
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/A18158C6E64611EE95C0CE78C4F9AE02.roa
File: A18158C6E64611EE95C0CE78C4F9AE02.roa (raw, json)
Hash identifier: lJm555h+eg8dO0CHQ2nNo/R5NutYBuna/K3mXRlVmtQ=
Subject key identifier: F4:2E:6E:27:64:47:6C:5B:BD:4B:B5:18:66:C3:F2:84:CE:16:D4:0B
Certificate issuer: /CN=A91D9A24/serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E
Certificate serial: 0179
Authority key identifier: 47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/A18158C6E64611EE95C0CE78C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:11:56 +0000
ROA not before: Sat 03 May 2025 05:11:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139623
IP address blocks: 202.71.188.0/23 maxlen: 24
2001:df3:90c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.crl
rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:54:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 377 (0x179)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9A24, serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E
Validity
Not Before: May 3 05:11:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a59aac-02f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8b:fb:be:41:cf:70:d9:78:91:31:a0:62:1e:
5f:4b:9a:ed:6c:86:bb:5c:f9:99:ca:7d:06:55:d1:
36:96:dc:75:e9:5a:9e:5e:a8:ad:31:a4:21:08:60:
85:2a:cb:24:db:e6:80:6a:00:7e:a4:4c:ce:75:9d:
5c:16:f4:fc:b4:fe:d8:22:a6:30:25:07:c5:f3:ca:
a1:57:bf:4b:97:2c:45:ad:05:ec:c6:a2:38:7f:da:
63:9e:f1:34:d1:2d:50:93:43:e8:da:a2:85:51:ed:
29:f3:ed:c6:9d:15:e0:83:ca:99:bf:4f:33:09:c7:
c2:1d:d2:5c:26:44:f6:9a:ca:9d:44:43:51:ee:c9:
db:63:4c:bc:e5:ab:94:f5:22:52:70:3e:11:0a:93:
53:01:23:8e:c3:ca:33:46:52:e8:41:63:34:5f:f7:
3d:e9:19:b8:2e:68:cb:8b:bb:b7:d7:54:3a:fb:e0:
6b:fc:ee:e8:c5:d8:60:5b:b7:e4:66:56:87:64:e1:
91:0d:67:da:d6:a2:58:f9:cc:79:08:8d:ef:fb:5d:
20:6d:57:83:f5:f9:7e:b2:ca:1b:e3:15:3f:7e:be:
b1:67:e6:2c:0f:e7:22:f7:02:88:e8:27:b7:6a:d0:
58:e8:55:f9:ca:d4:80:12:0e:cf:24:8e:3d:cd:9f:
13:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2E:6E:27:64:47:6C:5B:BD:4B:B5:18:66:C3:F2:84:CE:16:D4:0B
X509v3 Authority Key Identifier:
keyid:47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/A18158C6E64611EE95C0CE78C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.71.188.0/23
IPv6:
2001:df3:90c0::/48
Signature Algorithm: sha256WithRSAEncryption
32:7e:fe:5e:0f:d9:5a:da:e9:be:7b:b5:43:2d:86:90:cb:ef:
78:ce:a9:02:55:f6:bc:0e:99:d1:d7:f7:1c:37:ff:e3:c0:a0:
77:9b:eb:be:97:64:3d:f8:19:15:d5:e6:c6:94:75:70:a1:73:
a3:e9:52:90:2f:c9:81:4b:78:23:bb:4f:5c:2a:68:8d:78:e7:
7c:54:63:ee:59:a0:16:99:34:27:f0:2c:e7:5e:39:9a:d2:23:
ca:79:2d:17:1c:4b:92:73:f5:24:2e:a2:eb:06:fa:f4:22:fd:
29:82:ad:37:1d:1e:ef:00:6f:9e:ab:74:a1:4f:7a:2b:2a:48:
8e:16:d1:da:ff:9f:cd:3f:ea:91:a6:54:66:6e:80:36:e0:0d:
58:7d:a1:62:0e:56:4d:67:c4:b7:8a:7a:20:ae:ce:13:31:2d:
fe:40:9f:0a:c0:56:d0:8d:a6:7a:c3:03:f1:30:40:38:1d:72:
81:6f:2e:22:6a:d0:48:f3:8c:f5:c5:97:18:99:d6:ef:6b:61:
9b:ff:b4:b3:6a:db:f9:61:a7:37:06:7e:55:ac:93:03:a2:60:
64:39:c3:f1:26:e8:b6:cf:8b:3e:37:0e:e1:4f:83:3e:86:ca:
28:c4:d5:08:1a:5a:2e:9b:e6:58:bd:15:d0:2f:ff:6c:24:81:
8c:18:f9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:48:43 2026 by rpki-client