
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/AC270A727D0711ED8181DA7FC4F9AE02.roa
File: AC270A727D0711ED8181DA7FC4F9AE02.roa (raw, json)
Hash identifier: pWPy+X5EuBSNslThAxl9vzV4QotLdBFyZSA0fVW7aaA=
Subject key identifier: BA:68:BD:DA:8C:39:CE:79:1E:60:BB:88:D3:EA:E7:98:B9:21:90:BF
Certificate issuer: /CN=A91E8F36/serialNumber=34D7D6D441C32D7C87142E9FE5C7EBC4F479B0CD
Certificate serial: 0271
Authority key identifier: 34:D7:D6:D4:41:C3:2D:7C:87:14:2E:9F:E5:C7:EB:C4:F4:79:B0:CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/AC270A727D0711ED8181DA7FC4F9AE02.roa
Signing time: Thu 19 Mar 2026 01:35:31 +0000
ROA not before: Thu 19 Mar 2026 01:35:31 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 136615
IP address blocks: 203.201.183.0/24 maxlen: 24
203.201.183.0/28 maxlen: 28
203.201.183.16/28 maxlen: 28
203.201.183.32/28 maxlen: 28
203.201.183.48/28 maxlen: 28
203.201.183.64/26 maxlen: 26
203.201.183.128/26 maxlen: 26
203.201.183.192/26 maxlen: 26
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl
rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 01:39:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 625 (0x271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8F36, serialNumber=34D7D6D441C32D7C87142E9FE5C7EBC4F479B0CD
Validity
Not Before: Mar 19 01:35:31 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69bb52e3-52c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c3:43:2e:2d:79:c2:aa:ce:03:69:0d:54:09:
e7:ab:5e:e1:36:02:67:1b:48:83:6a:a9:5d:fb:9c:
ea:40:71:a6:ce:9e:86:bb:99:75:37:85:ac:6a:36:
f3:19:be:34:ed:f7:2e:20:56:8f:00:1d:fe:4d:46:
fb:39:7e:d7:e5:22:3d:16:77:1a:87:7c:73:85:9c:
3e:c2:75:55:fd:11:5c:2c:43:ca:c2:37:21:0a:11:
dc:de:82:e4:46:d9:0e:27:cb:16:ed:f3:c5:ef:74:
ed:07:e9:ac:75:46:e2:38:50:d9:24:d5:d2:e7:f8:
58:0f:ed:e5:dc:b9:98:5d:72:69:f4:e7:b2:15:7a:
22:04:cc:27:2d:b1:c6:c7:21:50:c6:83:67:16:8d:
56:25:f6:e4:8f:9f:0a:4d:27:b6:24:7d:8b:41:b2:
ac:6a:3f:09:18:28:07:e6:d3:cc:b3:ec:bb:10:fc:
db:e7:66:5f:e7:0a:92:55:8b:c3:7b:b8:06:97:47:
df:38:11:6d:d1:81:69:28:ad:89:56:0d:c5:c1:64:
6b:ab:3f:38:6c:fc:96:b0:5a:74:6a:aa:61:68:98:
e1:80:f6:dd:70:6c:2a:80:ff:c6:ff:ff:32:cc:81:
0b:08:e8:d5:57:00:33:ff:3d:5b:d0:de:d6:cb:de:
b5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:68:BD:DA:8C:39:CE:79:1E:60:BB:88:D3:EA:E7:98:B9:21:90:BF
X509v3 Authority Key Identifier:
keyid:34:D7:D6:D4:41:C3:2D:7C:87:14:2E:9F:E5:C7:EB:C4:F4:79:B0:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/AC270A727D0711ED8181DA7FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.201.183.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:7b:b9:11:5f:fc:55:fb:28:16:fe:9c:2a:4c:7f:bd:7d:d7:
4e:2f:59:6d:68:74:b5:93:f9:e3:1d:88:91:76:d9:21:0f:7c:
70:19:bf:95:54:44:35:45:cd:f9:2a:b9:2f:57:50:a5:6d:77:
9e:e5:1f:5a:8f:dd:e0:55:e7:57:12:ee:7e:4f:6b:32:37:1f:
a7:89:74:e7:30:77:ad:62:83:17:4d:d6:9a:64:73:02:13:b7:
74:55:08:04:0d:84:96:c2:4b:63:50:a7:3e:a9:f7:b1:75:28:
cd:8a:aa:18:45:2e:33:f6:56:54:ad:b6:48:6f:6d:05:c1:a7:
1c:12:7c:4e:23:57:58:3e:82:c3:07:58:21:10:09:7c:0a:3a:
91:29:4b:6e:15:bd:6c:2d:14:95:c5:cd:18:53:9a:cb:15:f0:
25:17:67:3e:1e:ee:ee:06:90:29:a6:fe:28:47:a9:97:33:2e:
8c:73:fa:cf:e8:cc:27:3c:10:b7:f5:3f:1f:4e:64:e7:2f:d1:
a4:79:9b:3d:83:f3:3f:f4:bc:bc:4f:f2:d0:41:83:15:05:06:
11:98:eb:dd:5e:00:ab:3a:fc:e8:ee:ec:ce:9c:aa:92:8e:49:
84:b9:8d:0f:83:4b:d8:4c:3c:58:be:5c:6f:c7:15:c0:aa:f7:
4b:89:d5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:08:18 2026 by rpki-client