
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/A1DFD796A65511EABDAED713C4F9AE02.roa
File: A1DFD796A65511EABDAED713C4F9AE02.roa (raw, json)
Hash identifier: m4DYqNviRswbFR7fGEs+RlqfCBi1sLTXNU77Vhy5SsE=
Subject key identifier: F8:CC:EC:A8:DD:33:64:A0:2A:19:DC:07:80:BD:20:22:2F:B3:48:64
Certificate issuer: /CN=A91C9D04/serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0
Certificate serial: 09AE
Authority key identifier: 7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/A1DFD796A65511EABDAED713C4F9AE02.roa
Signing time: Tue 10 Mar 2026 17:20:45 +0000
ROA not before: Tue 10 Mar 2026 17:20:45 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 17981
IP address blocks: 202.131.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl
rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 16:40:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2478 (0x9ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9D04, serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0
Validity
Not Before: Mar 10 17:20:45 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69b052ed-9afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d2:56:35:e9:a4:a3:73:18:b1:14:c4:be:ac:
bc:5e:65:51:c4:3e:1a:f2:54:04:0e:fd:81:6c:fe:
e6:d8:47:f3:01:21:a2:e9:5a:fb:72:30:3e:d1:cc:
51:eb:83:76:b0:3f:65:f7:94:78:8c:41:3c:19:ad:
8f:9b:ee:33:92:c3:6b:52:23:4c:7b:53:c1:e2:5d:
79:d7:74:73:51:52:20:62:cd:2a:7c:12:a0:b1:fa:
2d:a0:69:ba:1d:bc:1f:70:04:93:54:be:75:3c:df:
e7:64:18:76:8f:39:28:6a:17:1a:8d:8f:de:c2:b5:
70:2e:bd:42:db:d6:29:dc:0b:94:da:5f:5e:19:3b:
5f:da:59:7b:c2:b5:cf:b2:b2:e7:5c:d4:cd:af:22:
f1:a5:c7:26:bd:4c:f7:ee:63:da:88:75:7d:a3:53:
bd:f4:1f:6f:95:ee:99:6e:ef:62:21:e2:22:46:bf:
03:07:9e:7a:56:b4:4c:bb:4f:2a:f8:49:ef:4e:77:
fb:2a:38:17:bd:0e:fe:d8:8b:7d:80:18:79:e9:72:
44:06:f5:1b:a8:e4:ab:39:c9:4f:e0:41:14:4e:7d:
e6:f5:09:35:7a:a2:74:03:47:33:f8:cc:32:e1:23:
dd:69:41:de:ec:59:eb:de:88:1f:8e:17:35:1e:d3:
d8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CC:EC:A8:DD:33:64:A0:2A:19:DC:07:80:BD:20:22:2F:B3:48:64
X509v3 Authority Key Identifier:
keyid:7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/A1DFD796A65511EABDAED713C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.131.80.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:95:76:21:be:c6:c7:1c:7d:da:66:ad:a9:55:85:e5:bd:ee:
b8:bd:6b:be:a3:23:1b:63:0d:4a:3f:81:83:a2:e5:01:6d:a4:
af:40:63:38:3c:36:44:85:4f:52:ca:cb:ac:f3:54:c9:a4:3d:
76:e2:04:e6:f3:4b:25:74:f3:14:12:8d:1f:72:dd:6e:7c:38:
e3:af:cf:6b:35:85:c6:1f:7b:b5:80:d2:71:2b:d2:cf:ea:22:
45:29:dd:c8:ef:54:4a:53:e1:db:54:93:48:7d:1d:ba:62:07:
a1:af:8d:d3:6a:ef:46:86:35:84:3d:f2:ec:66:08:bf:ad:f4:
45:a1:6f:dc:21:9b:12:de:ab:99:a8:90:71:27:56:fc:59:5c:
e3:74:69:19:48:03:18:53:5d:f3:f9:41:b7:1b:10:6c:ea:21:
43:d6:55:cf:b8:ec:66:9c:75:fd:14:2d:42:72:0a:74:08:36:
11:12:b7:a4:ba:96:54:ce:62:95:c7:e0:ff:90:8e:79:b4:87:
13:63:17:f3:9c:64:21:89:60:0f:e4:6a:66:c2:59:21:48:99:
05:4d:61:22:47:56:f9:a9:41:9c:12:af:f7:94:16:e6:64:4c:
3e:04:55:0c:01:77:b7:5f:b9:eb:1c:e9:6f:11:1e:3c:3a:e6:
2d:25:9b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:03:10 2026 by rpki-client