
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/C8BD376C3ADF11EC85EB255FC4F9AE02.roa
File: C8BD376C3ADF11EC85EB255FC4F9AE02.roa (raw, json)
Hash identifier: Hp4zWKni3ZG5s7a7I6JrXD6v+vCWtd+NXlSrK9iVhUQ=
Subject key identifier: BB:7E:F7:EA:5B:7A:C4:09:EE:9F:B4:E2:5D:4C:6E:EE:E6:E2:DA:36
Certificate issuer: /CN=A91E27B9/serialNumber=BADB699FA02A9572E6EF49F4F91A1FE0A73C2C8D
Certificate serial: 089B
Authority key identifier: BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/C8BD376C3ADF11EC85EB255FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:22:05 +0000
ROA not before: Mon 08 Dec 2025 20:01:14 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 24321
IP address blocks: 202.73.8.0/22 maxlen: 22
202.87.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.crl
rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 20:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2203 (0x89b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E27B9, serialNumber=BADB699FA02A9572E6EF49F4F91A1FE0A73C2C8D
Validity
Not Before: Dec 8 20:01:14 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a42f6d-febf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b0:8e:3d:e9:77:88:d3:c6:6b:56:0d:72:32:
ee:ab:cf:bd:97:24:3e:5a:39:a8:35:4e:07:ba:55:
ec:84:b3:9b:c2:2c:b6:71:b2:f1:0c:7b:87:9b:5f:
a8:70:9a:39:01:cf:34:99:5e:63:0c:c0:1f:c7:b8:
55:6d:d9:89:00:f8:3d:32:ca:64:22:db:67:22:38:
bd:16:6a:b0:05:c1:dc:81:2f:07:19:17:1f:4b:e1:
05:cd:bd:00:57:9a:4b:96:2e:f0:ab:48:66:53:9b:
eb:d4:53:11:94:78:45:37:c7:fb:b4:8d:bb:58:6c:
0b:ab:62:83:c6:f3:92:10:99:14:80:0c:0e:bf:ff:
96:1d:e0:0d:35:5f:0b:0b:c4:bd:14:2f:56:94:9e:
49:9f:4c:ee:91:45:1d:c6:d3:14:9d:bc:72:ca:8b:
13:5d:d7:c1:2b:8e:d0:77:23:f8:4c:91:b0:c7:4f:
6e:7c:1a:1b:1f:89:01:8c:69:bf:dd:0f:f7:cd:e0:
90:d7:14:8d:d9:86:e9:9d:70:76:af:9f:56:d6:86:
8a:51:b1:c6:28:95:da:d3:21:ae:7b:e7:87:4a:e6:
9e:b6:20:cf:54:11:ca:4c:2a:88:c7:79:9e:f4:63:
aa:01:6f:b4:8b:75:d3:76:e2:d4:b6:84:2a:ee:a9:
09:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7E:F7:EA:5B:7A:C4:09:EE:9F:B4:E2:5D:4C:6E:EE:E6:E2:DA:36
X509v3 Authority Key Identifier:
keyid:BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/C8BD376C3ADF11EC85EB255FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.73.8.0/22
202.87.216.0/22
Signature Algorithm: sha256WithRSAEncryption
63:23:49:20:e8:ef:17:7a:8c:38:d3:f5:d3:61:cd:07:92:d6:
ae:45:97:92:90:9f:59:f9:6d:1e:0c:3e:09:d2:7b:1f:6a:f6:
aa:e4:34:9f:eb:1e:b4:fa:3f:28:fa:f8:e3:47:86:8d:8e:5a:
da:a7:92:d6:5d:1e:36:9b:cc:58:40:db:dd:97:af:89:18:06:
c1:81:ac:b9:3a:e6:d8:18:42:7d:e2:e0:d1:11:8d:a0:16:59:
c0:d3:c1:f5:9e:f1:b1:ec:9e:b2:a1:57:1d:20:f7:28:58:f7:
9a:04:2a:b8:bd:8b:50:11:7c:1e:9f:55:13:b9:93:0b:a4:ba:
0e:81:1a:00:ca:f7:e0:64:a2:5e:27:fa:ce:9f:dd:1a:0a:d7:
c8:9f:5c:9a:92:b1:fa:ed:2a:9a:73:04:85:61:e1:c5:d7:29:
23:7a:ca:04:d8:3d:8d:92:62:2b:f7:95:ab:f6:e7:5e:bc:23:
6c:77:8e:c5:82:97:1d:26:ee:ec:28:4b:c0:7b:3f:12:8a:58:
92:ff:28:e2:82:74:40:80:7b:d5:b4:ed:db:c7:a5:fe:16:a6:
8d:d7:91:73:e8:f4:b5:ae:72:d1:59:2e:44:ba:27:49:cc:16:
eb:5c:67:1d:17:ab:00:a4:e9:b3:c4:00:fe:c1:df:cf:61:86:
85:6d:fc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:09:07 2026 by rpki-client