:3e:1d:da:b2:22:15:c0:59:cb:03:c0:68:
d2:01:52:9b:47:07:ec:cf:e1:35:dd:1e:23:82:c2:e9:3a:72:
36:80:8f:f8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUU5RjYxMTAvBgNVBAUTKEIxRThDMTFDMTQwRTBGQTc1MUU4QkZBNjVBNTlDNzE1
REQ3RTFDNTMwHhcNMjYxMDA1MDQ1MzA0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWMzMmQzMC0wNjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqEi3keA7Ux6ORqHfx8jATDPtaJXG+A7Dt8dfAWMajFVv9n2Ovr1rxAdXlcWT
77VjCMdLCvFn76V/boIztTCVNHVbQdCU4IKQausElkQA8w36qbtSJmqC/LWXpo6G
OQq7hxGmeEyrK3GtQMR2IS+wPl7RSCf/o9FfFEoqzVWwFIrbdASOcYWpoTTlXfRf
UYzWWKMcJGA0y0a2r2Rs0AMff2fR8LVNTX+EIxD5HvrUh5Bfof+qkt/t9IX1Jd23
J0XoIY2xvMHItBJWLVRYjNFuNiRioEkiXKlCWOZfPjtx/tBfp9V1MVPOKgpV4t/y
jJyNFZHPA6Kyu97ZfJO13H2Q8wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPpuJEHK
yt/h1TxtyvEsmhJXmaQIMB8GA1UdIwQYMBaAFLHowRwUDg+nUei/plpZxxXdfhxT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlGNi84RjIzQ0U4NDFE
NUYxMUVGQjgzNzREM0RDNEY5QUUwMi9zZWpCSEJRT0Q2ZFI2TC1tV2xuSEZkMS1I
Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NlakJIQlFPRDZkUjZMLW1XbG5IRmQxLUhGTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUU5RjYvOEYyM0NFODQxRDVGMTFFRkI4Mzc0RDNEQzRGOUFFMDIvNEQ0NUYwOEMx
RTNCMTFFRkIwMkIwMTg0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAygxbMA0GCSqGSIb3DQEBCwUAA4IBAQAq8H0xcfwA4uqW+k987E3x
HAWfaH5JDfCFGNgn0C9e4wO/72+CHMGNGzGKAp7umEfWXz6QTqDVWftxldigI0s4
EBRCIRPgUAUkGgw4C9nPbcT35dRDHvQk09W25MtsJ8E3jHHYMuxIEqMeZSONm1Gf
ZGJ7fVUDK9A0fb0Ux2O9iFujC7S5hdi0ri4P0w9lJVJU0lZ2nIC1hsQw8wiFnTjK
TPpXF2sDRAO13TMVRFSyFLhLrRCPSG1H91t8sDpOealTg7r/RSEq57uf9mAQf5AL
gJHq7WZsrpKucQOiiWA+HdqyIhXAWcsDwGjSAVKbRwfsz+E13R4jgsLpOnI2gI/4
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:02:00 2026 by rpki-client