
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/0BD593E6136D11F09F542C81C4F9AE02.roa
File: 0BD593E6136D11F09F542C81C4F9AE02.roa (raw, json)
Hash identifier: vDtAe0YTSyL7kgoQAACefENkKxeqw/YNxKaiQNIECVo=
Subject key identifier: BE:38:C4:8A:82:8E:09:5B:18:56:17:DD:68:BC:EB:9E:8A:7D:B0:5B
Certificate issuer: /CN=A91F3B5F/serialNumber=9496B1FC6063644372398CEA338B8224259175CB
Certificate serial: BC
Authority key identifier: 94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/0BD593E6136D11F09F542C81C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:21:03 +0000
ROA not before: Sun 09 Nov 2025 04:51:57 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 153526
IP address blocks: 203.77.168.0/21 maxlen: 21
2401:e9a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl
rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3B5F, serialNumber=9496B1FC6063644372398CEA338B8224259175CB
Validity
Not Before: Nov 9 04:51:57 2025 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a58ebe-e152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9e:81:da:61:73:ba:81:d4:fd:e3:98:68:b2:
d0:77:35:dd:74:0e:82:05:be:fa:fe:72:3d:d7:f3:
5d:35:86:61:42:fd:bb:50:72:42:f6:9e:a7:f2:96:
a0:3c:8c:9a:fb:6b:80:5e:92:a1:07:a1:82:08:2d:
ca:83:09:8b:04:f2:7b:89:66:42:b8:bc:aa:6f:d5:
b8:20:fc:b5:16:5f:01:c2:ea:a1:d5:cf:9f:8d:b5:
e4:24:24:d7:44:55:2f:13:a5:05:2a:c8:cd:7a:aa:
4b:ce:f2:2c:dd:a8:59:36:a4:92:18:dd:09:8a:2a:
b6:3f:6d:fb:bd:24:d0:29:47:80:36:84:85:38:16:
02:e1:82:d7:21:64:14:e0:bc:99:63:37:b8:f6:56:
99:8b:bb:c6:f3:79:66:40:22:ac:51:e4:22:4f:b5:
63:b3:6b:48:a7:29:03:c9:ba:fb:1f:1e:1e:0e:9a:
e3:83:15:fc:00:b3:74:a8:28:03:c4:0f:ee:a3:6a:
a0:38:c9:44:d8:c7:45:88:63:12:9d:0c:6f:e9:aa:
17:ab:eb:ec:47:5f:7a:0d:74:dc:8c:08:85:87:19:
41:a3:c6:a8:df:ab:1f:ef:3d:58:dd:de:ab:66:83:
ba:6e:dd:72:a3:ab:be:6a:c8:5c:88:a0:eb:d2:6e:
74:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:38:C4:8A:82:8E:09:5B:18:56:17:DD:68:BC:EB:9E:8A:7D:B0:5B
X509v3 Authority Key Identifier:
keyid:94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/0BD593E6136D11F09F542C81C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.77.168.0/21
IPv6:
2401:e9a0::/32
Signature Algorithm: sha256WithRSAEncryption
6b:5b:26:f5:0f:be:d4:1d:5d:a1:a9:f2:38:8b:71:88:37:6e:
6b:5e:4e:86:19:43:98:7b:fe:21:3b:35:bf:a3:7c:dd:37:60:
0c:11:58:d7:fc:3f:39:4c:ca:ff:9c:f3:b1:33:63:b9:8b:8f:
6d:2c:d4:aa:0f:32:af:d3:d1:3f:1d:a9:9b:49:79:31:2e:31:
f3:0c:25:61:09:33:01:55:9e:44:09:fb:33:91:91:53:7d:e4:
01:66:a3:c5:c4:40:89:fc:03:88:de:bf:d4:43:cb:2a:e7:37:
2d:71:dc:8c:94:11:4e:99:e8:c2:1c:18:5f:55:42:16:fb:29:
50:21:1e:8c:50:89:85:82:bc:53:fd:3a:4b:18:00:37:f6:34:
ce:99:3b:cf:24:6e:6c:5f:4d:94:7b:67:56:66:94:f6:7f:46:
d3:df:c6:33:76:0c:b5:21:6c:60:0c:a1:01:bb:5a:be:7b:c9:
ae:09:d6:f6:9d:9f:07:dd:e1:d8:57:a8:04:68:d5:ca:e3:29:
b8:c6:cf:11:42:4a:2a:23:d1:31:31:6b:ad:12:26:70:c2:51:
5e:b2:eb:a1:7b:5a:a2:19:57:dd:c3:13:48:47:2d:bc:90:f1:
b7:d9:55:d7:5f:af:02:96:0f:d8:2a:b5:db:04:8c:99:a3:a0:
0a:6f:e9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:04:28 2026 by rpki-client