
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/047E1E9C341C11EE84F4D52CC4F9AE02.roa
File: 047E1E9C341C11EE84F4D52CC4F9AE02.roa (raw, json)
Hash identifier: EAtID2r50bcuRZVKtp+bEX8FvFjLB8tjThINGgwdwIA=
Subject key identifier: D2:52:1E:1B:93:A9:30:07:83:9A:F5:11:EA:77:14:E8:4B:5B:74:6B
Certificate issuer: /CN=A91ECE62/serialNumber=89027890033D5D623BD4E43986E880F6AB138494
Certificate serial: 020C
Authority key identifier: 89:02:78:90:03:3D:5D:62:3B:D4:E4:39:86:E8:80:F6:AB:13:84:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/047E1E9C341C11EE84F4D52CC4F9AE02.roa
Signing time: Tue 05 May 2026 03:34:20 +0000
ROA not before: Tue 05 May 2026 03:34:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 202.36.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.crl
rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 524 (0x20c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ECE62, serialNumber=89027890033D5D623BD4E43986E880F6AB138494
Validity
Not Before: May 5 03:34:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f9653c-588d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:90:b2:a1:95:0d:3f:48:60:48:95:75:8c:c2:
3c:cd:d0:67:9d:7d:da:53:69:70:f2:76:0f:e8:7e:
b1:f6:10:96:fc:e6:ed:b6:8a:4f:16:87:31:23:8d:
88:b4:9f:20:38:43:28:fe:df:d4:da:d9:88:8e:18:
df:4f:ba:fe:5f:79:fd:03:09:c8:cc:94:14:ee:aa:
e8:c0:18:d2:65:1d:4c:70:ab:cd:34:19:98:1b:e4:
8a:80:2b:b2:49:2e:ac:a6:f9:0b:b3:76:b5:35:56:
b8:a5:5f:94:ed:78:9b:62:bc:4f:9f:c1:f5:04:4c:
fa:7c:62:fc:28:c3:7d:b7:4a:79:c2:7e:77:fb:bb:
96:53:60:f3:f3:a3:60:97:d2:26:9a:97:51:e7:5c:
8b:b0:60:a0:d8:7e:a5:49:0d:64:49:0d:ec:e2:70:
eb:0f:09:2e:da:e8:34:20:10:15:24:e3:3a:ad:ea:
24:64:f4:0b:0b:2e:20:92:11:94:7d:56:35:b4:4d:
5c:5e:75:b0:00:ac:83:12:18:8f:b3:b1:99:97:05:
e7:db:0a:fe:ca:d9:43:0c:56:54:3f:19:a6:23:83:
05:fe:07:b9:67:34:f4:4d:44:d9:f3:34:77:5b:e9:
45:97:1c:30:7b:3b:8a:3f:f5:0b:c5:c9:5a:4e:dc:
24:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:52:1E:1B:93:A9:30:07:83:9A:F5:11:EA:77:14:E8:4B:5B:74:6B
X509v3 Authority Key Identifier:
keyid:89:02:78:90:03:3D:5D:62:3B:D4:E4:39:86:E8:80:F6:AB:13:84:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/047E1E9C341C11EE84F4D52CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.36.70.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:a5:c2:86:1d:6d:92:b1:a5:aa:19:0e:c7:0b:93:2b:d0:30:
74:e3:3a:2e:8c:5a:be:33:a1:62:d7:2e:40:8c:79:12:aa:f2:
2d:5f:26:96:6f:49:77:b6:82:1f:76:53:c8:65:9c:c7:c8:d5:
2e:3e:cf:c0:ca:5b:13:87:b3:8c:ad:fe:d1:ad:f5:fb:a5:ca:
97:d9:22:75:1e:a3:8c:c8:60:a9:c3:93:5f:dc:26:83:4a:46:
c2:d3:bd:23:cb:fe:48:e4:f6:96:7b:42:64:c8:43:b7:9f:a0:
00:5a:8d:cb:e5:62:e2:dd:77:29:f0:e8:fa:e0:81:f7:43:39:
fb:bb:33:14:3f:1d:1a:a2:4f:ec:c9:97:4c:8b:c6:dc:40:e6:
08:26:dd:e5:51:35:9b:0c:25:1d:06:8f:67:e7:28:eb:46:27:
99:77:79:a1:ea:38:08:59:5e:d7:e1:75:a8:dc:7a:a8:db:1d:
48:3b:3b:2f:e3:bb:35:59:91:82:4e:b4:92:11:18:fc:02:8b:
5f:d3:f3:88:5d:6c:19:d8:83:f6:30:88:35:b3:04:17:f5:6a:
76:97:42:c4:e0:84:0a:08:2f:af:72:bb:2c:4e:07:ad:a8:bb:
72:65:f1:b2:7b:e7:d1:b1:36:9e:e5:55:34:fc:d1:a0:73:a2:
e3:e8:9a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:37 2026 by rpki-client