
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/EB75D8C4FDE111ED848B004CC4F9AE02.roa
File: EB75D8C4FDE111ED848B004CC4F9AE02.roa (raw, json)
Hash identifier: mVpGi+39/Ahcjv+ekq0PpEG9jvYwKXVC4QVppE2Htr8=
Subject key identifier: 44:C6:78:72:FC:F0:20:9A:77:04:A0:05:18:D8:E8:F3:43:CB:BA:CA
Certificate issuer: /CN=A91DD5EC/serialNumber=26B2C8462FEA1DA514166B5B1390AD0CC277A5A8
Certificate serial: 0213
Authority key identifier: 26:B2:C8:46:2F:EA:1D:A5:14:16:6B:5B:13:90:AD:0C:C2:77:A5:A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/EB75D8C4FDE111ED848B004CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:00:38 +0000
ROA not before: Tue 11 Nov 2025 01:18:17 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 24324
IP address blocks: 202.50.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl
rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 531 (0x213)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD5EC, serialNumber=26B2C8462FEA1DA514166B5B1390AD0CC277A5A8
Validity
Not Before: Nov 11 01:18:17 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a43875-c0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:9a:c5:cd:69:7c:42:da:f2:c3:72:91:51:
a0:18:f4:2e:d5:52:55:bf:62:09:70:a0:db:ae:87:
89:6e:65:cd:45:c3:af:8e:5c:7f:06:b9:2a:cf:32:
2a:fa:a2:0a:be:0c:d4:74:89:92:04:09:d5:e0:80:
2a:c1:37:e6:55:93:01:bb:22:71:49:b0:88:93:34:
d0:60:22:3f:fd:36:5f:60:7c:20:9f:6c:73:56:cd:
1a:74:74:e9:df:06:84:fa:fa:50:12:2a:0a:9b:3b:
5c:ad:1d:05:c6:0c:54:38:dc:de:7c:ac:c2:16:8b:
f8:71:f4:b3:db:fc:c3:a3:70:77:84:0b:27:73:2c:
01:11:c1:6b:09:1b:52:b9:9a:c8:1e:09:3a:72:7d:
4e:3d:de:9c:c7:d8:92:cb:6c:a4:c2:de:2e:36:06:
24:5d:a2:9d:6e:59:b9:ef:86:b3:3f:88:cb:bc:e0:
60:99:a7:27:d3:b6:e5:f9:4f:e6:45:fc:85:3d:84:
57:dd:11:c9:a3:de:58:41:25:21:2a:8b:e8:e3:d5:
95:ef:78:8a:07:02:72:a2:de:27:77:dc:88:f2:82:
1d:bb:50:ca:6e:f2:30:0c:10:67:4c:83:b7:90:e7:
f1:3a:57:ba:0e:9b:28:17:9b:4a:86:e7:5a:c9:a9:
e2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C6:78:72:FC:F0:20:9A:77:04:A0:05:18:D8:E8:F3:43:CB:BA:CA
X509v3 Authority Key Identifier:
keyid:26:B2:C8:46:2F:EA:1D:A5:14:16:6B:5B:13:90:AD:0C:C2:77:A5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/EB75D8C4FDE111ED848B004CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.50.117.0/24
Signature Algorithm: sha256WithRSAEncryption
10:cc:6b:c7:f6:8c:a9:27:1e:5d:ff:45:87:98:e4:91:e1:ca:
5a:58:07:9e:eb:fa:9b:14:db:1f:cc:9b:1a:ec:4c:54:3d:4c:
9d:04:85:98:bc:f7:74:bc:0c:ea:da:66:3b:21:2b:29:f5:1d:
7e:d8:e2:bb:00:75:93:94:d1:a9:c1:5f:69:29:d2:bb:d4:85:
db:da:29:e7:f3:07:47:7e:f5:a8:a4:6a:ea:62:2d:0e:20:30:
9b:fc:8f:d8:15:b0:2f:80:ed:a1:61:bc:f6:60:e1:c6:90:ce:
c7:9a:a8:92:39:75:4b:39:e8:b3:57:dc:c7:fb:38:37:be:bf:
e7:c0:f6:f6:80:25:58:f0:08:4e:a8:d2:d3:e4:09:44:4c:13:
54:de:5a:6c:4e:8e:3e:16:df:8f:23:cf:2b:a2:c7:6c:52:32:
25:d9:65:db:f8:0f:70:83:3a:55:51:4d:a9:4b:3e:e4:85:1c:
d2:07:8a:25:59:43:e1:3b:69:2b:aa:c3:a8:8a:a4:62:fa:ee:
29:e9:ac:c6:a6:70:f3:c5:49:3d:84:ad:93:11:d8:f6:82:96:
ad:24:d1:c9:66:cf:49:f9:06:5d:8b:49:59:9a:8a:38:38:88:
27:88:9e:ee:a8:f1:ed:94:70:71:99:75:7b:57:27:94:5f:27:
b9:2a:60:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:54 2026 by rpki-client