
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/939530627B6311F0BF7B4936C4F9AE02.roa
File: 939530627B6311F0BF7B4936C4F9AE02.roa (raw, json)
Hash identifier: OERBSyFT8v44ydtzk1MlGhOChgpisosmqtVzJOaCSn4=
Subject key identifier: 6D:65:0A:B8:11:45:7C:D4:99:C0:02:CF:76:3B:1A:29:A3:68:C2:A1
Certificate issuer: /CN=A91D1623/serialNumber=A6150780E0BA11EA0ADC434AED383C8B82A8961D
Certificate serial: 0272
Authority key identifier: A6:15:07:80:E0:BA:11:EA:0A:DC:43:4A:ED:38:3C:8B:82:A8:96:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/939530627B6311F0BF7B4936C4F9AE02.roa
Signing time: Mon 21 Sep 2026 02:52:49 +0000
ROA not before: Mon 21 Sep 2026 02:52:49 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 17828
IP address blocks: 202.1.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl
rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 02:33:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 626 (0x272)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1623, serialNumber=A6150780E0BA11EA0ADC434AED383C8B82A8961D
Validity
Not Before: Sep 21 02:52:49 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6ab09c01-0227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d5:c9:d0:44:49:86:17:22:ae:79:b8:38:77:
06:e8:0d:1f:38:ff:95:74:0f:91:40:1f:d3:ee:32:
23:a1:ba:66:65:60:89:0d:ab:41:2f:ea:a9:c2:b0:
bc:3c:62:eb:ea:dd:00:47:f5:bf:35:c3:63:a5:92:
02:d5:c8:33:d2:92:36:fe:e7:d8:3f:e5:03:4c:b0:
99:9f:34:4a:52:60:18:4a:68:e2:be:0c:0f:df:20:
a7:2e:33:56:6e:bb:34:4a:ab:30:68:63:3c:41:21:
58:5f:8c:31:9a:39:a8:84:cf:87:59:af:0e:13:f7:
f6:c0:e4:5a:4f:44:20:ce:c4:63:0b:9d:a3:af:24:
f5:a0:f1:84:69:d1:54:a2:5e:2c:d2:aa:6a:2a:4e:
06:f5:aa:2e:48:1b:27:bd:50:2e:f9:f6:5d:29:a7:
9d:9c:c8:80:d2:18:12:90:83:63:fd:e7:87:d1:ee:
56:f8:43:17:7a:50:f4:67:73:4a:d6:18:f8:58:6d:
23:fd:0e:8c:26:8c:ce:3a:6f:dc:9d:c3:07:d8:d2:
ed:b9:5c:e5:03:ff:7e:97:61:6f:68:e7:db:0e:4a:
b9:6b:fa:8e:dc:9a:6d:5a:71:28:4c:8e:65:55:85:
50:13:0a:66:01:57:44:72:8c:8f:d3:db:7d:2f:5a:
8d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:65:0A:B8:11:45:7C:D4:99:C0:02:CF:76:3B:1A:29:A3:68:C2:A1
X509v3 Authority Key Identifier:
keyid:A6:15:07:80:E0:BA:11:EA:0A:DC:43:4A:ED:38:3C:8B:82:A8:96:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/939530627B6311F0BF7B4936C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.1.32.0/20
Signature Algorithm: sha256WithRSAEncryption
58:fe:01:6c:a3:68:50:ad:82:5f:b3:d9:f4:4f:4f:d0:07:cc:
a5:6d:c5:90:f1:df:36:52:9d:e9:ec:23:b9:11:36:40:31:cb:
d0:57:cc:ac:4c:e8:1f:3c:8e:e1:50:f6:9d:45:7e:cf:23:aa:
b4:30:a9:d4:dc:b2:60:d5:a8:8a:16:b6:e0:ec:ac:f0:75:3a:
96:42:8b:89:dd:ab:88:14:39:c2:84:a8:35:63:b8:85:0a:43:
27:4d:03:00:e0:66:ab:c8:38:8b:a7:4e:d9:23:b1:3d:c7:25:
9e:4f:3e:a5:31:17:20:58:94:b8:4b:76:2c:78:a9:ad:c5:00:
e8:7e:cc:42:51:b2:1a:90:dd:76:73:9b:d2:83:50:d5:ad:88:
0f:04:89:3e:8a:6f:d9:68:15:ee:bc:61:33:5d:17:8a:34:f9:
26:d8:25:36:5b:fd:f7:6c:04:5a:89:c7:f6:17:e6:f5:26:a1:
59:96:28:4e:e0:ea:eb:dd:04:2e:28:6a:b5:75:c0:a7:67:f0:
52:fc:70:7a:53:f9:cf:8c:de:f0:39:e8:7c:d1:26:ea:b0:1f:
fe:75:63:a9:ca:82:9a:8d:84:ab:bc:04:12:af:a3:cc:90:23:
4b:83:ca:bb:2b:bf:21:f9:65:b7:8f:34:67:a2:ea:be:65:e2:
29:ea:ac:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 03:46:57 2026 by rpki-client