
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/DA1BF46E91E611F08635E534C4F9AE02.roa
File: DA1BF46E91E611F08635E534C4F9AE02.roa (raw, json)
Hash identifier: nfkyb/Tz5NQlhNZsBNa0u6kXsTrtvohtVsYxwkzt5J4=
Subject key identifier: A9:99:AC:DE:EB:66:AD:82:78:3C:2D:1D:BA:EA:46:E6:9E:FD:27:9B
Certificate issuer: /CN=A91F300B/serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3
Certificate serial: 69
Authority key identifier: CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/DA1BF46E91E611F08635E534C4F9AE02.roa
Signing time: Mon 02 Mar 2026 15:02:48 +0000
ROA not before: Mon 15 Sep 2025 03:48:34 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 133770
IP address blocks: 122.50.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl
rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F300B, serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3
Validity
Not Before: Sep 15 03:48:34 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a5a698-931b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c3:83:ef:57:d8:5a:ef:7d:bb:29:37:48:ed:
c9:f3:35:78:cf:59:c2:ea:64:e3:4d:c9:16:61:f8:
c9:83:46:20:0a:a9:09:20:4f:3e:67:4b:ce:4f:48:
a9:14:0b:cf:55:a8:fa:cf:8e:2c:35:64:fc:48:8d:
9c:8d:e2:98:63:72:dd:70:11:7f:e7:c5:aa:8c:85:
e5:65:0e:10:d9:5e:be:68:77:8f:be:34:32:09:00:
a6:a7:f5:1f:5f:62:1f:c7:9a:a0:2b:27:fd:a4:ab:
03:fd:a0:67:1a:79:83:67:dd:03:75:5e:67:8e:a0:
7c:c7:5e:06:c6:7c:fc:51:7a:3b:f4:9e:10:20:6e:
52:1b:a8:53:14:93:50:ad:3e:58:a8:95:a4:bc:29:
d9:8e:0a:99:58:35:d1:b1:ad:c5:71:08:9e:ac:98:
c4:9c:c1:b8:08:94:ea:08:47:29:71:4e:c7:60:4f:
ad:7d:ed:66:8d:a4:70:2d:4a:28:d6:ad:2f:38:cd:
b9:9e:c2:f6:02:0c:52:e6:36:48:3c:19:99:4b:44:
9e:6c:ed:50:7d:57:d8:d1:e1:17:6d:4e:fc:74:46:
61:49:af:10:d0:4d:20:b8:60:48:23:8c:9b:16:30:
cf:f8:b3:96:f4:e5:e5:14:3e:59:ef:92:74:90:0b:
db:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:99:AC:DE:EB:66:AD:82:78:3C:2D:1D:BA:EA:46:E6:9E:FD:27:9B
X509v3 Authority Key Identifier:
keyid:CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/DA1BF46E91E611F08635E534C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
122.50.10.0/24
Signature Algorithm: sha256WithRSAEncryption
89:3b:dd:e7:20:8e:71:ae:f8:f1:99:d5:08:ac:e7:da:d0:0e:
68:98:15:5c:10:89:62:c6:26:11:f9:4b:31:b6:85:f6:d9:e7:
15:1b:2b:6f:3e:dd:26:74:a3:e9:23:34:a0:c5:6a:a9:f7:d8:
b3:3b:8f:d4:8e:fc:7a:26:5d:29:7d:3a:2e:c8:88:27:0c:80:
38:15:a8:b4:11:0c:80:a4:46:a7:bf:07:0a:04:4f:14:40:2c:
03:16:e6:02:e4:00:86:15:c0:2c:75:82:de:67:63:1a:97:bd:
7b:78:07:b5:5c:73:9a:fe:86:55:32:c1:59:71:9b:e8:40:6a:
d9:0e:73:e7:bf:4e:d7:0b:0f:aa:70:31:64:5c:e4:f0:c0:57:
8a:32:d0:d6:b9:00:96:6c:0d:d5:fc:ab:c8:0a:ab:e2:97:8e:
bd:30:2d:e0:0e:0e:a4:d0:e0:86:4a:4c:04:73:3a:1e:b4:6b:
35:99:92:4c:ca:cf:46:8a:cf:ce:47:46:da:9d:e2:ad:4f:aa:
50:3e:eb:8e:15:7d:66:03:ed:7c:b8:36:b9:95:9a:f3:11:d0:
8f:f7:d6:75:d0:8c:54:ef:5e:2c:cd:0c:f5:a3:ae:12:f7:7c:
dd:7d:e7:9f:b2:4d:bd:b2:da:ac:7e:a5:d3:2b:e4:26:f4:e1:
99:88:3e:ef
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:43:33 2026 by rpki-client