
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/D992FDD49B4811EFA17EB17FC4F9AE02.roa
File: D992FDD49B4811EFA17EB17FC4F9AE02.roa (raw, json)
Hash identifier: dL/b9kFR/fDDp+1b1nZMcsVPe3aqtduJg9+GzU7pUT4=
Subject key identifier: A7:DC:73:ED:AE:80:C3:A5:72:9A:48:B9:CE:70:4A:A3:DD:23:35:2E
Certificate issuer: /CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF
Certificate serial: 0C4F
Authority key identifier: B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/D992FDD49B4811EFA17EB17FC4F9AE02.roa
Signing time: Fri 10 Jul 2026 20:20:31 +0000
ROA not before: Fri 10 Jul 2026 20:20:31 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 23686
IP address blocks: 101.97.48.0/23 maxlen: 23
101.97.50.0/23 maxlen: 23
2404:4f01::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl
rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:27:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3151 (0xc4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE558, serialNumber=B36B971724A3BABD890B754598933720F972FEAF
Validity
Not Before: Jul 10 20:20:31 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a51540f-58c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:8f:bf:ab:f6:f6:41:5f:f4:b3:59:cd:08:
6a:bb:c7:da:32:57:55:6a:40:4f:54:59:79:69:22:
9b:d3:b2:b0:ff:76:df:9f:06:66:8d:20:8f:09:87:
40:2d:ff:7f:8a:49:f4:a0:77:c9:65:41:02:84:be:
c6:de:2b:1e:54:44:d4:4b:d4:c0:b3:e9:cd:ed:a0:
53:7b:36:b1:5f:33:f8:9d:5e:6a:a6:29:d8:f9:05:
69:a7:85:62:59:82:26:64:bb:39:8a:75:6d:77:36:
59:07:e2:96:db:24:1e:77:ab:75:8a:79:7c:15:6c:
5e:7b:77:e2:d6:f0:a1:db:9a:e2:96:da:dd:c5:90:
01:4d:14:ee:8f:ff:76:aa:f5:8a:51:f5:c3:a3:b3:
72:46:b1:eb:b6:14:78:96:02:21:b7:15:d0:39:57:
08:56:7d:ea:cc:e6:a9:01:81:93:75:05:f0:d4:82:
06:87:98:8d:88:54:ad:45:de:fb:17:e5:13:a0:a8:
d4:3e:34:f8:a3:20:23:78:35:16:22:d3:eb:04:1e:
36:09:f6:38:5e:0e:e9:07:5c:7d:0f:77:b3:cd:33:
b9:78:33:cc:76:07:7a:37:98:a0:21:63:f2:e7:6e:
a7:e0:4e:09:52:27:a2:2a:66:e4:95:4c:15:7c:5c:
ca:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DC:73:ED:AE:80:C3:A5:72:9A:48:B9:CE:70:4A:A3:DD:23:35:2E
X509v3 Authority Key Identifier:
keyid:B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/D992FDD49B4811EFA17EB17FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
101.97.48.0/22
IPv6:
2404:4f01::/33
Signature Algorithm: sha256WithRSAEncryption
4b:5b:35:75:d1:62:1e:6b:9d:b2:56:3d:fe:82:68:d3:4e:3d:
90:16:05:03:0f:8a:0d:e6:d8:ae:98:fc:57:b8:c0:22:b5:23:
5e:9e:59:c5:72:03:24:77:42:54:74:54:d3:8e:82:e5:c1:a9:
d9:6a:ab:fd:80:5d:54:fb:91:14:c7:da:7f:a9:84:fb:e8:1f:
2c:77:8e:30:90:b6:a2:d7:4f:05:a5:be:62:e6:77:84:6a:bc:
cd:72:f3:19:60:5e:a0:a3:13:7b:22:60:98:4a:a0:2d:05:ef:
f6:a4:51:54:5f:70:e5:86:b7:33:cc:57:7c:dc:1a:58:5c:24:
ca:1c:e9:72:0d:c6:a3:e5:4b:1c:5b:bd:5e:e5:d2:f1:02:e5:
1b:42:f6:02:41:89:99:12:70:63:84:ed:8a:e4:40:98:37:ee:
66:0b:93:17:ef:bf:cf:99:23:be:cc:e6:e8:f8:ef:c9:86:43:
01:d3:a3:7b:48:8b:e5:1b:40:64:41:6c:cd:ec:fc:4d:57:5f:
08:1c:4d:bf:c4:a6:35:52:b3:17:0b:5b:41:59:b2:3f:28:13:
f8:2a:8b:05:2f:0b:00:bf:a7:d4:06:76:0c:b3:05:3c:5d:11:
a3:fa:ff:84:33:3e:3a:87:09:f8:85:5a:1c:0a:e4:1b:e8:7e:
5d:f8:b2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:33:09 2026 by rpki-client