
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/275245323AB511F0AE5E5919C4F9AE02.roa
File: 275245323AB511F0AE5E5919C4F9AE02.roa (raw, json)
Hash identifier: YrpwZvqsN/suJ95b9ld+juPtM8n7pl1taL1SkXrBpsw=
Subject key identifier: 67:9D:64:D2:BE:D8:0D:86:3F:81:55:0C:51:7A:AE:F1:EB:24:0E:BD
Certificate issuer: /CN=A91CD7A4/serialNumber=B5297065556D2B22934935E7520722BD5333DA4F
Certificate serial: 0202
Authority key identifier: B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/275245323AB511F0AE5E5919C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:31:45 +0000
ROA not before: Tue 27 May 2025 04:43:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134090
IP address blocks: 27.50.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl
rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 514 (0x202)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD7A4, serialNumber=B5297065556D2B22934935E7520722BD5333DA4F
Validity
Not Before: May 27 04:43:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a59f51-0dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4f:60:2f:82:ec:ea:6b:7f:90:1e:7d:87:26:
27:9f:88:df:5b:68:da:7d:0c:a6:ed:d4:9b:0e:e5:
a1:34:21:80:a1:91:8c:fb:cc:ff:69:32:08:17:cd:
49:12:9f:99:a8:4e:f8:2f:8e:e8:8c:d7:08:bf:68:
2d:d9:a0:ee:29:02:79:e0:e6:71:c1:b3:3e:b2:c7:
2e:b6:c6:bb:99:92:b3:31:45:7a:e2:4c:21:73:48:
9c:44:bf:84:71:e2:5a:1c:f5:b8:a5:9e:a2:98:56:
37:88:18:38:ff:32:2b:90:c8:0c:ca:a7:dc:0a:b1:
ad:ba:31:97:f9:53:6a:26:b0:1a:19:03:eb:87:07:
68:3c:7f:cc:62:7d:21:18:82:99:06:40:af:5d:66:
4e:9b:4d:7c:d2:0f:c4:78:60:4c:e1:f6:52:46:3f:
4b:a9:51:74:34:94:e6:d3:af:08:09:74:09:17:36:
3c:d4:18:c7:b6:37:37:26:6c:06:78:e2:a7:02:84:
0b:5b:59:00:d7:a5:07:0e:69:f1:2e:05:8f:a7:bd:
3d:75:9b:81:18:15:1c:ce:95:63:a8:f5:5d:84:a8:
94:96:ae:0f:69:18:2d:d2:05:d7:9b:af:60:d4:df:
08:90:f7:89:e6:68:f5:04:26:c9:7e:29:59:9c:cf:
f8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9D:64:D2:BE:D8:0D:86:3F:81:55:0C:51:7A:AE:F1:EB:24:0E:BD
X509v3 Authority Key Identifier:
keyid:B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/275245323AB511F0AE5E5919C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.50.8.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:7d:b6:c7:43:54:2c:43:ab:96:da:6f:04:bc:84:4f:2f:22:
32:11:e4:d4:22:5b:aa:35:26:a7:69:83:aa:f3:fb:ec:7d:6c:
e1:71:bc:ed:13:54:0a:5e:f8:1d:8b:33:aa:5b:15:e7:53:0e:
92:94:32:72:35:df:7c:d4:fb:66:e2:25:74:75:ac:e1:2e:9a:
8e:b4:2c:05:9f:b7:45:0b:c1:bb:d9:24:18:21:35:3e:60:20:
09:b9:ee:2a:a1:89:cc:82:88:33:8b:a1:b8:f1:99:90:b7:9d:
01:44:51:d3:98:20:a0:59:e5:ff:4d:85:f4:1e:f5:03:a3:a8:
b6:77:14:c3:65:e7:44:6f:19:24:4d:85:44:04:18:cc:f6:1d:
af:54:77:5a:af:5b:37:de:36:26:a4:bc:db:b9:9c:d5:a3:41:
3b:3f:f5:09:26:d5:75:f4:2f:23:62:f0:11:e5:d7:51:fc:c0:
06:78:29:69:02:8b:b1:27:8e:9a:f9:34:9c:79:12:59:2f:68:
36:bb:67:20:40:9d:68:8d:51:e8:9d:e4:a9:0a:50:54:fb:60:
56:ee:80:cf:8c:c7:f8:20:db:46:69:d0:42:c2:3b:d2:0e:03:
f7:b6:02:39:e7:b2:00:77:2e:31:63:c7:91:a5:e5:19:d5:13:
a9:29:c5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:57:09 2026 by rpki-client