
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/05BF31A412A111F19F0D7733B3EE528E.roa
File: 05BF31A412A111F19F0D7733B3EE528E.roa (raw, json)
Hash identifier: PgaNKuOiI6tu8kD9qhYNDbqdddbHaFNoXX9+BgYUOfI=
Subject key identifier: 9D:AB:87:5B:3B:7C:4F:25:43:C1:96:0A:C0:2B:F6:04:4B:1D:48:C4
Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial: 389E
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/05BF31A412A111F19F0D7733B3EE528E.roa
Signing time: Wed 30 Sep 2026 15:10:43 +0000
ROA not before: Wed 30 Sep 2026 15:10:43 +0000
ROA not after: Sat 30 Jan 2027 00:00:00 +0000
asID: 4608
IP address blocks: 203.30.127.0/24 maxlen: 24
2001:df2:ee00::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 14:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14494 (0x389e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Validity
Not Before: Sep 30 15:10:43 2026 GMT
Not After : Jan 30 00:00:00 2027 GMT
Subject: CN=6abd2673-ddcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ad:a8:fa:1d:5b:ab:79:ad:25:35:12:39:0b:
9e:60:0f:5b:2c:d7:d9:81:ff:38:47:e2:82:84:b5:
bf:53:12:fc:11:8c:cd:e6:58:d4:6f:47:39:fd:35:
b3:36:ed:47:12:f1:38:cd:8e:55:fa:f2:1a:5b:cb:
25:35:47:89:2b:cd:32:23:f6:a5:e5:8b:73:41:c6:
75:f0:65:3f:8d:71:14:b7:f2:49:02:65:d4:27:66:
64:e3:b5:6f:e3:ef:1a:ce:f7:ed:d6:67:b8:3f:67:
66:1f:3b:cd:59:ab:76:17:1b:c7:28:58:48:75:d3:
23:07:4e:a3:19:9d:13:df:88:83:2b:c1:a3:bb:30:
4e:37:48:0f:a4:14:46:11:47:bc:36:a7:bd:b9:92:
f2:ac:49:73:87:b3:61:77:54:f8:92:51:fb:1b:3e:
2b:99:c2:21:71:f6:c4:c6:b6:3e:85:b2:47:b4:d0:
3a:a3:ec:6e:36:57:a3:19:15:e2:fe:cb:5f:c6:37:
c4:a3:be:9b:e6:ea:b7:7d:94:21:76:fc:8d:f3:58:
c8:66:e5:96:f1:f4:0b:79:88:ce:f5:1d:49:cb:6b:
30:de:92:6c:96:a8:93:c8:5b:16:19:82:e9:89:2e:
27:11:5a:a5:bb:0d:c4:aa:81:19:49:62:60:44:ba:
74:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AB:87:5B:3B:7C:4F:25:43:C1:96:0A:C0:2B:F6:04:4B:1D:48:C4
X509v3 Authority Key Identifier:
keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/05BF31A412A111F19F0D7733B3EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
203.30.127.0/24
IPv6:
2001:df2:ee00::/47
Signature Algorithm: sha256WithRSAEncryption
47:b1:83:fb:0c:60:da:99:0c:6c:2d:ab:17:d5:7f:6e:aa:dd:
2c:32:73:ad:67:52:84:87:4e:39:94:30:60:16:fc:68:fb:e9:
fa:8f:c1:07:f9:d5:db:b6:0f:b5:5c:98:c8:78:53:5f:2a:c9:
3f:9e:a5:85:9b:65:f1:1f:1a:d4:c2:b4:b2:5d:64:12:ef:35:
0c:f6:26:95:55:f8:1e:9f:ee:1d:f5:18:26:94:5b:aa:16:35:
28:fe:99:58:e7:7a:7c:d5:de:21:95:2f:dd:d0:cb:cf:0b:95:
b0:37:44:66:5a:ed:3c:d7:65:7f:e0:3c:b6:63:39:47:ef:b4:
50:82:86:6f:d5:08:03:8c:f6:f0:d3:ce:b7:2e:6e:28:8b:fd:
6f:11:f5:e5:5d:58:12:84:9b:e1:d5:44:e7:90:c9:33:f6:08:
3b:94:67:21:f9:6e:33:d9:79:f4:66:54:ba:83:2b:ad:f0:0c:
a9:37:49:bf:72:95:03:49:d8:e9:c0:d4:09:53:96:a2:e1:35:
ed:5b:40:4f:20:d9:00:ec:e1:d2:05:13:8d:4b:11:aa:25:29:
6c:18:b9:40:ca:af:72:51:95:4f:da:40:79:e7:3c:fa:af:dd:
1e:cc:6a:2b:1c:44:aa:d6:f7:15:78:3a:42:24:bb:9f:67:ff:
06:51:cb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:44:37 2026 by rpki-client