
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/006CE5442FBA11ECA05BB46EC4F9AE02.roa
File: 006CE5442FBA11ECA05BB46EC4F9AE02.roa (raw, json)
Hash identifier: gGlyAExoFEUqT98bADKmBZWyQcG57UwG1nHtGghueEI=
Subject key identifier: 7C:45:EA:C7:19:49:B8:C4:21:4F:EE:53:78:AA:A7:6B:C4:D7:8E:8F
Certificate issuer: /CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C
Certificate serial: 3590
Authority key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/006CE5442FBA11ECA05BB46EC4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:40:10 +0000
ROA not before: Sat 20 Sep 2025 15:01:00 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 139797
IP address blocks: 202.57.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl
rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 14:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13712 (0x3590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCAE8, serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C
Validity
Not Before: Sep 20 15:01:00 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a5852a-c2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:55:ee:64:1c:39:21:92:58:9e:22:58:b1:a7:
6b:72:e6:16:b0:05:cb:27:50:e7:5d:98:18:b6:76:
15:24:f4:58:be:3e:5b:61:7e:14:3a:2a:fb:25:75:
a5:cf:39:c2:e2:41:57:ef:91:10:89:a1:77:6e:5a:
42:c5:78:2c:9c:88:b1:cd:7b:2c:03:3f:d9:b5:80:
ca:a9:10:af:20:9e:79:18:01:64:1e:42:85:5f:dc:
46:69:03:ae:3f:b9:c7:50:f0:62:00:c2:f1:32:78:
af:22:72:9f:f4:d5:60:69:a9:95:5c:05:93:f8:b7:
55:42:49:66:f4:0f:43:12:b3:0a:b3:cf:f1:37:38:
8a:c1:65:7e:84:c8:c1:3e:d6:47:31:ef:94:bc:59:
9f:fb:9e:1b:79:26:78:d0:6f:1e:24:f1:d5:c3:6f:
c3:e7:dd:40:5e:df:d8:e5:5a:2f:52:b2:7e:05:d9:
dc:ec:c7:b5:6f:35:37:6c:f1:6c:ef:2e:1a:03:8a:
5c:57:68:5f:a6:77:cd:ad:79:a0:d0:74:b7:85:8f:
8b:c4:b3:5b:b1:60:ef:5a:a6:f5:c4:75:a9:fd:c0:
a3:27:4e:71:ee:72:21:bd:a8:ff:40:cb:ed:13:78:
2a:ee:1e:da:84:10:b8:f5:da:62:30:72:bb:b8:a3:
7d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:45:EA:C7:19:49:B8:C4:21:4F:EE:53:78:AA:A7:6B:C4:D7:8E:8F
X509v3 Authority Key Identifier:
keyid:AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/006CE5442FBA11ECA05BB46EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.57.208.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:e9:30:1d:d5:28:fc:2f:00:90:b3:d3:05:1e:56:bd:4f:d5:
04:c4:5a:16:21:f8:c4:7c:df:01:48:99:59:07:e5:18:f6:f6:
45:0d:7d:ab:96:3c:06:72:8e:be:c4:0d:68:96:bf:bc:84:3a:
86:cd:bd:85:f2:aa:d9:63:f0:07:f4:24:78:08:1d:26:34:3e:
57:a5:9d:28:de:93:2d:db:8b:cf:23:da:a9:be:91:02:6b:f5:
e1:32:a7:95:93:51:4c:d0:1a:8c:f7:2e:11:54:6b:e1:bb:c4:
ce:75:21:52:77:99:a1:37:54:10:71:d8:80:10:f8:a7:62:25:
e0:e5:1c:35:e4:f3:66:73:cf:ba:0e:c9:8e:0d:89:61:bc:6c:
6f:bb:fb:4f:1e:81:73:88:4c:3b:e7:2d:85:5f:34:3a:4c:6d:
0d:d6:2b:78:43:ad:fe:d2:e0:3f:42:b3:f3:4c:4a:b7:cd:d3:
0f:24:77:7d:0c:91:0e:58:e3:34:34:c1:b2:32:38:f6:c9:4c:
b4:c2:85:ba:f7:6b:91:8e:9f:5a:2c:8b:2d:db:b4:98:57:6f:
11:ac:f3:69:1f:a5:50:c1:b2:7b:33:e3:2b:e1:f3:cb:7b:6d:
a1:5f:cc:cb:05:ce:50:e8:e7:7a:9d:a2:18:c9:1f:76:86:ff:
a2:57:c4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:21 2026 by rpki-client