
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/70C04006D5EF11EE8279357EC4F9AE02.roa
File: 70C04006D5EF11EE8279357EC4F9AE02.roa (raw, json)
Hash identifier: FMQ4cQsw3VD3QYGrAPTdPSBgnIKTRxDIrjgjXzARTlo=
Subject key identifier: 41:9F:39:E7:B1:CF:27:0A:BA:7D:9C:46:FA:19:82:6A:84:F0:A4:5F
Certificate issuer: /CN=A91EB929/serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2
Certificate serial: 01B4
Authority key identifier: A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/70C04006D5EF11EE8279357EC4F9AE02.roa
Signing time: Fri 29 May 2026 04:35:26 +0000
ROA not before: Fri 29 May 2026 04:35:26 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 24399
IP address blocks: 202.133.8.0/21 maxlen: 21
202.133.10.0/24 maxlen: 24
203.80.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl
rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:13:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436 (0x1b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB929, serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2
Validity
Not Before: May 29 04:35:26 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a19178e-13c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e2:ae:e1:55:5c:d7:ee:c8:03:4b:89:ef:91:
d2:59:07:87:83:65:59:c9:df:af:2c:81:34:4e:ba:
60:35:03:68:b6:76:80:91:42:2b:65:d3:bb:90:bc:
88:a4:64:d2:07:e4:44:e0:66:e2:12:52:c8:80:d3:
f7:be:fe:96:da:b3:34:07:94:65:1a:b7:8f:e5:d9:
a3:c9:b8:3b:fe:c8:5f:d7:80:de:1f:21:6b:e6:35:
f1:46:e4:83:13:f6:9a:67:a3:a7:14:2f:4e:04:30:
07:58:e1:54:76:b1:11:1d:6f:17:f3:60:49:47:a6:
74:4d:6f:01:80:5e:ee:22:b9:80:ac:b9:54:e5:09:
cf:b6:e0:d7:53:82:50:c7:a0:78:66:81:e4:e0:8e:
a1:25:c5:99:89:c8:f5:4b:21:75:ca:48:eb:43:8b:
f9:4c:a5:9d:bf:e6:c1:d7:45:13:de:c0:23:62:46:
a4:a7:a3:85:ba:f6:5a:42:0f:36:e1:37:65:bf:24:
81:df:8e:0d:af:80:b9:41:fe:51:19:53:b3:0c:0b:
33:a6:fe:93:30:a6:f6:21:31:cd:27:76:c9:7c:db:
00:d7:59:0e:61:2f:fa:3e:77:e2:b2:da:39:8d:55:
ae:72:56:a8:49:0b:b7:48:af:93:b7:68:a1:fb:5a:
fc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9F:39:E7:B1:CF:27:0A:BA:7D:9C:46:FA:19:82:6A:84:F0:A4:5F
X509v3 Authority Key Identifier:
keyid:A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/70C04006D5EF11EE8279357EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.133.8.0/21
203.80.184.0/22
Signature Algorithm: sha256WithRSAEncryption
96:fa:86:2c:58:c1:0f:d3:71:86:05:14:ed:dc:14:74:ab:39:
bb:5a:07:2c:7f:bf:48:0b:eb:63:55:d1:0f:fb:c4:e0:5d:45:
fc:06:ce:ed:b7:ec:fa:d9:c5:ef:27:d7:4a:01:3c:f3:89:b2:
f0:29:d3:b0:b2:5b:6b:f9:44:36:82:51:a2:a2:4f:d6:2d:12:
77:9c:3b:54:c5:70:6c:de:eb:e1:50:63:50:90:0f:6b:02:55:
3d:96:18:5a:cf:25:5a:77:20:68:92:7a:e2:66:b4:8c:87:34:
8d:9c:78:ec:d9:79:bf:67:b8:89:01:55:8c:87:94:6d:d1:3e:
94:22:b5:e4:14:01:5b:6e:46:3a:6c:5b:23:e1:40:a3:12:7e:
d9:c6:8f:a5:74:64:60:92:6e:05:53:67:64:dd:08:41:d2:93:
0c:a8:9e:f5:90:5b:31:ad:84:11:7a:17:59:5e:54:32:f1:6a:
cb:c9:51:9a:48:2f:ce:6c:42:a6:aa:30:56:57:cc:ef:35:54:
e9:d3:49:3c:d8:48:be:db:93:09:79:82:e5:1f:8e:5c:87:ac:
f1:d4:6e:07:87:48:e2:ba:e7:88:2b:45:a2:ed:66:8d:40:fe:
3f:35:21:17:67:98:04:2b:25:58:61:e0:55:50:43:b6:18:48:
b3:46:64:28
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUI5MjkxMTAvBgNVBAUTKEE5MjE0REI5OTE4NDlCMjlDNEYwNDVDMzM2NDcwRTlE
ODJDNDhDRTIwHhcNMjYwNTI5MDQzNTI2WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTE5MTc4ZS0xM2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxeKu4VVc1+7IA0uJ75HSWQeHg2VZyd+vLIE0TrpgNQNotnaAkUIrZdO7kLyI
pGTSB+RE4GbiElLIgNP3vv6W2rM0B5RlGreP5dmjybg7/shf14DeHyFr5jXxRuSD
E/aaZ6OnFC9OBDAHWOFUdrERHW8X82BJR6Z0TW8BgF7uIrmArLlU5QnPtuDXU4JQ
x6B4ZoHk4I6hJcWZicj1SyF1ykjrQ4v5TKWdv+bB10UT3sAjYkakp6OFuvZaQg82
4TdlvySB344Nr4C5Qf5RGVOzDAszpv6TMKb2ITHNJ3bJfNsA11kOYS/6Pnfisto5
jVWuclaoSQu3SK+Tt2ih+1r8rwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFEGfOeex
zycKun2cRvoZgmqE8KRfMB8GA1UdIwQYMBaAFKkhTbmRhJspxPBFwzZHDp2CxIzi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjkyOS9CRUJERUE5OEQ1
RUUxMUVFOUUyMDE3N0RDNEY5QUUwMi9xU0ZOdVpHRW15bkU4RVhETmtjT25ZTEVq
T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FTRk51WkdFbXluRThFWEROa2NPbllMRWpPSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUI5MjkvQkVCREVBOThENUVFMTFFRTlFMjAxNzdEQzRGOUFFMDIvNzBDMDQwMDZE
NUVGMTFFRTgyNzkzNTdFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQDyoUIAwQCy1C4MA0GCSqGSIb3DQEBCwUAA4IBAQCW+oYsWMEP03GG
BRTt3BR0qzm7Wgcsf79IC+tjVdEP+8TgXUX8Bs7tt+z62cXvJ9dKATzzibLwKdOw
sltr+UQ2glGiok/WLRJ3nDtUxXBs3uvhUGNQkA9rAlU9lhhazyVadyBoknriZrSM
hzSNnHjs2Xm/Z7iJAVWMh5Rt0T6UIrXkFAFbbkY6bFsj4UCjEn7Zxo+ldGRgkm4F
U2dk3QhB0pMMqJ71kFsxrYQRehdZXlQy8WrLyVGaSC/ObEKmqjBWV8zvNVTp00k8
2Ei+25MJeYLlH45ch6zx1G4Hh0jiuueIK0Wi7WaNQP4/NSEXZ5gEKyVYYeBVUEO2
GEizRmQo
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:00:31 2026 by rpki-client