
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/75125118FE5F11F0956342DD516F56BC.roa
File: 75125118FE5F11F0956342DD516F56BC.roa (raw, json)
Hash identifier: Whh/5V1YlqO85bcjOHvfWe0PcIZNVRDICOUqC1FzhpY=
Subject key identifier: 9E:2C:97:8D:95:0E:EA:AE:67:B7:79:EF:5B:DA:BB:7C:05:24:81:8C
Certificate issuer: /CN=A91F5972/serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B
Certificate serial: 0624
Authority key identifier: AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/75125118FE5F11F0956342DD516F56BC.roa
Signing time: Sun 01 Mar 2026 18:44:48 +0000
ROA not before: Mon 09 Feb 2026 01:38:45 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 10031
IP address blocks: 202.170.72.0/24 maxlen: 24
202.170.73.0/24 maxlen: 24
202.170.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl
rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 22:44:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1572 (0x624)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5972, serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B
Validity
Not Before: Feb 9 01:38:45 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a48920-4dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:88:da:ce:3e:a7:c4:0a:78:58:ec:7a:d1:23:
61:11:d1:ea:ea:9d:b2:e7:4e:aa:f8:ef:f5:bf:fd:
3f:71:15:c0:f1:26:d1:db:96:aa:d1:07:f4:8c:88:
e8:51:dd:bd:79:e6:2d:46:87:26:8c:11:46:db:de:
75:14:cd:d8:68:f2:5c:9b:63:cd:e2:d7:df:56:09:
1d:41:11:f8:36:65:0a:4b:75:23:4e:f9:e8:d1:3e:
f1:cc:97:74:20:c3:16:2d:aa:9f:34:c0:10:07:85:
11:52:87:38:01:28:51:13:c2:2a:d8:e8:26:60:d7:
77:ef:92:9f:9a:fa:15:65:d2:cc:68:56:d4:50:ba:
19:db:c0:3f:ff:a9:01:1a:8d:75:75:5a:8e:b8:11:
50:04:ef:a1:9a:17:4e:31:99:2a:8f:e1:69:ec:79:
61:2d:b1:92:85:fa:06:b1:73:a8:18:d9:e8:69:08:
d2:dc:3c:85:f0:7a:87:ad:01:f0:1e:e7:c2:7e:52:
fa:6f:4f:96:54:2d:43:18:d1:4c:b9:c5:92:11:52:
33:34:33:17:b2:68:f7:c2:da:56:ec:71:21:31:f1:
93:1d:f1:8e:30:14:cc:c3:7b:de:cf:98:a9:07:1c:
a1:38:d9:52:a6:df:75:7f:15:28:76:39:f0:03:20:
63:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2C:97:8D:95:0E:EA:AE:67:B7:79:EF:5B:DA:BB:7C:05:24:81:8C
X509v3 Authority Key Identifier:
keyid:AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/75125118FE5F11F0956342DD516F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
202.170.72.0/23
202.170.76.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:e8:0e:39:6c:e5:10:d9:46:75:7a:7a:6b:26:36:84:67:91:
34:87:bc:db:32:ef:97:33:d8:47:51:e2:c2:a5:34:3e:ca:16:
6c:69:f1:6f:aa:f1:21:bd:95:5d:e1:cd:fe:22:2d:a6:ac:a8:
c5:74:8d:54:9d:fd:a9:6e:41:bc:c3:be:bc:a2:e9:eb:2b:91:
53:d9:58:ac:16:9c:22:8c:93:00:d1:43:65:73:27:6c:95:16:
7f:4e:33:f4:36:da:6a:47:cd:88:5a:bd:c3:1b:cb:ff:3c:52:
8a:2a:9b:9a:39:a2:91:a9:67:e2:0d:7a:36:da:0c:2c:66:4d:
83:a7:a7:dc:6d:4f:a9:cf:8c:23:74:67:e4:1e:b6:9f:32:50:
1c:8f:75:b0:50:12:bb:ab:7d:b1:b1:3d:f9:f5:47:f5:1c:ab:
5e:b2:11:eb:97:35:45:81:2d:21:52:c3:f4:c2:50:11:b2:5c:
5d:c1:d6:a5:d6:36:8f:30:10:57:e0:5e:92:c6:fa:c1:1a:05:
16:ed:60:a2:42:18:7e:c2:42:4d:7e:5a:4c:5e:6d:44:3e:d6:
51:2f:40:96:9e:75:fa:a6:72:5e:2a:28:e8:de:c3:74:93:5d:
03:89:53:d1:21:0f:2d:bb:bc:26:c2:c4:03:d2:6a:1b:14:29:
98:7c:09:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:53:35 2026 by rpki-client