
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/0BE76940057F11F1BBFA6CD7ADEE528E.roa
File: 0BE76940057F11F1BBFA6CD7ADEE528E.roa (raw, json)
Hash identifier: 6ZHlxBuUbn16eSux/ogpwO6CFNWl05TS7wn4VyI0hlQ=
Subject key identifier: C6:AF:47:55:48:4B:57:E0:97:40:06:EA:C4:49:0D:BF:1C:1E:B7:21
Certificate issuer: /CN=A91BF8C3/serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E
Certificate serial: 0871
Authority key identifier: 6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/0BE76940057F11F1BBFA6CD7ADEE528E.roa
Signing time: Tue 03 Mar 2026 00:23:57 +0000
ROA not before: Mon 09 Feb 2026 06:17:44 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 64073
IP address blocks: 202.36.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl
rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:35:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2161 (0x871)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF8C3, serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E
Validity
Not Before: Feb 9 06:17:44 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a62a1d-1ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a9:6a:c8:e3:e3:3c:95:d0:c6:ad:49:7c:cb:
22:35:1c:3c:50:31:a8:a4:a8:af:7f:b8:82:59:99:
e9:48:ad:f3:61:15:24:7b:c4:f0:cf:3d:ed:1e:9d:
fc:6e:4a:28:2f:96:b8:81:a4:2e:34:aa:30:a5:14:
3d:61:24:c3:7c:54:6f:9c:9e:2e:22:38:4f:e1:31:
4d:8f:3d:f5:57:f8:73:78:2f:8b:77:1e:cc:a4:57:
ec:90:ef:f8:b6:2c:b7:b4:b9:49:9e:73:86:fa:a3:
18:22:f5:e4:1f:e6:21:3a:fe:2e:36:77:8c:c4:68:
ac:6f:de:90:6c:03:5a:1e:25:d9:92:a5:03:e5:e2:
1f:a4:c3:12:82:31:7e:bd:fc:27:78:c1:dc:52:d1:
e0:27:45:18:8a:cd:43:e6:84:ab:75:b1:43:d0:8d:
c5:24:71:c7:bc:ff:57:92:bf:fd:f6:df:a4:72:5e:
f0:51:7f:76:fb:93:df:b0:c8:e4:68:0b:b0:41:66:
06:10:a3:40:19:85:59:c7:67:b7:bf:ea:37:9b:b0:
2d:1e:96:c1:aa:03:b8:c3:97:78:58:cc:80:be:6f:
b1:fb:c8:49:aa:aa:51:7a:7e:ed:36:37:e7:06:d9:
b4:6c:b6:47:ba:fa:db:1f:b3:ba:3f:c9:23:ff:63:
57:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AF:47:55:48:4B:57:E0:97:40:06:EA:C4:49:0D:BF:1C:1E:B7:21
X509v3 Authority Key Identifier:
keyid:6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/0BE76940057F11F1BBFA6CD7ADEE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
202.36.209.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:79:bd:ce:e4:d1:a5:01:c6:77:41:85:a4:7f:a5:48:ac:7a:
78:e8:dc:7a:07:aa:62:4e:36:04:fe:43:3d:ec:16:ee:d2:3d:
4e:4b:f5:c3:d5:0e:6f:3f:4d:45:1b:ae:e0:b4:a2:4e:b9:af:
0e:a8:df:8f:9d:9f:ba:a4:2b:56:f0:17:d1:29:83:b5:eb:97:
8b:5b:23:7f:17:d3:f3:92:29:eb:8a:2e:d5:ef:91:7c:12:a5:
e0:46:7d:96:aa:55:69:f9:c7:0d:ae:32:c0:b5:bb:13:5e:d5:
97:48:97:a2:bf:24:04:4a:80:5d:62:78:ad:5c:02:18:61:1a:
01:b7:5d:de:d9:d1:ea:48:e0:ef:0a:ea:8c:1c:8d:c3:26:79:
51:01:6a:86:5d:c8:3c:85:a1:db:91:71:c5:af:48:6e:73:e2:
63:65:03:96:ac:cc:1d:3b:7e:34:8b:cb:79:b8:24:8f:c9:96:
25:a7:9f:ea:77:dc:25:02:55:a0:0c:15:6b:01:1a:19:ae:86:
b6:ab:be:01:f3:e4:07:8d:da:e2:70:95:2d:cd:d9:76:a7:b3:
11:5d:69:db:e8:1b:85:4f:88:2a:76:1d:85:b9:e3:f8:7e:83:
c8:c0:66:74:50:ff:19:30:9e:13:a5:27:84:d0:9f:bc:63:9c:
ca:c0:3b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:26:32 2026 by rpki-client