
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/02DB290681BA11F1AFA7F5BA63A30FBC.roa
File: 02DB290681BA11F1AFA7F5BA63A30FBC.roa (raw, json)
Hash identifier: 0VxHPVZ4YVNrrIIbimS1zczqvyzHEUrXRQ0L2H6QDOk=
Subject key identifier: 39:C2:74:F9:6B:B6:94:F1:BA:89:EB:14:45:E1:09:55:7C:09:A0:39
Certificate issuer: /CN=A91D1F47/serialNumber=366DEE6647EA1329D6BF5AB99CA3FEA80282FD44
Certificate serial: 03
Authority key identifier: 36:6D:EE:66:47:EA:13:29:D6:BF:5A:B9:9C:A3:FE:A8:02:82:FD:44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/02DB290681BA11F1AFA7F5BA63A30FBC.roa
Signing time: Fri 17 Jul 2026 08:32:14 +0000
ROA not before: Fri 17 Jul 2026 08:32:14 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 14618
IP address blocks: 203.78.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.crl
rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:19:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1F47, serialNumber=366DEE6647EA1329D6BF5AB99CA3FEA80282FD44
Validity
Not Before: Jul 17 08:32:14 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6a59e88e-d7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a9:ba:74:03:54:63:8c:c2:d2:44:9f:72:76:
39:37:ae:73:ae:93:db:33:9c:40:c3:ae:63:77:33:
70:72:0b:b8:52:a5:fe:98:2c:76:86:30:5f:e4:34:
bb:b5:60:c0:80:a7:7c:fd:de:37:c1:11:24:1a:5d:
8c:c0:49:9a:64:1b:7f:1a:4e:21:6a:3e:4f:27:01:
14:fc:c5:f9:98:49:c6:20:da:7f:e4:35:bb:87:7c:
cf:68:1f:20:4c:eb:e6:71:43:ec:12:a7:aa:2e:8f:
2e:5d:fe:d4:b4:8f:96:bd:20:27:11:d5:be:6c:28:
de:5b:56:2d:59:9d:1b:ce:d5:25:86:a4:16:62:8d:
be:e7:21:f6:36:0b:a7:72:c6:ef:f3:7f:2e:d2:b5:
15:c9:5e:d8:6b:f3:00:03:67:a9:c2:b6:90:8a:54:
c2:ac:4c:b1:57:92:83:fe:6a:87:65:c8:28:91:b3:
fd:05:28:34:08:6a:e9:63:1f:cf:a7:6c:25:d2:77:
7d:d8:93:fc:de:6a:ad:f8:46:64:45:a5:a7:56:92:
a7:68:92:04:4a:9a:0a:b7:c6:de:00:cf:a8:95:f9:
08:7f:79:06:93:55:06:9d:b4:3e:66:94:d0:ee:c6:
07:e0:b9:40:d2:9a:b5:78:85:5f:5c:f3:43:c9:0c:
c3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C2:74:F9:6B:B6:94:F1:BA:89:EB:14:45:E1:09:55:7C:09:A0:39
X509v3 Authority Key Identifier:
keyid:36:6D:EE:66:47:EA:13:29:D6:BF:5A:B9:9C:A3:FE:A8:02:82:FD:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/02DB290681BA11F1AFA7F5BA63A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
203.78.9.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:13:1a:32:c9:cd:e8:7c:e9:9e:81:c2:27:0c:ad:8b:13:d1:
95:40:0f:f0:35:bf:55:9b:d1:60:9e:88:c9:79:d8:56:92:96:
8d:00:ee:9e:1d:a9:37:61:97:4d:ca:4a:86:06:14:94:9e:50:
74:f7:3a:f9:fb:34:9c:9a:f0:8f:67:7d:17:ee:8b:5a:0f:51:
d6:34:86:5a:9d:f5:5f:57:7f:03:97:c9:a3:be:42:90:3e:55:
99:51:f3:a2:0f:6b:59:7c:8c:78:3f:31:fc:5a:5a:3d:5f:f2:
79:eb:08:1b:36:32:60:16:59:ff:54:91:8b:f6:3e:94:63:f8:
8f:9f:dd:42:51:59:46:cc:69:29:f7:9c:80:ff:f8:66:e0:a2:
91:8c:e9:5f:22:5d:bc:22:7e:0c:3e:cd:14:25:0c:e2:a9:27:
04:dd:93:ed:a6:e5:5c:c0:0d:fd:1e:0d:cf:da:86:e1:ec:41:
6a:be:c5:c3:bf:a9:f6:21:5b:62:02:e7:4c:6b:a7:0a:07:cd:
98:18:05:de:27:0f:e6:89:09:87:b8:b4:2d:a3:cd:32:69:b0:
0f:2f:ff:1e:cc:8a:7a:b4:be:ee:7e:7b:aa:5c:e9:6c:05:67:
45:61:2f:31:c9:a8:f6:51:a4:08:80:1b:cf:02:07:90:87:d1:
1f:28:64:dc
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MUY0NzExMC8GA1UEBRMoMzY2REVFNjY0N0VBMTMyOUQ2QkY1QUI5OUNBM0ZFQTgw
MjgyRkQ0NDAeFw0yNjA3MTcwODMyMTRaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhNTllODhlLWQ3YTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDgqbp0A1RjjMLSRJ9ydjk3rnOuk9sznEDDrmN3M3ByC7hSpf6YLHaGMF/kNLu1
YMCAp3z93jfBESQaXYzASZpkG38aTiFqPk8nART8xfmYScYg2n/kNbuHfM9oHyBM
6+ZxQ+wSp6oujy5d/tS0j5a9ICcR1b5sKN5bVi1ZnRvO1SWGpBZijb7nIfY2C6dy
xu/zfy7StRXJXthr8wADZ6nCtpCKVMKsTLFXkoP+aodlyCiRs/0FKDQIauljH8+n
bCXSd33Yk/zeaq34RmRFpadWkqdokgRKmgq3xt4Az6iV+Qh/eQaTVQadtD5mlNDu
xgfguUDSmrV4hV9c80PJDMO/AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUOcJ0+Wu2
lPG6iesUReEJVXwJoDkwHwYDVR0jBBgwFoAUNm3uZkfqEynWv1q5nKP+qAKC/UQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQxRjQ3LzJBNjE5NTY4ODFC
NjExRjFBNDUwNTgyMjYxQTMwRkJDL05tM3Vaa2ZxRXluV3YxcTVuS1AtcUFLQ19V
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTm0zdVprZnFFeW5XdjFxNW5LUC1xQUtDX1VRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MUY0Ny8yQTYxOTU2ODgxQjYxMUYxQTQ1MDU4MjI2MUEzMEZCQy8wMkRCMjkwNjgx
QkExMUYxQUZBN0Y1QkE2M0EzMEZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADLTgkwDQYJKoZIhvcNAQELBQADggEBAMYTGjLJzeh86Z6BwicMrYsT
0ZVAD/A1v1Wb0WCeiMl52FaSlo0A7p4dqTdhl03KSoYGFJSeUHT3Ovn7NJya8I9n
fRfui1oPUdY0hlqd9V9XfwOXyaO+QpA+VZlR86IPa1l8jHg/MfxaWj1f8nnrCBs2
MmAWWf9UkYv2PpRj+I+f3UJRWUbMaSn3nID/+GbgopGM6V8iXbwifgw+zRQlDOKp
JwTdk+2m5VzADf0eDc/ahuHsQWq+xcO/qfYhW2IC50xrpwoHzZgYBd4nD+aJCYe4
tC2jzTJpsA8v/x7Minq0vu5+e6pc6WwFZ0VhLzHJqPZRpAiAG88CB5CH0R8oZNw=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:30:59 2026 by rpki-client