
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91332FE/16991816D83811F184FD0F743266CEF9/F55EDF36D83811F196330F2A3366CEF9.roa
File: F55EDF36D83811F196330F2A3366CEF9.roa (raw, json)
Hash identifier: Q5Luvv634TjtVQ0y8cyjwW1cfNAAdcsB0tmaTC/pcKw=
Subject key identifier: B2:0F:86:22:5A:AD:1D:54:35:EC:63:A2:26:1A:22:03:17:1A:0D:B0
Certificate issuer: /CN=A91332FE/serialNumber=42280B7D058D53A401F4271AAAD68116B9608B5C
Certificate serial: 02
Authority key identifier: 42:28:0B:7D:05:8D:53:A4:01:F4:27:1A:AA:D6:81:16:B9:60:8B:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QigLfQWNU6QB9CcaqtaBFrlgi1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91332FE/16991816D83811F184FD0F743266CEF9/F55EDF36D83811F196330F2A3366CEF9.roa
Signing time: Wed 04 Nov 2026 10:17:37 +0000
ROA not before: Wed 04 Nov 2026 10:17:37 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 154741
IP address blocks: 203.31.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91332FE/16991816D83811F184FD0F743266CEF9/QigLfQWNU6QB9CcaqtaBFrlgi1w.crl
rsync://rpki.apnic.net/member_repository/A91332FE/16991816D83811F184FD0F743266CEF9/QigLfQWNU6QB9CcaqtaBFrlgi1w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QigLfQWNU6QB9CcaqtaBFrlgi1w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 09:19:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91332FE, serialNumber=42280B7D058D53A401F4271AAAD68116B9608B5C
Validity
Not Before: Nov 4 10:17:37 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aeb0641-1488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:59:49:a6:01:7b:35:a6:ac:c3:df:65:95:d6:
e6:24:1a:aa:3f:8c:3a:21:4d:6c:97:58:e5:fb:67:
ef:de:51:a1:12:f6:02:53:56:15:82:21:5e:2f:21:
32:2d:9b:f9:a6:a0:83:04:d5:b8:ce:74:32:fe:d7:
6e:f0:11:12:de:ca:9e:1c:e9:37:55:72:c2:62:c0:
2d:32:5f:be:17:08:fe:ed:a4:f6:7a:7a:11:f8:ec:
f6:14:92:e9:7d:9f:08:3c:6b:0d:fd:28:fb:68:59:
43:3f:10:4e:76:a9:84:11:b9:86:eb:48:03:58:bb:
44:84:cd:b2:da:9c:e4:64:f0:eb:af:25:22:af:db:
c3:2f:f3:a4:ca:b7:6d:c9:0b:0a:9c:ff:6e:0b:06:
0f:48:ae:dd:80:c5:63:b6:37:ee:4b:61:8b:d7:b0:
d0:1c:70:15:b2:24:12:ba:73:7c:03:60:cf:ba:06:
9b:64:05:83:99:51:ae:55:45:77:34:60:5a:8b:af:
a6:c1:f9:a7:88:a2:00:43:05:b0:37:bd:17:75:e4:
da:4c:44:6d:79:47:07:79:9e:01:f5:fb:6d:b1:ec:
be:51:fc:85:5c:b5:19:c4:92:01:8b:5b:cb:d6:b6:
3e:d2:c7:df:0b:d8:3f:ea:7c:b4:e1:df:a5:6e:06:
c3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0F:86:22:5A:AD:1D:54:35:EC:63:A2:26:1A:22:03:17:1A:0D:B0
X509v3 Authority Key Identifier:
keyid:42:28:0B:7D:05:8D:53:A4:01:F4:27:1A:AA:D6:81:16:B9:60:8B:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91332FE/16991816D83811F184FD0F743266CEF9/QigLfQWNU6QB9CcaqtaBFrlgi1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QigLfQWNU6QB9CcaqtaBFrlgi1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91332FE/16991816D83811F184FD0F743266CEF9/F55EDF36D83811F196330F2A3366CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
203.31.58.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:98:9e:e3:cd:2b:3e:af:8e:75:74:19:c5:b5:77:3d:bd:ee:
2a:2f:21:e0:7b:30:9b:5b:db:29:e5:71:b9:46:69:10:78:36:
17:8d:53:34:2a:34:79:39:8c:a0:ba:1d:83:cc:2c:1d:89:e8:
4f:59:d8:c6:76:b4:29:15:6c:f7:21:c5:7c:db:23:17:7c:d3:
3c:86:7a:24:a4:cf:b2:6d:94:f3:9e:41:f4:0c:4a:ff:a6:13:
ef:f6:2f:0d:44:60:e9:b6:a5:d7:8f:87:bf:f5:b9:90:1e:63:
2c:65:74:75:7c:7a:58:72:0a:6d:8e:b8:af:42:30:0e:3f:17:
20:7e:78:dc:ab:5d:f6:fd:59:54:b8:ae:0b:fb:20:48:42:ec:
74:c7:f8:0b:80:f5:8e:61:cf:c6:31:2f:5f:59:47:78:1e:01:
11:5f:37:f6:a8:7d:f4:8e:71:bf:18:ca:fa:81:47:63:c2:32:
bf:f5:ee:7f:5c:07:16:4f:55:dd:c1:a1:d7:88:30:07:e1:54:
b5:a3:70:5f:8a:95:7a:3d:c1:8f:52:e5:f8:4f:c8:a2:fb:62:
cd:b3:fb:6d:d9:9f:ec:e4:04:6d:3a:29:7b:38:93:b3:cb:82:
7b:e9:4d:06:52:7c:23:0d:c3:12:76:78:d1:97:42:cd:6f:73:
79:39:2f:3d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 10 23:00:02 2026 by rpki-client