
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/9DA63F546D2811F09647053BC4F9AE02.roa
File: 9DA63F546D2811F09647053BC4F9AE02.roa (raw, json)
Hash identifier: RqF3cRBG8AaHKTEnB008C+GD7GzGFEY6SVWZ6TQ/56s=
Subject key identifier: E8:AA:A6:2B:E9:3C:89:B8:B3:0E:A3:B2:DC:77:95:AB:FB:0B:8E:E5
Certificate issuer: /CN=A91EB6AC/serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A
Certificate serial: 0C8F
Authority key identifier: CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/9DA63F546D2811F09647053BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:29:21 +0000
ROA not before: Mon 12 Jan 2026 18:15:34 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 134186
IP address blocks: 123.253.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl
rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3215 (0xc8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB6AC, serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A
Validity
Not Before: Jan 12 18:15:34 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a46961-bc27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:14:db:da:7a:b5:a5:b2:6e:46:12:b2:17:ee:
3b:bb:fd:38:82:bd:77:ab:07:1c:71:1b:90:67:70:
21:0c:29:d8:1f:28:c2:a9:59:cc:20:8e:e2:d9:03:
82:62:25:bf:cb:c7:ed:c1:c7:37:ce:10:65:18:20:
84:6b:14:2a:36:1c:6a:51:61:7a:62:2c:f9:d7:8d:
8e:b9:9f:e8:2e:bc:0e:b4:34:c0:e7:92:0c:92:2a:
7a:7c:88:c0:49:5b:55:b1:ac:13:ec:c3:4f:34:5b:
94:d6:3e:cd:46:92:48:dc:50:3a:86:0b:dd:1b:9d:
8c:98:34:4c:3e:e0:cb:37:c1:22:8c:b2:4f:0a:fe:
ff:56:30:42:06:fe:7f:ea:30:2e:c2:1a:a7:52:76:
2b:19:2f:b4:46:1f:34:67:20:ab:b9:b6:9f:cd:d1:
9a:40:f3:ab:12:9c:50:43:7d:29:18:46:a2:55:fb:
41:bb:67:34:5d:35:f9:85:ff:f5:c6:f1:41:36:34:
23:ab:7f:04:31:e7:7c:99:a6:c4:01:c0:ee:8e:d0:
50:f4:38:ec:17:47:ff:c7:14:c1:31:82:61:16:69:
d2:ff:f6:04:a0:9c:d2:9c:1f:11:24:ae:5d:19:c7:
18:f7:59:3f:bc:7e:5f:6d:ae:dd:65:6f:36:b2:45:
23:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AA:A6:2B:E9:3C:89:B8:B3:0E:A3:B2:DC:77:95:AB:FB:0B:8E:E5
X509v3 Authority Key Identifier:
keyid:CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/9DA63F546D2811F09647053BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
123.253.223.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:17:56:fa:e5:84:69:c1:d0:6a:c4:96:43:47:37:9e:75:04:
fc:e4:82:ac:62:0c:14:2e:6d:39:13:4d:97:ac:02:6b:fd:a8:
6a:b1:5d:46:54:11:6c:81:2b:d0:30:19:f9:57:4c:9e:75:08:
39:f6:6c:96:6e:0d:c4:75:0c:35:65:97:df:d2:e2:74:e3:59:
4e:fb:16:d2:c8:41:32:8c:02:92:45:ec:f3:a6:84:1c:30:c8:
98:10:79:54:4f:7e:fa:df:97:4a:63:f9:b5:02:f9:96:bb:d9:
9c:6e:0d:5e:c8:e0:eb:79:f3:4e:d8:f5:10:09:2c:aa:06:d5:
61:10:6c:e2:c1:db:fa:27:ea:ce:2c:e1:e3:78:72:e9:f6:c5:
d8:d5:79:cb:e6:36:8b:9b:a9:f6:87:5b:7f:e5:3e:32:92:ee:
44:e1:f7:41:37:60:ac:12:68:2e:3d:f9:03:8e:7d:c6:04:44:
a7:c1:88:ff:ff:d4:c4:b6:f3:cf:5d:29:2e:fb:67:cc:da:53:
af:58:fb:ab:91:27:f1:1a:a6:fe:fd:7c:a8:98:e7:ec:6b:61:
b5:80:56:ee:43:41:83:ec:a3:29:3a:9e:46:b0:7b:96:fd:09:
ab:ce:48:48:e1:c1:ea:27:a9:48:c0:77:68:1f:d5:76:bc:b0:
0b:58:a7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:12:37 2026 by rpki-client