
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/826A614C16D911F183D175C0323D8C67.roa
File: 826A614C16D911F183D175C0323D8C67.roa (raw, json)
Hash identifier: ycmuh8Nj0r0LWzIjLbjrvo9pWQhXULrkKa+U8zn3Gr8=
Subject key identifier: 25:C7:DA:31:16:DB:A6:6C:98:EC:B7:98:54:B0:55:F3:7E:37:5C:70
Certificate issuer: /CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
Certificate serial: 0334
Authority key identifier: B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/826A614C16D911F183D175C0323D8C67.roa
Signing time: Tue 24 Mar 2026 08:35:13 +0000
ROA not before: Tue 24 Mar 2026 08:35:13 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 834
IP address blocks: 203.33.238.0/24 maxlen: 24
203.33.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl
rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:04:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 820 (0x334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D366A, serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
Validity
Not Before: Mar 24 08:35:13 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69c24cc1-cd76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:20:96:f4:e7:87:32:0e:9c:e7:d7:05:a0:8c:
52:73:01:a7:73:9c:b9:6a:7e:be:21:bc:f1:c6:98:
0f:bc:c8:bb:e4:94:82:38:7f:29:ca:03:a5:4c:fb:
d5:c1:b3:49:d5:98:61:c5:cb:68:cd:2c:cb:23:24:
5a:00:e8:8d:af:da:18:73:2d:cf:9e:18:b1:72:4e:
09:36:a5:ac:9a:39:1f:51:fb:71:e1:db:7d:40:56:
98:bd:b1:a2:93:eb:51:43:05:dc:2b:a5:34:a3:18:
a0:62:d9:7d:af:fb:a7:e7:63:c6:f0:d7:d1:8d:b1:
db:da:2d:ce:80:08:df:29:d7:19:4e:96:c5:c9:1b:
f4:d3:af:e1:c4:2f:14:75:55:2d:15:f6:ef:fb:75:
01:ce:db:71:00:be:56:c8:1f:7b:9e:9c:7a:35:62:
6b:70:41:ef:ea:36:ca:a2:6c:8a:d3:64:49:18:32:
ef:a8:4b:08:1c:95:9d:8c:29:7b:7c:3a:6e:07:f2:
d3:7d:38:47:43:7e:83:d3:f9:70:9d:e8:ed:0e:a7:
14:5f:04:19:ab:a3:a0:eb:e1:3f:24:25:9e:a8:e2:
40:21:11:e9:3d:b3:4d:11:93:17:4e:fe:78:b7:d6:
9e:9b:b0:59:f3:d3:6f:46:8a:78:f6:ca:cb:e3:65:
7b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C7:DA:31:16:DB:A6:6C:98:EC:B7:98:54:B0:55:F3:7E:37:5C:70
X509v3 Authority Key Identifier:
keyid:B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/826A614C16D911F183D175C0323D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
203.33.238.0/23
Signature Algorithm: sha256WithRSAEncryption
87:81:74:e2:a3:19:a8:50:b5:ba:80:a9:3f:90:a0:7a:9f:d3:
ea:af:96:39:05:eb:b7:20:d2:85:ba:48:d0:ce:5c:d1:3e:17:
80:00:de:91:f9:0d:46:19:ed:cd:03:88:ac:a3:27:5a:ec:2c:
a9:03:48:46:70:89:69:23:da:89:2b:0d:ba:23:e8:a0:ad:a3:
24:17:a7:a5:a5:bb:52:9c:eb:fa:62:0f:70:87:27:c3:6f:2c:
73:36:3f:26:c7:da:00:2d:bd:b9:76:2c:26:70:5d:ed:d8:75:
9e:19:e1:4b:3d:6f:41:8b:56:7f:bd:57:20:4c:d4:46:fb:fd:
ee:fe:f2:f9:ed:70:a6:89:57:c3:80:8f:67:7a:53:70:5d:1e:
ff:73:91:61:e5:16:3f:cf:89:82:23:ee:86:a8:3c:a5:e3:ef:
fc:8c:f7:05:f7:ce:b2:72:1d:91:03:98:4b:b6:67:d5:45:ac:
e8:88:d9:6b:6e:68:b8:66:16:c1:fd:05:c3:fc:00:cf:00:a2:
01:65:dc:ef:73:38:42:ba:e4:92:04:c7:3d:97:00:4e:89:49:
31:6d:25:cc:a5:13:8e:b3:a3:f9:68:75:d2:79:da:6a:59:35:
be:48:94:74:ef:44:8c:31:d5:bb:f0:13:08:dd:ac:9e:51:35:
4a:d7:39:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:34:27 2026 by rpki-client