
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/1F8578820CD611EFAFFA4E63C4F9AE02.roa
File: 1F8578820CD611EFAFFA4E63C4F9AE02.roa (raw, json)
Hash identifier: X9PlsIxIK/tymRHPH3Dn2w7Nzml17MG5US4WdS+LzEc=
Subject key identifier: 63:6A:49:10:7E:38:49:05:CA:99:7B:42:D9:15:87:C8:5A:D9:E2:A7
Certificate issuer: /CN=A91D176D/serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Certificate serial: 01C3
Authority key identifier: AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/1F8578820CD611EFAFFA4E63C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:46:11 +0000
ROA not before: Tue 27 Jan 2026 03:22:57 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 23979
IP address blocks: 203.84.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:25:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D176D, serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Validity
Not Before: Jan 27 03:22:57 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a594a3-c14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:14:99:c7:18:5e:0b:c1:a7:99:17:0b:05:70:
97:a0:50:b1:40:6d:ed:07:f5:12:41:c6:64:45:89:
83:bd:6d:52:ec:70:8d:2a:b3:45:40:71:ce:df:e4:
14:e1:17:83:ad:b6:42:a3:74:5a:47:32:a3:97:69:
eb:1a:08:6a:b9:d7:f4:b7:aa:51:f9:82:cb:09:f4:
6b:a1:ba:77:82:39:2c:c3:65:46:80:2c:6c:af:9d:
64:ea:29:b2:47:1e:ca:c8:80:26:82:a3:b4:8e:ed:
c1:c2:af:09:06:68:68:a5:31:6f:77:1c:ab:9c:7c:
e0:47:4c:cc:27:8b:11:6a:1a:19:02:56:ad:c3:f8:
0a:a5:f8:2f:b1:dd:0d:d3:4f:6e:1e:6c:0d:e4:b4:
d0:68:f7:8c:4a:df:f4:a5:4f:3a:cf:a0:ce:b4:a4:
75:b9:38:09:e5:dc:43:3d:80:d6:2f:36:74:99:88:
8a:ef:9f:c7:37:44:f2:bb:90:b2:e1:29:e8:fe:d8:
73:46:4b:85:87:c3:96:f9:b0:dd:fa:cb:42:d2:ac:
b4:97:7d:c5:43:92:6f:a3:59:ef:c5:9c:9e:f3:84:
c8:79:cf:41:7b:cc:75:51:6c:2a:50:ee:c6:3d:0d:
56:95:40:d7:b6:13:66:2f:48:bb:21:24:5a:32:de:
f7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6A:49:10:7E:38:49:05:CA:99:7B:42:D9:15:87:C8:5A:D9:E2:A7
X509v3 Authority Key Identifier:
keyid:AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/1F8578820CD611EFAFFA4E63C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.84.131.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:3e:2d:2f:37:2d:a5:cc:56:4d:4e:a5:98:5f:f6:b7:13:6c:
20:49:f4:d8:64:49:04:a6:ba:82:84:93:c9:79:f3:07:93:64:
75:de:07:8c:7f:9a:27:d4:9d:25:6d:fc:23:6e:ef:6c:f1:7f:
0d:3e:d2:a5:f3:61:66:43:45:db:fe:26:fb:18:6f:00:89:69:
9c:f0:46:f3:ee:13:4b:58:95:cd:7e:ed:d0:27:80:10:d9:6f:
65:86:0c:fa:5b:4c:4e:23:7a:ec:90:f9:d5:56:51:e7:6c:1c:
5c:84:ab:9b:93:99:8a:f1:ce:8f:71:c8:ef:e3:df:05:64:99:
79:05:d3:57:48:17:56:bf:da:93:84:87:c8:fd:83:a6:b1:7c:
5d:ba:c9:39:90:3b:db:30:55:ae:b9:67:82:8c:ba:4b:54:53:
77:8b:24:69:ba:20:00:48:b3:7b:de:c4:74:93:65:fd:4f:0e:
4c:82:ad:8d:70:1b:25:ce:8d:22:3e:86:b3:6d:8b:0f:38:71:
ff:23:71:ac:82:d4:85:03:36:19:c6:6b:20:58:e0:a4:68:ea:
8a:5f:0a:e3:5d:1c:b4:1b:14:cf:44:a6:9a:79:9d:fd:1f:cd:
ae:f1:f7:d5:f3:0c:f5:b0:16:25:8f:4f:82:5f:16:ed:a3:5e:
bb:41:76:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:34 2026 by rpki-client