
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/63C8FE7A276D11F1856D09ECC3833773.roa
File: 63C8FE7A276D11F1856D09ECC3833773.roa (raw, json)
Hash identifier: +N8rEdDBNm2Ede84xuQaXFbGn8t9c41nF9epibXXQ5Q=
Subject key identifier: 62:5D:97:BB:00:47:F8:85:1F:64:C0:7E:DA:81:34:06:D9:12:72:9D
Certificate issuer: /CN=A91E8556/serialNumber=2FBEEC118B53613E1542F33FFC36118E562D472E
Certificate serial: 23
Authority key identifier: 2F:BE:EC:11:8B:53:61:3E:15:42:F3:3F:FC:36:11:8E:56:2D:47:2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/63C8FE7A276D11F1856D09ECC3833773.roa
Signing time: Tue 24 Mar 2026 10:37:01 +0000
ROA not before: Tue 24 Mar 2026 10:37:00 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 395222
IP address blocks: 114.119.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.crl
rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:10:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8556, serialNumber=2FBEEC118B53613E1542F33FFC36118E562D472E
Validity
Not Before: Mar 24 10:37:00 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69c2694c-2b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ce:82:0c:90:69:71:cd:50:50:5f:11:88:e5:
02:73:89:ef:f0:79:1e:11:a0:ee:85:6c:d4:aa:9a:
5d:da:de:96:fc:cd:83:be:78:a0:9e:e7:f5:fe:28:
2a:01:6c:4b:ed:4c:c9:36:ff:3f:fc:d2:d1:de:56:
aa:1c:99:61:ce:bf:a3:aa:ee:a8:16:6b:a5:27:39:
85:46:80:22:81:de:dc:52:fd:14:00:8c:a1:aa:30:
f5:b0:68:67:ed:91:05:46:c2:18:fe:fa:c4:e6:a6:
30:54:3d:ae:e9:5b:11:7b:0f:82:9e:63:4a:31:d0:
cd:f8:5e:f8:dd:36:a1:d1:1f:85:d9:5b:19:c8:06:
46:76:4f:be:52:ff:9d:71:d7:cd:6c:4c:d4:bd:c5:
be:ae:f3:68:1f:c3:07:20:9c:09:91:58:6b:e4:84:
ad:e7:20:1d:c4:98:e6:03:8c:9b:2a:74:9a:aa:b0:
65:b4:ec:ab:60:3b:e6:59:fd:c6:1e:8f:d0:9e:bd:
cb:9d:f8:bc:82:d7:ce:ae:6f:59:80:c7:63:00:99:
3b:0e:70:1f:c7:db:e9:55:25:c2:b6:98:54:e9:32:
c2:74:47:2f:af:db:bd:ce:be:81:db:35:59:88:a2:
97:28:2b:70:5b:83:0f:6e:57:39:c0:12:48:79:37:
78:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5D:97:BB:00:47:F8:85:1F:64:C0:7E:DA:81:34:06:D9:12:72:9D
X509v3 Authority Key Identifier:
keyid:2F:BE:EC:11:8B:53:61:3E:15:42:F3:3F:FC:36:11:8E:56:2D:47:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/63C8FE7A276D11F1856D09ECC3833773.roa
sbgp-ipAddrBlock: critical
IPv4:
114.119.196.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:9f:9b:41:32:e0:5e:f4:a1:67:75:22:47:74:14:11:1c:ae:
88:bd:2f:a5:3e:76:65:ac:4e:87:56:87:2e:72:39:52:3b:8b:
78:e1:57:a2:f4:3a:8c:41:98:29:1f:04:2f:c9:50:5a:d1:eb:
42:fa:db:df:52:33:0c:f1:f0:ab:a5:42:7e:7b:99:c7:d4:6f:
6e:13:7b:96:d1:0b:9d:df:ff:da:e2:5b:75:50:de:dd:ae:ac:
ff:37:21:b2:77:93:91:19:0c:54:e7:33:e7:f4:0f:3e:68:62:
b3:51:5f:1b:da:d1:eb:12:90:bd:07:bd:58:47:ad:75:60:49:
f4:d6:0e:cb:60:c7:f1:6a:ae:a4:1d:6a:5b:cf:b5:dc:bb:9e:
cb:1f:4a:44:dd:60:e3:93:a5:b2:da:61:ab:37:ce:e7:7a:2d:
80:ae:ee:d9:b1:b8:d0:9e:2f:30:6f:f9:08:21:d6:be:14:0a:
4a:dc:e9:45:1b:6d:69:97:88:51:cb:c9:44:25:a2:87:21:6e:
d1:ca:43:67:5e:8b:67:31:3a:62:3b:44:b7:4a:5c:96:ad:3b:
71:c6:51:b9:a3:fc:11:67:9a:69:19:44:89:f4:d9:e9:e3:88:
a2:80:35:67:bd:e2:19:2e:53:c8:2e:cd:4f:6d:bb:32:8c:74:
cf:7a:3a:ca
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
ODU1NjExMC8GA1UEBRMoMkZCRUVDMTE4QjUzNjEzRTE1NDJGMzNGRkMzNjExOEU1
NjJENDcyRTAeFw0yNjAzMjQxMDM3MDBaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YzI2OTRjLTJiNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5zoIMkGlxzVBQXxGI5QJzie/weR4RoO6FbNSqml3a3pb8zYO+eKCe5/X+KCoB
bEvtTMk2/z/80tHeVqocmWHOv6Oq7qgWa6UnOYVGgCKB3txS/RQAjKGqMPWwaGft
kQVGwhj++sTmpjBUPa7pWxF7D4KeY0ox0M34XvjdNqHRH4XZWxnIBkZ2T75S/51x
181sTNS9xb6u82gfwwcgnAmRWGvkhK3nIB3EmOYDjJsqdJqqsGW07KtgO+ZZ/cYe
j9Cevcud+LyC186ub1mAx2MAmTsOcB/H2+lVJcK2mFTpMsJ0Ry+v273OvoHbNVmI
opcoK3Bbgw9uVznAEkh5N3iRAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUYl2XuwBH
+IUfZMB+2oE0BtkScp0wHwYDVR0jBBgwFoAUL77sEYtTYT4VQvM//DYRjlYtRy4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4NTU2LzQyRTM3OEIyMDk2
MjExRjE4NTY4REFFNDBBM0Q4QzY3L0w3N3NFWXRUWVQ0VlF2TV9fRFlSamxZdFJ5
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTDc3c0VZdFRZVDRWUXZNX19EWVJqbFl0Unk0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODU1Ni80MkUzNzhCMjA5NjIxMUYxODU2OERBRTQwQTNEOEM2Ny82M0M4RkU3QTI3
NkQxMUYxODU2RDA5RUNDMzgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJyd8QwDQYJKoZIhvcNAQELBQADggEBAKqfm0Ey4F70oWd1Ikd0FBEc
roi9L6U+dmWsTodWhy5yOVI7i3jhV6L0OoxBmCkfBC/JUFrR60L6299SMwzx8Kul
Qn57mcfUb24Te5bRC53f/9riW3VQ3t2urP83IbJ3k5EZDFTnM+f0Dz5oYrNRXxva
0esSkL0HvVhHrXVgSfTWDstgx/FqrqQdalvPtdy7nssfSkTdYOOTpbLaYas3zud6
LYCu7tmxuNCeLzBv+Qgh1r4UCkrc6UUbbWmXiFHLyUQloochbtHKQ2dei2cxOmI7
RLdKXJatO3HGUbmj/BFnmmkZRIn02enjiKKANWe94hkuU8guzU9tuzKMdM96Oso=
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:23:01 2026 by rpki-client