
$ rpki-client -vvf rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/E7BD97EE5D9311F0AFF08443C4F9AE02.roa
File: E7BD97EE5D9311F0AFF08443C4F9AE02.roa (raw, json)
Hash identifier: wMqZyUHwFnm2prR30bhRvxTQaRsk2FAxurhzAGgKS+I=
Subject key identifier: 23:8B:FD:2B:CE:8D:72:B8:F6:F3:8C:18:0D:63:60:A2:EF:10:AB:C0
Certificate issuer: /CN=A91174ED/serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D
Certificate serial: 88
Authority key identifier: D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/E7BD97EE5D9311F0AFF08443C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:33:14 +0000
ROA not before: Thu 29 Jan 2026 06:28:57 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 58929
IP address blocks: 202.14.145.0/24 maxlen: 24
203.4.149.0/24 maxlen: 24
203.33.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl
rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:05:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91174ED, serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D
Validity
Not Before: Jan 29 06:28:57 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a4401a-3963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d8:c8:3b:6b:d3:58:c9:2c:f1:4e:7d:4d:e5:
62:6c:ad:3d:f8:8a:f7:51:82:89:09:f0:3c:a8:32:
19:e2:40:54:ce:b0:b0:d7:23:2b:02:f0:7a:ed:81:
0c:61:13:4f:64:95:00:7e:ca:65:9e:75:19:e6:ef:
c2:01:f0:ef:88:25:30:07:e8:3d:50:0a:8b:e1:46:
b9:f1:0c:9c:a0:38:a5:6f:0c:e5:5d:63:45:2b:24:
aa:bd:4c:87:1d:9a:7a:df:77:33:7f:7c:5f:81:61:
b5:4e:dd:98:d8:5d:9a:da:a7:7b:91:09:03:f3:e4:
fb:f0:02:2c:2f:b2:af:3a:9b:5f:70:a7:14:49:48:
84:8e:82:89:a8:61:b0:9b:0a:3c:25:21:2b:f1:07:
3e:14:ba:ea:33:df:ea:fe:b8:7a:49:3c:88:b0:49:
5f:d8:bd:13:ee:fb:88:a2:b2:84:31:19:11:87:62:
24:18:55:c1:09:3e:2f:a6:44:12:fb:8e:54:75:83:
97:2c:a7:9c:c0:5a:4d:7d:44:2a:5d:a3:92:f9:c1:
6b:45:50:3d:d4:d8:e9:c6:77:b6:3d:9a:74:53:5e:
23:2e:93:1e:ee:33:59:6c:5e:09:1d:55:9a:ee:61:
f2:e9:d1:33:2c:28:b2:a5:a1:f6:56:f1:c8:a9:12:
2d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8B:FD:2B:CE:8D:72:B8:F6:F3:8C:18:0D:63:60:A2:EF:10:AB:C0
X509v3 Authority Key Identifier:
keyid:D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/E7BD97EE5D9311F0AFF08443C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.14.145.0/24
203.4.149.0/24
203.33.136.0/22
Signature Algorithm: sha256WithRSAEncryption
98:20:84:22:24:6c:35:54:c4:d6:d8:4b:f5:1c:1b:91:7c:92:
bf:3a:b3:9e:e4:92:e0:9b:01:e7:7e:1c:6f:3b:7e:6b:5a:47:
a2:d7:1d:b6:37:6b:c1:8d:a4:a2:59:6b:7f:18:85:a1:d7:22:
09:b0:58:74:ef:c9:e9:0a:4e:f7:a9:1a:f9:c7:86:22:53:f4:
e8:56:6d:80:3c:0a:95:75:d0:fb:6d:d2:b9:2b:76:89:38:b6:
9b:38:6b:a4:72:8f:31:01:2f:79:a2:84:c4:ca:e4:39:7d:55:
85:c5:07:2a:c1:d7:c0:5c:e6:bf:35:60:52:19:42:94:30:38:
b4:68:f2:0f:70:9a:1d:10:08:a7:08:6f:2e:6e:99:eb:78:52:
66:c2:15:49:28:1f:80:66:ff:b0:62:64:ba:e3:b7:f0:f6:4e:
62:0b:1a:af:ed:4e:c2:33:51:98:2a:33:ac:7a:aa:4d:b5:36:
7f:2b:6e:5b:f8:9a:6e:89:db:b9:9b:f4:a3:e5:14:34:4c:5a:
23:53:7d:f4:22:33:5d:de:da:96:a3:88:01:08:ed:16:ca:7a:
68:fd:51:15:26:81:31:58:d7:b1:54:29:c3:60:99:1e:10:6e:
e6:c6:9f:b1:50:3d:a9:fe:be:8b:01:1f:92:23:09:09:ac:64:
72:b3:4b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:26 2026 by rpki-client