
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/9DE187FA2A8211F08575E277C4F9AE02.roa
File: 9DE187FA2A8211F08575E277C4F9AE02.roa (raw, json)
Hash identifier: 4eeNf5jC2Mk+3sdc5Wmsh3IL+6DgzipfF5IlQKuRXx0=
Subject key identifier: A3:8F:46:DA:4E:48:87:26:C7:D6:72:E1:28:E2:E5:27:9B:B6:D2:9C
Certificate issuer: /CN=A91EA449/serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661
Certificate serial: 0190
Authority key identifier: 6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/9DE187FA2A8211F08575E277C4F9AE02.roa
Signing time: Tue 05 May 2026 04:37:46 +0000
ROA not before: Tue 05 May 2026 04:37:46 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 203.21.95.0/24 maxlen: 24
203.27.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl
rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:38:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA449, serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661
Validity
Not Before: May 5 04:37:46 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69f9741a-92a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:17:5a:0b:7b:0b:61:e9:25:c1:08:58:65:a3:
52:b1:c7:df:84:05:bb:a6:db:b4:e4:60:ed:11:38:
da:b2:63:c0:7b:0e:9c:27:25:2b:2d:62:08:40:66:
e1:71:9a:3e:fa:b7:9d:08:08:5a:ed:d5:f0:33:77:
f0:a3:2b:53:b6:36:71:cb:5e:06:c2:c9:17:3d:c8:
1e:ad:51:ae:76:10:a6:fa:37:bd:82:b0:e8:a5:83:
a1:87:65:bd:f4:d6:a3:c3:1b:7d:20:94:36:f0:90:
5a:db:f3:7a:7f:a8:bd:7d:e0:09:85:bf:ef:49:9d:
fa:8f:12:50:32:fc:d5:df:51:b5:67:db:1c:76:6a:
7f:fb:d1:c9:cd:17:7d:b2:6a:af:18:4d:ac:5a:1c:
57:93:d0:1a:fd:ff:ca:5e:76:6c:1f:b5:4e:5f:67:
95:fd:80:62:01:79:fa:f1:30:aa:1b:ce:32:3c:77:
9c:02:3c:ee:1e:db:66:3d:d7:02:1c:5c:f2:7c:4c:
3e:7e:d9:38:2b:72:7d:27:3f:28:d7:9b:9c:7c:84:
8e:76:3a:22:59:5a:50:b0:b7:38:01:9a:95:07:f3:
ab:12:26:a9:67:90:96:71:04:2b:98:e4:4e:96:ef:
eb:33:49:a7:57:b1:b4:30:38:c2:94:da:9c:34:5f:
ed:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8F:46:DA:4E:48:87:26:C7:D6:72:E1:28:E2:E5:27:9B:B6:D2:9C
X509v3 Authority Key Identifier:
keyid:6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/9DE187FA2A8211F08575E277C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.21.95.0/24
203.27.70.0/24
Signature Algorithm: sha256WithRSAEncryption
48:ba:5e:6d:12:48:d0:21:b3:6b:fa:a6:aa:0e:f7:4e:c5:59:
41:e0:f7:fd:d0:0b:c8:9f:03:31:ce:cc:d5:0e:0d:fa:85:a6:
dd:aa:ce:70:d6:61:5a:4d:8b:cc:bd:b6:9a:a4:08:62:3b:e9:
4b:83:ac:99:72:c4:a7:7c:cc:48:e8:48:eb:d4:82:13:a3:20:
d2:c4:9e:52:bb:4a:a7:a5:01:56:36:4c:6c:96:2b:ac:d7:63:
7b:45:60:90:26:cb:4e:e4:c3:64:86:0e:99:86:21:19:7f:6a:
f8:91:a1:e8:e5:5f:5d:e8:45:8e:7f:2a:8d:db:b3:45:b0:ca:
5c:a5:8a:e0:60:df:e5:02:db:5c:70:6a:f8:10:06:48:46:93:
60:b0:1a:f9:08:b7:41:77:c0:0b:cd:ee:ce:07:99:2e:44:76:
f0:92:8c:36:09:ba:e3:f5:da:f2:69:fa:59:e7:76:c9:cf:10:
37:6f:6c:44:f9:2b:70:2a:dc:d0:33:3b:40:36:0d:c5:53:f1:
65:f4:f0:dd:1f:d5:31:11:81:9c:9d:d1:59:b7:30:c1:e5:db:
e5:1b:c8:3b:43:fc:e6:2c:79:04:3d:31:c2:62:3f:28:cb:f9:
3e:67:cc:bd:f0:7c:a1:e2:12:57:bd:86:a7:c7:44:54:10:50:
c7:c1:08:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:21:40 2026 by rpki-client