
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5DA/CB0B70B0706811F1B4A3E8BF73A30FBC/E2C181D2707111F1B7FB9D3F77A30FBC.roa
File: E2C181D2707111F1B7FB9D3F77A30FBC.roa (raw, json)
Hash identifier: xSJ4aIOrc6x+QwiP0rZxv5INu2KqemCI5ZONBKN16C8=
Subject key identifier: 09:D6:CC:86:2F:41:77:E8:25:9F:99:73:BF:6F:54:C9:01:B2:3E:24
Certificate issuer: /CN=A91FF5DA/serialNumber=EB1203E6903813B30DF91B4C6979525DCB630815
Certificate serial: 13
Authority key identifier: EB:12:03:E6:90:38:13:B3:0D:F9:1B:4C:69:79:52:5D:CB:63:08:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xID5pA4E7MN-RtMaXlSXctjCBU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5DA/CB0B70B0706811F1B4A3E8BF73A30FBC/E2C181D2707111F1B7FB9D3F77A30FBC.roa
Signing time: Thu 23 Jul 2026 11:35:55 +0000
ROA not before: Thu 23 Jul 2026 11:35:55 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 154575
IP address blocks: 203.34.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF5DA/CB0B70B0706811F1B4A3E8BF73A30FBC/6xID5pA4E7MN-RtMaXlSXctjCBU.crl
rsync://rpki.apnic.net/member_repository/A91FF5DA/CB0B70B0706811F1B4A3E8BF73A30FBC/6xID5pA4E7MN-RtMaXlSXctjCBU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xID5pA4E7MN-RtMaXlSXctjCBU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF5DA, serialNumber=EB1203E6903813B30DF91B4C6979525DCB630815
Validity
Not Before: Jul 23 11:35:55 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a61fc9b-4e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3e:e1:43:b5:c6:55:79:90:00:95:11:f1:90:
29:50:0f:ee:1f:87:d1:29:f3:65:70:f2:8e:12:42:
f3:93:6a:1b:79:ab:9d:72:13:73:95:da:47:76:df:
0e:db:b9:65:6a:52:89:a1:5b:40:0f:d4:24:1b:b6:
ce:1a:5e:14:88:16:dc:1c:60:ac:54:b8:c4:7c:d7:
71:b9:de:7a:79:a7:9d:91:78:4f:39:f7:e6:87:83:
10:46:47:73:32:d0:d1:3a:99:6c:25:42:92:9a:0a:
7c:2a:5e:22:ca:2e:71:30:1a:20:2b:b7:58:ef:c5:
de:21:6e:cb:86:47:23:a8:36:c6:a1:f9:7e:7c:79:
f7:e3:1e:7a:60:54:9f:e2:f6:fe:fa:72:a3:5b:d2:
d7:c3:a8:d1:9f:9c:97:a4:43:f4:98:1a:4a:90:dd:
fe:0e:66:26:0f:6f:aa:ab:4c:2a:07:7b:92:73:cb:
16:62:11:4e:00:c5:c1:5e:61:72:8b:7c:ff:66:22:
f9:d4:7a:54:36:bd:e5:83:a7:85:72:e5:40:1d:c1:
c5:b3:49:21:cc:89:08:71:5a:99:31:4b:e7:3f:67:
9f:3f:e9:c1:70:86:48:38:e7:3f:1a:47:a5:6c:7a:
fb:1c:28:94:7d:d3:1c:c2:78:43:02:6c:5a:23:62:
db:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D6:CC:86:2F:41:77:E8:25:9F:99:73:BF:6F:54:C9:01:B2:3E:24
X509v3 Authority Key Identifier:
keyid:EB:12:03:E6:90:38:13:B3:0D:F9:1B:4C:69:79:52:5D:CB:63:08:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF5DA/CB0B70B0706811F1B4A3E8BF73A30FBC/6xID5pA4E7MN-RtMaXlSXctjCBU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xID5pA4E7MN-RtMaXlSXctjCBU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5DA/CB0B70B0706811F1B4A3E8BF73A30FBC/E2C181D2707111F1B7FB9D3F77A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
203.34.220.0/23
Signature Algorithm: sha256WithRSAEncryption
61:72:38:c2:e7:73:57:71:7d:00:b4:b6:82:42:57:75:ee:f6:
cc:f0:c2:8e:c7:f1:5e:a8:c0:2a:e2:10:a4:1a:ce:f1:fe:9e:
2b:71:a1:1b:69:94:6d:ce:fb:5a:ab:e2:36:85:17:f9:10:a6:
d2:ab:79:3a:ba:dc:c2:07:27:39:4b:fa:41:7c:eb:c0:40:20:
8f:5a:2b:03:10:c9:14:e8:ec:fb:72:8d:43:86:38:83:83:85:
5e:cb:fb:ee:e8:b7:e7:39:1e:49:b0:fd:ab:06:63:37:d3:7b:
40:b7:a0:81:ea:2a:80:3a:6b:e2:96:be:fb:30:4c:34:21:eb:
47:49:d6:b9:b7:52:17:d7:de:90:f1:60:3f:fd:62:69:0b:8e:
7b:35:31:0d:81:23:76:d0:31:b2:61:b0:8e:28:34:53:08:b9:
91:b8:66:cf:80:70:70:58:7d:48:ea:8a:9d:55:92:1a:6b:22:
ef:d2:8d:06:d7:63:cc:87:48:38:86:2d:a0:cf:34:4a:28:62:
6f:65:d2:09:1d:e8:4b:5a:2e:81:23:8f:eb:bb:f7:48:5e:c2:
4f:85:f8:3e:5c:d6:09:1e:6e:be:12:7f:2b:fc:23:d0:72:76:
de:0a:eb:c5:d7:ec:aa:e3:3a:d3:e0:ed:d2:d9:56:50:96:05:
56:34:44:00
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:29:51 2026 by rpki-client