
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/C531DD12226F11EF8D24AD63C4F9AE02.roa
File: C531DD12226F11EF8D24AD63C4F9AE02.roa (raw, json)
Hash identifier: 4apUkb/9OAkWGMu7J3h8tdbWlfEZR8ZKAMbBcPjKoaU=
Subject key identifier: 48:47:EC:9B:84:FA:83:6E:D8:83:D4:16:BF:BF:02:91:82:FB:DB:F9
Certificate issuer: /CN=A91E4468/serialNumber=AFFCE637988165E6C51BFBFEBD1283D511240190
Certificate serial: 01D7
Authority key identifier: AF:FC:E6:37:98:81:65:E6:C5:1B:FB:FE:BD:12:83:D5:11:24:01:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/C531DD12226F11EF8D24AD63C4F9AE02.roa
Signing time: Mon 02 Mar 2026 05:06:16 +0000
ROA not before: Mon 29 Dec 2025 03:22:57 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 152149
IP address blocks: 210.79.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.crl
rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:15:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 471 (0x1d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4468, serialNumber=AFFCE637988165E6C51BFBFEBD1283D511240190
Validity
Not Before: Dec 29 03:22:57 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a51ac8-624a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3c:de:8c:2c:5c:be:db:d4:14:16:b9:a8:91:
4a:dc:85:8e:8f:47:60:36:3f:85:3a:77:a1:12:70:
18:06:46:03:e1:44:0d:ad:1b:e0:e7:cc:51:25:ea:
e4:81:28:a7:a9:96:56:ee:87:28:30:d2:41:d7:7a:
d4:8f:e7:5a:3d:60:c2:ef:2a:a8:65:37:a7:53:13:
92:f9:c8:63:af:68:33:e3:e1:b7:cc:a7:18:63:57:
ab:c8:f9:3c:5c:c6:58:ba:7a:4c:74:0e:e3:3c:09:
fa:5f:1e:f0:4e:50:0a:72:9c:89:ce:99:f3:3a:ee:
78:28:fe:4b:6d:26:34:82:ee:d2:3c:8e:9d:cd:1e:
81:0c:b2:96:09:e2:eb:93:a1:04:0f:a0:ff:3c:d5:
fc:6b:6e:a1:43:73:a7:30:f7:08:0f:0b:23:92:3e:
77:f6:ba:42:19:f6:01:ba:62:51:41:81:1b:a0:d9:
b6:dd:d8:bf:da:29:50:e3:5b:a0:cd:2c:6c:7c:ee:
b7:54:65:e4:78:2c:e8:ed:8e:29:e8:00:84:fb:3a:
22:2c:c0:a5:a0:43:6a:4d:9a:7d:4f:a4:2c:2d:87:
5f:3a:a4:ae:35:80:f7:d0:c4:8e:e3:b8:13:91:b8:
8c:e9:40:d1:5c:6d:18:c3:15:6a:68:f0:d4:89:5c:
bb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:47:EC:9B:84:FA:83:6E:D8:83:D4:16:BF:BF:02:91:82:FB:DB:F9
X509v3 Authority Key Identifier:
keyid:AF:FC:E6:37:98:81:65:E6:C5:1B:FB:FE:BD:12:83:D5:11:24:01:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/C531DD12226F11EF8D24AD63C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.79.180.0/24
Signature Algorithm: sha256WithRSAEncryption
30:7e:26:7b:95:ed:91:c1:cd:74:35:5c:93:75:47:05:14:5a:
65:f4:29:ac:59:7c:9f:a0:0b:99:2a:eb:fa:8e:d8:6d:c6:a7:
aa:45:e5:16:c3:51:62:d4:2e:3a:0c:49:1f:52:52:89:ad:91:
de:2b:23:42:6b:25:08:f4:9f:b0:ba:94:49:23:a2:2f:51:8b:
66:d8:eb:62:5e:de:a8:e8:3c:cb:22:4f:a6:3c:37:8f:cf:19:
24:87:ea:c7:aa:f1:89:eb:9c:2b:7b:08:61:04:02:ae:82:80:
48:78:c7:80:dc:de:01:b3:c2:32:ae:aa:79:9f:32:79:ad:cb:
a1:6d:35:1d:9a:bc:fc:be:60:bc:27:35:6c:2b:c6:78:4f:62:
7c:84:4a:7e:56:3c:3b:28:7c:a5:cb:3f:c6:dc:7b:01:35:64:
8d:1c:8d:68:fb:cf:85:e9:5b:57:04:69:ef:b0:da:25:2e:cf:
a6:eb:aa:36:98:24:2e:f2:93:0a:5e:38:55:e1:2d:87:d1:83:
43:d7:85:a2:9a:77:79:14:3c:28:ed:81:db:11:84:7d:52:f4:
54:7a:bf:36:8f:a4:7f:aa:19:77:5b:99:e1:94:db:79:e0:b5:
4b:e2:c9:a5:d1:3d:6d:1c:2a:11:04:b6:d7:e8:3b:a0:d9:b0:
6f:b2:aa:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:53:10 2026 by rpki-client