
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/5E967DEE1ED711EDBD936A15C4F9AE02.roa
File: 5E967DEE1ED711EDBD936A15C4F9AE02.roa (raw, json)
Hash identifier: EGdleIb96T/dyNjtpTIecOYDwXkp3tZlJT2oSvIkBZ8=
Subject key identifier: 85:B7:81:1B:00:11:9C:B4:8B:93:19:F0:DE:09:4A:2F:01:F2:E8:EF
Certificate issuer: /CN=A91F33A5/serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622
Certificate serial: 042E
Authority key identifier: C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/5E967DEE1ED711EDBD936A15C4F9AE02.roa
Signing time: Wed 09 Sep 2026 00:50:50 +0000
ROA not before: Wed 09 Sep 2026 00:50:50 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 7575
IP address blocks: 203.6.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl
rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 00:13:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1070 (0x42e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F33A5, serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622
Validity
Not Before: Sep 9 00:50:50 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aa0ad69-649d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:47:c6:a7:ff:e4:74:44:23:c5:67:e6:97:e9:
e8:02:00:50:5f:35:35:5d:f8:55:c9:24:e6:3f:f6:
fc:76:ba:53:2e:50:9b:ff:5f:1a:b6:37:3d:d4:56:
41:88:ea:61:fd:99:ea:a3:cb:b8:7d:0d:f0:ca:43:
2c:ae:4a:2b:c5:3f:56:f2:3a:c6:66:7a:9c:8c:04:
ef:71:55:e4:95:b7:87:d3:43:ba:c7:11:21:71:80:
0b:a0:13:77:a2:f9:03:a8:15:c7:b6:2c:71:4f:68:
d4:e6:18:be:f6:d2:f7:2d:96:0a:49:77:b2:48:15:
bc:9c:a8:35:0c:8f:a0:ca:4b:53:fc:d9:96:dd:01:
b6:48:eb:da:49:d2:21:f9:37:79:d0:ec:e3:98:77:
2e:de:c9:d7:81:a8:2a:1f:7d:f3:5b:32:8f:44:80:
8a:78:d4:d7:e6:37:ac:ca:19:46:b0:5c:8a:7f:77:
a8:8d:cb:20:3d:1e:30:14:fc:2b:8e:14:23:b4:3f:
4e:b1:2b:66:d6:69:c9:cd:ab:3e:b1:1b:53:d1:7d:
22:29:23:fd:83:23:01:0f:f9:b1:b6:de:7b:2b:3f:
0d:e4:66:64:f1:95:70:25:cd:bc:fc:30:66:af:25:
da:a6:51:33:9d:af:06:c5:b6:48:84:f4:ab:3e:63:
b0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B7:81:1B:00:11:9C:B4:8B:93:19:F0:DE:09:4A:2F:01:F2:E8:EF
X509v3 Authority Key Identifier:
keyid:C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/5E967DEE1ED711EDBD936A15C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.6.255.0/24
Signature Algorithm: sha256WithRSAEncryption
11:e0:2e:8f:37:0a:89:cd:c2:6e:62:b2:b0:89:ae:1b:65:60:
36:39:aa:85:51:c0:d5:71:6f:47:d3:c3:02:e7:1c:12:77:e6:
f3:13:ab:b5:85:60:34:e2:92:20:83:60:ef:82:02:84:11:5e:
18:e8:06:8a:9a:a2:f3:e3:64:94:7d:ce:c9:cc:1e:83:9c:9a:
c5:c2:22:20:10:36:79:46:ed:e3:8a:ad:ea:5a:c3:93:a6:2b:
f9:9c:40:24:6f:c0:dd:f1:33:07:52:c1:45:84:e4:41:4e:cc:
b8:a0:4c:12:d2:cf:4b:e8:2a:82:dd:97:7c:0a:a2:a8:6a:74:
60:e0:22:2a:4a:3a:b9:31:23:06:65:65:fe:6f:60:76:77:26:
7d:f3:b9:82:8b:82:f6:21:e3:3d:91:aa:78:80:e6:4f:a8:eb:
dc:b0:42:18:4b:1e:cc:28:de:ff:97:ff:cf:9d:84:b8:69:0b:
1e:58:a8:a3:32:94:21:47:5c:8a:51:02:33:09:a0:eb:0d:fc:
3d:ce:ed:a3:b6:83:e7:aa:22:59:49:18:53:9e:5c:68:17:e9:
06:9d:35:6d:58:4c:29:3f:bb:84:1f:b5:09:49:d8:c0:6e:9c:
63:81:63:0a:a2:f5:37:2d:ab:de:d5:be:2c:9d:4c:a1:36:ff:
02:6b:e9:39
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjMzQTUxMTAvBgNVBAUTKEM0RjYzOEMwOUUzNzIwNDZDMDFERjQ2MDRDMjgxMTY0
RjZBQzE2MjIwHhcNMjYwOTA5MDA1MDUwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWEwYWQ2OS02NDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAukfGp//kdEQjxWfml+noAgBQXzU1XfhVySTmP/b8drpTLlCb/18atjc91FZB
iOph/Znqo8u4fQ3wykMsrkorxT9W8jrGZnqcjATvcVXklbeH00O6xxEhcYALoBN3
ovkDqBXHtixxT2jU5hi+9tL3LZYKSXeySBW8nKg1DI+gyktT/NmW3QG2SOvaSdIh
+Td50OzjmHcu3snXgagqH33zWzKPRICKeNTX5jesyhlGsFyKf3eojcsgPR4wFPwr
jhQjtD9OsStm1mnJzas+sRtT0X0iKSP9gyMBD/mxtt57Kz8N5GZk8ZVwJc28/DBm
ryXaplEzna8GxbZIhPSrPmOwVQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIW3gRsA
EZy0i5MZ8N4JSi8B8ujvMB8GA1UdIwQYMBaAFMT2OMCeNyBGwB30YEwoEWT2rBYi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xQzBFNzA2QUQ0
RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lFYkFIZlJnVENnUlpQYXNG
aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hQWTR3SjQzSUViQUhmUmdUQ2dSWlBhc0ZpSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjMzQTUvMUMwRTcwNkFENEQ4MTFFQ0E0MjQ1RjEwQzRGOUFFMDIvNUU5NjdERUUx
RUQ3MTFFREJEOTM2QTE1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAywb/MA0GCSqGSIb3DQEBCwUAA4IBAQAR4C6PNwqJzcJuYrKwia4b
ZWA2OaqFUcDVcW9H08MC5xwSd+bzE6u1hWA04pIgg2DvggKEEV4Y6AaKmqLz42SU
fc7JzB6DnJrFwiIgEDZ5Ru3jiq3qWsOTpiv5nEAkb8Dd8TMHUsFFhORBTsy4oEwS
0s9L6CqC3Zd8CqKoanRg4CIqSjq5MSMGZWX+b2B2dyZ987mCi4L2IeM9kap4gOZP
qOvcsEIYSx7MKN7/l//PnYS4aQseWKijMpQhR1yKUQIzCaDrDfw9zu2jtoPnqiJZ
SRhTnlxoF+kGnTVtWEwpP7uEH7UJSdjAbpxjgWMKovU3Lave1b4snUyhNv8Ca+k5
-----END CERTIFICATE-----
Generated at Sat Sep 26 00:20:35 2026 by rpki-client