
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/1F578DB08F0111F0BF750433C4F9AE02.roa
File: 1F578DB08F0111F0BF750433C4F9AE02.roa (raw, json)
Hash identifier: hmo0JZjqsUcXR1CeyKb5AUyvewOo9tGw1tDFanCmkiU=
Subject key identifier: 91:45:82:7C:BC:AA:5C:50:67:42:14:53:19:0D:A6:85:96:75:5D:7E
Certificate issuer: /CN=A91B3087/serialNumber=85100E5A1FBAE5FE1A65CBF15734130A8E541BB2
Certificate serial: 6E
Authority key identifier: 85:10:0E:5A:1F:BA:E5:FE:1A:65:CB:F1:57:34:13:0A:8E:54:1B:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/1F578DB08F0111F0BF750433C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:44:20 +0000
ROA not before: Thu 11 Sep 2025 11:19:03 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 154199
IP address blocks: 202.136.74.0/23 maxlen: 23
202.136.74.0/24 maxlen: 24
2402:27a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.crl
rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3087, serialNumber=85100E5A1FBAE5FE1A65CBF15734130A8E541BB2
Validity
Not Before: Sep 11 11:19:03 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a59434-95f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:31:64:f5:fa:19:ca:86:7a:4b:1c:5b:3a:1b:
17:ff:05:1e:2d:e8:2f:2e:70:b8:7e:2f:a9:4a:19:
5c:0e:ca:be:28:ac:44:6c:da:16:10:4b:ca:8f:e6:
ea:ce:f3:68:a2:92:e0:ae:14:4d:aa:a3:dc:9e:f4:
eb:76:0b:17:34:99:55:d9:1c:c2:ec:f9:24:99:cd:
fd:5a:78:94:2a:25:ca:d1:73:3c:4d:90:e0:dd:15:
81:85:5d:c5:b5:f3:56:5a:b2:cc:c6:88:dc:d0:21:
10:71:bb:14:c9:89:91:0a:db:08:8f:ca:9a:75:e2:
8e:df:71:56:42:4f:74:45:02:9f:76:d2:20:2e:2e:
68:fc:a9:22:01:b7:e7:7e:65:4b:2c:74:dd:70:4e:
bb:42:98:9e:d1:b1:d1:11:9d:3a:5a:90:6e:f6:c6:
97:f0:96:21:98:c9:e7:45:eb:d0:be:bb:26:15:59:
ca:b4:fc:f1:cc:45:9f:2a:81:3f:c9:a5:2c:05:6c:
0a:ad:2f:5a:9c:02:7d:ad:85:1c:a1:b9:d2:d3:2b:
0f:93:4a:d8:0f:ad:c0:fd:d3:0b:7b:7a:dd:7a:9b:
2d:cd:05:8a:89:7a:80:b6:82:a6:ee:fa:4b:68:e1:
dc:46:af:6f:ad:75:45:d9:f3:b1:43:5e:77:9d:db:
c9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:45:82:7C:BC:AA:5C:50:67:42:14:53:19:0D:A6:85:96:75:5D:7E
X509v3 Authority Key Identifier:
keyid:85:10:0E:5A:1F:BA:E5:FE:1A:65:CB:F1:57:34:13:0A:8E:54:1B:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/1F578DB08F0111F0BF750433C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.136.74.0/23
IPv6:
2402:27a0::/32
Signature Algorithm: sha256WithRSAEncryption
0c:3c:7c:05:82:9a:fc:57:93:43:2b:c2:45:8c:e1:2e:ee:6b:
04:e8:e5:23:da:aa:0b:16:ff:01:99:80:f7:a2:fe:d1:66:f0:
df:15:91:04:37:e7:3e:2d:fb:6e:8c:39:19:20:f1:37:75:dd:
81:0e:8f:d6:cc:01:94:9c:07:34:69:65:f7:76:73:44:1f:67:
dd:c8:d6:b4:ad:e9:3f:5e:b6:f8:93:45:3c:bf:a9:94:d1:8c:
3b:51:34:8d:8c:57:c2:e3:5c:cf:a2:30:10:73:be:99:54:e9:
9b:65:85:b7:10:0a:73:97:68:cb:e9:64:42:b2:63:7a:36:41:
b8:82:60:8c:0c:2b:5c:a9:95:99:df:9b:e6:19:8d:e0:68:31:
92:b9:cd:fc:ae:23:ea:9e:42:5c:5b:85:f8:24:94:0e:5d:80:
ea:62:c2:d5:e1:a3:69:6b:a1:06:a5:2f:cc:8d:f6:14:73:96:
26:13:8a:e8:2d:f3:c8:27:0b:46:38:12:08:5b:85:6b:10:95:
10:74:b8:28:8c:0a:d2:d9:f8:7e:18:aa:00:bf:d3:9d:36:62:
33:11:79:19:aa:c7:89:85:2e:46:a5:eb:1d:cc:b6:b4:f4:77:
ac:e7:9d:c2:12:e9:76:94:ab:c1:2e:13:98:8c:17:f3:b1:2a:
05:03:a5:b6
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
MzA4NzExMC8GA1UEBRMoODUxMDBFNUExRkJBRTVGRTFBNjVDQkYxNTczNDEzMEE4
RTU0MUJCMjAeFw0yNTA5MTExMTE5MDNaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTU5NDM0LTk1ZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDvMWT1+hnKhnpLHFs6Gxf/BR4t6C8ucLh+L6lKGVwOyr4orERs2hYQS8qP5urO
82iikuCuFE2qo9ye9Ot2Cxc0mVXZHMLs+SSZzf1aeJQqJcrRczxNkODdFYGFXcW1
81ZasszGiNzQIRBxuxTJiZEK2wiPypp14o7fcVZCT3RFAp920iAuLmj8qSIBt+d+
ZUssdN1wTrtCmJ7RsdERnTpakG72xpfwliGYyedF69C+uyYVWcq0/PHMRZ8qgT/J
pSwFbAqtL1qcAn2thRyhudLTKw+TStgPrcD90wt7et16my3NBYqJeoC2gqbu+kto
4dxGr2+tdUXZ87FDXned28mxAgMBAAGjggJvMIICazAdBgNVHQ4EFgQUkUWCfLyq
XFBnQhRTGQ2mhZZ1XX4wHwYDVR0jBBgwFoAUhRAOWh+65f4aZcvxVzQTCo5UG7Iw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzMDg3LzQ4ODgzMTMyOEVB
QTExRjBCODM1Mjk0OUM0RjlBRTAyL2hSQU9XaC02NWY0YVpjdnhWelFUQ281VUc3
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaFJBT1doLTY1ZjRhWmN2eFZ6UVRDbzVVRzdJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MzA4Ny80ODg4MzEzMjhFQUExMUYwQjgzNTI5NDlDNEY5QUUwMi8xRjU3OERCMDhG
MDExMUYwQkY3NTA0MzNDNEY5QUUwMi5yb2EwLgYIKwYBBQUHAQcBAf8EHzAdMAwE
AgABMAYDBAHKiEowDQQCAAIwBwMFACQCJ6AwDQYJKoZIhvcNAQELBQADggEBAAw8
fAWCmvxXk0MrwkWM4S7uawTo5SPaqgsW/wGZgPei/tFm8N8VkQQ35z4t+26MORkg
8Td13YEOj9bMAZScBzRpZfd2c0QfZ93I1rSt6T9etviTRTy/qZTRjDtRNI2MV8Lj
XM+iMBBzvplU6ZtlhbcQCnOXaMvpZEKyY3o2QbiCYIwMK1yplZnfm+YZjeBoMZK5
zfyuI+qeQlxbhfgklA5dgOpiwtXho2lroQalL8yN9hRzliYTiugt88gnC0Y4Eghb
hWsQlRB0uCiMCtLZ+H4YqgC/0502YjMReRmqx4mFLkal6x3MtrT0d6znncIS6XaU
q8EuE5iMF/OxKgUDpbY=
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:39:12 2026 by rpki-client