
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/0FBF57D2F16611EEB75BE640C4F9AE02.roa
File: 0FBF57D2F16611EEB75BE640C4F9AE02.roa (raw, json)
Hash identifier: cs0XXfBuh/azVaZsG4BADKeGQ7mBKcl8emhLzIxBwKs=
Subject key identifier: 40:55:FA:47:CD:F8:E1:31:E1:15:3A:03:F4:61:7B:6B:A9:82:7F:E3
Certificate issuer: /CN=A91F89A2/serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3
Certificate serial: 0186
Authority key identifier: 6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/0FBF57D2F16611EEB75BE640C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:50:21 +0000
ROA not before: Thu 17 Apr 2025 04:41:21 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 150746
IP address blocks: 202.9.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl
rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:39:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390 (0x186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F89A2, serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3
Validity
Not Before: Apr 17 04:41:21 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a5a3ad-3c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:7b:33:a4:73:44:20:bc:24:06:c9:08:f4:
15:f5:f5:de:c6:75:d2:fc:d5:a5:72:ea:bd:53:03:
89:b1:3f:71:63:3c:42:d4:f5:cc:bb:1e:9d:19:4b:
24:25:c7:4a:93:8a:91:c3:37:9a:ec:c0:36:d9:15:
37:41:08:16:fd:02:fb:1e:85:ae:84:0c:8b:ec:8e:
22:2b:12:4e:89:93:95:c2:3b:f3:6a:7f:3c:04:eb:
71:15:0f:2d:97:da:66:27:dd:bd:8b:94:cf:48:a3:
e9:39:c1:3a:ec:1e:a0:98:9c:7e:13:72:cb:ff:8c:
dc:9d:6d:ac:09:95:2e:33:f2:6c:af:29:12:17:17:
85:2f:a3:83:df:52:33:5c:98:3b:d2:b3:7d:5c:c0:
06:fb:fb:b7:5a:79:fd:60:1f:8f:f5:91:bb:53:36:
ed:85:e1:28:11:73:3f:08:96:be:de:2c:b8:34:ce:
1f:db:0d:1b:af:71:99:62:ef:6a:8c:54:d2:5a:bc:
35:a8:53:a1:c1:37:9e:96:43:b9:e0:d1:59:ea:e5:
8f:be:88:76:54:ef:30:4f:63:9c:47:7f:e9:7c:d3:
d7:37:22:58:08:a6:f3:ff:c6:f3:8e:3e:88:87:90:
c0:9e:e3:b8:bf:4c:c6:12:cf:62:9c:7f:e2:3c:7d:
55:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:55:FA:47:CD:F8:E1:31:E1:15:3A:03:F4:61:7B:6B:A9:82:7F:E3
X509v3 Authority Key Identifier:
keyid:6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/0FBF57D2F16611EEB75BE640C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.9.83.0/24
Signature Algorithm: sha256WithRSAEncryption
31:ea:d6:c7:2a:a0:69:46:ac:a3:0a:f0:1f:00:06:ae:c4:45:
a2:98:34:2e:41:46:85:17:88:80:b8:70:c2:ff:b0:32:ae:e0:
2e:7c:9e:17:39:1a:22:f3:12:25:eb:25:1d:73:e6:e2:77:3e:
09:11:b2:f6:0e:c5:ce:5e:89:95:9f:83:64:eb:c7:fa:8d:c3:
0d:4c:9e:a6:27:b8:3c:5f:8a:44:45:b0:e8:1f:29:b3:a0:e8:
4e:2b:e5:5b:ae:ff:a4:a4:08:2e:5f:63:a8:62:48:ad:80:bb:
e9:57:36:a6:8f:b9:fa:59:5d:2c:35:c9:c4:2e:a8:ab:a9:90:
90:3e:6d:c0:d1:11:a2:29:c4:3d:b0:9d:26:b4:cb:4b:68:79:
60:2d:9b:c4:17:7a:11:cd:dd:61:66:b9:8c:1b:a9:88:72:3d:
39:96:ac:ff:65:4c:9a:10:41:18:fb:39:10:e2:ca:58:99:67:
67:cf:18:06:21:d3:46:74:a6:7f:07:aa:9d:34:1b:c8:7b:df:
1a:e4:49:6b:94:9e:f0:23:2d:b2:15:39:10:0c:6e:10:a9:84:
71:f1:de:17:5c:7f:3c:dc:f6:c9:25:f5:69:74:58:10:db:54:
ab:dc:b3:1c:6e:7d:97:b0:d3:cb:7e:4f:74:c2:4c:92:f7:07:
cc:9b:2b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:31:32 2026 by rpki-client