
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/63431654B73A11F18F9E52DC3611F970.roa
File: 63431654B73A11F18F9E52DC3611F970.roa (raw, json)
Hash identifier: zQToCKMkCH+Ue9bdpwcAjHmRe6PevdkW4fIAKKbpgGk=
Subject key identifier: F8:45:0E:4B:C5:0F:68:ED:C5:CC:7A:BB:5D:6C:44:B7:7F:9B:B0:23
Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial: 1A5A
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/63431654B73A11F18F9E52DC3611F970.roa
Signing time: Wed 23 Sep 2026 10:34:43 +0000
ROA not before: Wed 23 Sep 2026 10:34:43 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 10113
IP address blocks: 202.62.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 16:49:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6746 (0x1a5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Validity
Not Before: Sep 23 10:34:43 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6ab3ab43-ea13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:25:bb:17:dc:b8:18:c8:22:00:20:88:8e:
e5:4d:cd:27:67:dd:af:93:86:cc:51:cc:44:bf:8a:
52:4c:f2:5d:f0:83:b7:b6:ad:82:89:aa:e7:67:7b:
b7:11:b2:fa:a5:00:36:db:29:64:97:c5:20:8f:b3:
e4:ac:b2:46:7e:90:90:a5:d2:cd:90:0e:44:83:80:
7f:72:c6:c8:9c:2f:fb:2d:27:ae:dc:de:44:65:f9:
92:38:80:eb:19:9a:7c:9e:24:46:79:54:65:3d:2a:
b3:21:bd:0b:37:2e:04:b3:9a:70:ef:9b:8a:af:63:
52:7b:7e:b0:3a:fa:30:fb:08:76:70:2f:32:c6:82:
57:a4:8b:e5:8f:10:ef:4d:1f:d7:f2:42:7a:5f:e2:
d0:4f:95:64:33:23:cd:90:29:7e:aa:50:a9:77:40:
3a:e5:5f:60:3f:c0:62:98:57:4d:49:b7:47:b8:97:
b1:57:a7:5b:22:f2:88:bf:72:92:46:7c:3e:72:2c:
88:c1:8f:9b:8b:29:fa:e1:5e:2c:ed:74:7d:97:e2:
f6:1d:07:12:74:f3:13:e3:8d:cd:7d:66:cf:bf:a1:
34:3b:19:85:c5:3f:74:d5:07:d0:5d:e6:4d:95:18:
cd:10:b6:3e:3f:94:d8:a1:1d:53:bf:5c:7a:c0:e4:
66:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:45:0E:4B:C5:0F:68:ED:C5:CC:7A:BB:5D:6C:44:B7:7F:9B:B0:23
X509v3 Authority Key Identifier:
keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/63431654B73A11F18F9E52DC3611F970.roa
sbgp-ipAddrBlock: critical
IPv4:
202.62.144.0/24
Signature Algorithm: sha256WithRSAEncryption
31:42:db:4e:f7:83:7f:40:36:95:49:b2:4c:66:df:09:a4:c3:
3a:fb:2e:ce:91:23:96:05:3c:34:f6:0f:d4:f2:04:d4:b1:b4:
27:7e:ee:9d:62:ff:70:06:7a:eb:7a:13:4e:13:50:12:e3:79:
7b:9c:70:aa:10:f4:de:b3:92:98:05:ed:85:e6:62:a4:c0:4d:
67:f3:33:4c:ec:3a:10:b5:50:ec:a9:e7:6b:4e:1f:46:97:3a:
1e:cf:0a:54:c9:84:53:ad:e6:ad:3d:84:a4:af:c4:40:09:3a:
f6:7c:0d:1a:2b:91:ce:c5:6d:80:9f:24:7e:fa:bf:ed:63:aa:
be:1a:db:fe:96:87:a1:30:3b:14:5a:42:b0:10:b4:48:2c:9a:
12:26:e5:28:a4:03:60:1c:d9:81:9c:19:72:d2:5e:68:03:92:
ce:85:cb:fe:5b:29:9a:48:e7:0d:2d:69:bc:72:98:6c:d8:ff:
1d:47:4c:2b:be:7d:c8:da:01:e4:3e:75:0e:fa:1d:9d:0e:55:
93:e8:d8:3b:92:36:bb:fb:58:98:e9:cb:9e:0f:0f:0f:e8:1e:
ea:ce:31:9e:86:b2:69:e4:c3:59:b3:0d:c2:80:d5:f6:92:98:
2e:65:5d:14:c1:0b:86:82:5a:bd:ce:15:7e:0d:b1:66:88:b0:
63:52:ae:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:16:20 2026 by rpki-client