
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/EA8DA454097911F1BBFDCBA0103D8C67.roa
File: EA8DA454097911F1BBFDCBA0103D8C67.roa (raw, json)
Hash identifier: 9KlD5ZdXpU0WbN+nbzIVTwIxijXxvXAqMFGWKtrDH+U=
Subject key identifier: B9:86:06:EE:75:20:83:32:85:B7:89:2A:26:6B:05:9B:1C:08:DC:C4
Certificate issuer: /CN=A91E8556/serialNumber=2FBEEC118B53613E1542F33FFC36118E562D472E
Certificate serial: 14
Authority key identifier: 2F:BE:EC:11:8B:53:61:3E:15:42:F3:3F:FC:36:11:8E:56:2D:47:2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/EA8DA454097911F1BBFDCBA0103D8C67.roa
Signing time: Mon 02 Mar 2026 13:49:40 +0000
ROA not before: Sat 14 Feb 2026 07:51:05 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 399461
IP address blocks: 43.252.56.0/22 maxlen: 24
103.233.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.crl
rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:10:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8556, serialNumber=2FBEEC118B53613E1542F33FFC36118E562D472E
Validity
Not Before: Feb 14 07:51:05 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a59574-c7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:af:ea:a7:83:70:c7:37:26:a4:94:ee:81:65:
ad:90:b6:7e:2a:57:a5:d4:90:dd:4b:70:be:af:c7:
06:84:71:ca:57:e8:3e:24:e6:93:29:95:bb:f8:e8:
c9:60:18:19:58:78:90:b3:0d:3c:f8:cc:a9:bb:34:
fa:7c:e2:f7:b9:d9:26:f8:36:47:84:05:d4:89:a4:
f3:15:93:e3:28:9d:45:af:55:a6:06:47:a0:11:06:
30:d6:79:46:3e:cb:3d:0f:72:7e:b9:b8:c8:a1:8d:
91:c2:33:8c:5b:2b:7d:69:34:0b:22:33:8c:9f:e7:
8e:a3:c1:8e:a4:66:c9:64:b2:af:4d:b3:1e:49:b1:
90:86:c5:39:be:c2:fa:b7:f4:e1:dc:8b:33:c6:86:
fe:30:d4:6e:d4:e8:a0:e0:ab:ff:c5:0b:5c:3d:8e:
ec:4c:61:5a:3e:9a:bc:e8:0a:bb:3f:97:0a:0b:0f:
91:82:1e:54:15:f4:20:03:65:ab:9f:ad:05:6f:3a:
ed:f4:d7:9f:68:88:a7:70:6f:2e:8c:20:aa:cc:8a:
90:d3:b7:fd:a8:ac:8c:f8:35:ce:7d:e5:b4:c1:8b:
e9:d1:a9:cb:6e:72:4c:a2:e9:b4:69:17:2f:c7:1c:
b6:cb:55:9a:b5:36:4f:3f:11:a0:3b:9d:8c:27:7a:
05:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:86:06:EE:75:20:83:32:85:B7:89:2A:26:6B:05:9B:1C:08:DC:C4
X509v3 Authority Key Identifier:
keyid:2F:BE:EC:11:8B:53:61:3E:15:42:F3:3F:FC:36:11:8E:56:2D:47:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/EA8DA454097911F1BBFDCBA0103D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
43.252.56.0/22
103.233.44.0/22
Signature Algorithm: sha256WithRSAEncryption
70:e5:c0:f1:83:c9:14:07:b4:0f:14:4c:1a:a0:72:50:c1:4b:
76:d5:d7:32:48:9a:0b:7b:69:01:ac:d0:3d:c7:7e:15:85:25:
4f:8a:19:ba:0b:20:69:d7:55:71:f9:4f:fc:46:99:c6:f2:b2:
c6:ae:62:bd:76:9b:b4:89:23:84:6e:c3:6a:2c:91:f3:db:09:
b1:b7:ea:e7:56:ea:e1:73:a8:b0:27:a6:5d:e4:8a:65:ee:3f:
0e:0a:5b:39:b3:02:eb:64:25:1c:b2:28:61:cc:73:7c:e4:cf:
96:35:e4:94:dd:68:5e:05:41:5d:c8:ab:c8:13:44:37:7f:88:
8b:11:8a:7d:66:c9:9a:9f:f6:da:5f:1a:75:4c:7e:27:af:25:
00:c9:48:07:f7:0b:ed:d1:b9:9e:b7:35:af:03:3d:75:ee:0b:
60:fb:2b:5e:c3:34:6b:c3:75:13:47:14:91:59:64:3a:a7:04:
ff:37:e5:1e:2c:c5:df:4e:91:9f:2b:33:69:7d:00:91:98:ce:
89:e9:e1:b7:59:30:5a:e6:f4:d4:be:7a:e7:8e:22:03:12:0b:
34:03:a8:21:de:ff:ea:2f:01:a7:77:cf:ba:98:49:40:de:4f:
43:c5:9a:9d:a0:6a:7f:e2:91:ed:b2:54:c9:40:e9:0a:a7:e4:
81:fb:ad:12
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
ODU1NjExMC8GA1UEBRMoMkZCRUVDMTE4QjUzNjEzRTE1NDJGMzNGRkMzNjExOEU1
NjJENDcyRTAeFw0yNjAyMTQwNzUxMDVaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTU5NTc0LWM3ZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCQr+qng3DHNyaklO6BZa2Qtn4qV6XUkN1LcL6vxwaEccpX6D4k5pMplbv46Mlg
GBlYeJCzDTz4zKm7NPp84ve52Sb4NkeEBdSJpPMVk+MonUWvVaYGR6ARBjDWeUY+
yz0Pcn65uMihjZHCM4xbK31pNAsiM4yf546jwY6kZslksq9Nsx5JsZCGxTm+wvq3
9OHcizPGhv4w1G7U6KDgq//FC1w9juxMYVo+mrzoCrs/lwoLD5GCHlQV9CADZauf
rQVvOu30159oiKdwby6MIKrMipDTt/2orIz4Nc595bTBi+nRqctuckyi6bRpFy/H
HLbLVZq1Nk8/EaA7nYwnegUlAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQUuYYG7nUg
gzKFt4kqJmsFmxwI3MQwHwYDVR0jBBgwFoAUL77sEYtTYT4VQvM//DYRjlYtRy4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4NTU2LzQyRTM3OEIyMDk2
MjExRjE4NTY4REFFNDBBM0Q4QzY3L0w3N3NFWXRUWVQ0VlF2TV9fRFlSamxZdFJ5
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTDc3c0VZdFRZVDRWUXZNX19EWVJqbFl0Unk0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODU1Ni80MkUzNzhCMjA5NjIxMUYxODU2OERBRTQwQTNEOEM2Ny9FQThEQTQ1NDA5
NzkxMUYxQkJGRENCQTAxMDNEOEM2Ny5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE
AgABMAwDBAIr/DgDBAJn6SwwDQYJKoZIhvcNAQELBQADggEBAHDlwPGDyRQHtA8U
TBqgclDBS3bV1zJImgt7aQGs0D3HfhWFJU+KGboLIGnXVXH5T/xGmcbyssauYr12
m7SJI4Ruw2oskfPbCbG36udW6uFzqLAnpl3kimXuPw4KWzmzAutkJRyyKGHMc3zk
z5Y15JTdaF4FQV3Iq8gTRDd/iIsRin1myZqf9tpfGnVMfievJQDJSAf3C+3RuZ63
Na8DPXXuC2D7K17DNGvDdRNHFJFZZDqnBP835R4sxd9OkZ8rM2l9AJGYzonp4bdZ
MFrm9NS+eueOIgMSCzQDqCHe/+ovAad3z7qYSUDeT0PFmp2gan/ike2yVMlA6Qqn
5IH7rRI=
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:23:30 2026 by rpki-client