
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/950791DAD0D811EC8DF4377FC4F9AE02.roa
File: 950791DAD0D811EC8DF4377FC4F9AE02.roa (raw, json)
Hash identifier: oFwuVF4N1WD0xpMNgPbemI2ygkBICMTaN5OCfEUJDw0=
Subject key identifier: 8F:42:F9:31:73:72:E6:47:6F:F7:E1:10:4D:58:25:05:1A:AD:82:D1
Certificate issuer: /CN=A91D2ADD/serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB
Certificate serial: 0431
Authority key identifier: B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/950791DAD0D811EC8DF4377FC4F9AE02.roa
Signing time: Tue 01 Sep 2026 00:49:30 +0000
ROA not before: Tue 01 Sep 2026 00:49:30 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 31972
IP address blocks: 45.121.48.0/22 maxlen: 24
103.61.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl
rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1073 (0x431)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2ADD, serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB
Validity
Not Before: Sep 1 00:49:30 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a96211a-aad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ef:67:51:fa:a9:5b:92:24:48:27:14:e0:98:
66:4f:1c:a8:2b:bd:a2:d3:fc:28:ef:06:87:1b:a4:
7f:b5:89:c5:83:ee:c2:2b:2d:6d:50:0a:92:55:43:
07:31:b7:7e:e4:68:d3:26:9d:97:59:7f:8b:00:51:
4e:da:3e:e3:96:21:3e:fa:eb:ec:c0:e2:a8:ff:e5:
77:24:c1:5f:46:26:45:e6:0d:6a:63:a6:34:12:31:
77:c5:c9:ff:64:77:28:44:ac:24:9b:5a:e3:02:38:
6a:f3:98:52:22:3d:86:af:76:37:7c:05:0b:ec:6e:
cb:34:d8:34:81:37:af:80:88:7a:46:8a:93:dd:46:
28:5a:c1:d8:c7:2c:6f:fd:5f:6a:53:d4:7d:bf:bf:
8f:fe:7d:d0:9e:2d:fa:08:ba:11:bb:c0:25:72:ab:
21:b9:93:5d:3d:94:1e:35:85:ea:d1:11:cb:cf:a8:
a7:b2:58:c6:96:15:3a:f1:73:67:b9:3c:4f:ad:39:
42:7b:15:2d:95:35:c2:a9:dc:5c:d7:93:c5:14:ad:
03:42:80:ec:39:a6:19:56:8b:44:ad:1e:13:41:f0:
58:ae:2e:7b:75:99:1c:a9:69:db:e7:3b:de:01:33:
f0:53:cd:fd:b0:c0:c5:5e:d2:99:8f:fa:d7:ca:c8:
ff:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:42:F9:31:73:72:E6:47:6F:F7:E1:10:4D:58:25:05:1A:AD:82:D1
X509v3 Authority Key Identifier:
keyid:B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/950791DAD0D811EC8DF4377FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.121.48.0/22
103.61.136.0/22
Signature Algorithm: sha256WithRSAEncryption
64:87:f1:4d:5b:23:86:f1:04:70:6f:3f:96:98:69:8f:28:7d:
c9:53:3f:6b:1f:fb:f1:fb:e4:c9:7d:8d:02:f2:e3:c0:79:38:
ee:8a:6e:4b:01:70:95:f1:29:f0:f8:d3:6b:d7:c7:f7:6d:64:
4e:8d:e3:85:69:0a:49:fe:91:2e:d6:08:d4:eb:bc:12:a0:73:
dd:7c:e8:a6:ef:58:3b:f6:2d:48:25:d0:f5:5e:bd:76:23:1b:
6b:5b:33:94:4b:c1:cf:2b:1f:d9:a9:95:d6:92:6e:aa:81:e2:
5c:2c:ad:58:df:2a:8d:23:28:97:97:96:81:ab:c3:4d:a8:18:
b3:5c:67:ad:9b:0e:6d:b0:ca:56:f2:2c:e9:7b:dc:79:1e:77:
44:26:dd:5c:00:18:51:3e:58:66:a5:62:0c:c0:58:20:06:b1:
82:77:69:8a:ec:35:b1:10:6e:8b:71:93:ee:5c:b7:15:a7:33:
49:cf:89:54:31:b2:5c:e7:75:74:a5:aa:e3:64:e4:57:7a:09:
e2:29:e9:e2:45:a9:8d:0e:87:16:c8:3a:bd:32:dd:4d:3b:1f:
6b:c8:b8:29:34:a5:22:b5:f8:43:2d:96:b2:60:f7:d8:83:2e:
b3:64:70:16:bc:26:c8:3e:8a:f0:be:7d:1f:1a:b9:6f:a3:10:
2f:f1:1b:41
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICBDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDJBREQxMTAvBgNVBAUTKEI0RjI2MkY5OTg1N0UxMjBDQzlDQkM0QkZDMTdFRDU0
QUJBQkUyQkIwHhcNMjYwOTAxMDA0OTMwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk2MjExYS1hYWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr+9nUfqpW5IkSCcU4JhmTxyoK72i0/wo7waHG6R/tYnFg+7CKy1tUAqSVUMH
Mbd+5GjTJp2XWX+LAFFO2j7jliE++uvswOKo/+V3JMFfRiZF5g1qY6Y0EjF3xcn/
ZHcoRKwkm1rjAjhq85hSIj2Gr3Y3fAUL7G7LNNg0gTevgIh6RoqT3UYoWsHYxyxv
/V9qU9R9v7+P/n3Qni36CLoRu8AlcqshuZNdPZQeNYXq0RHLz6insljGlhU68XNn
uTxPrTlCexUtlTXCqdxc15PFFK0DQoDsOaYZVotErR4TQfBYri57dZkcqWnb5zve
ATPwU839sMDFXtKZj/rXysj/3wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFI9C+TFz
cuZHb/fhEE1YJQUarYLRMB8GA1UdIwQYMBaAFLTyYvmYV+EgzJy8S/wX7VSrq+K7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkFERC9FREM2NzYxNEQw
RDQxMUVDQTI0OTRBNzdDNEY5QUUwMi90UEppLVpoWDRTRE1uTHhMX0JmdFZLdXI0
cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RQSmktWmhYNFNETW5MeExfQmZ0Vkt1cjRycy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDJBREQvRURDNjc2MTREMEQ0MTFFQ0EyNDk0QTc3QzRGOUFFMDIvOTUwNzkxREFE
MEQ4MTFFQzhERjQzNzdGQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCLXkwAwQCZz2IMA0GCSqGSIb3DQEBCwUAA4IBAQBkh/FNWyOG8QRw
bz+WmGmPKH3JUz9rH/vx++TJfY0C8uPAeTjuim5LAXCV8Snw+NNr18f3bWROjeOF
aQpJ/pEu1gjU67wSoHPdfOim71g79i1IJdD1Xr12IxtrWzOUS8HPKx/ZqZXWkm6q
geJcLK1Y3yqNIyiXl5aBq8NNqBizXGetmw5tsMpW8izpe9x5HndEJt1cABhRPlhm
pWIMwFggBrGCd2mK7DWxEG6LcZPuXLcVpzNJz4lUMbJc53V0parjZORXegniKeni
RamNDocWyDq9Mt1NOx9ryLgpNKUitfhDLZayYPfYgy6zZHAWvCbIPorwvn0fGrlv
oxAv8RtB
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:01:19 2026 by rpki-client