
$ rpki-client -vvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/E6B3F23C041E11EA8A736F7EC4F9AE02.roa
File: E6B3F23C041E11EA8A736F7EC4F9AE02.roa (raw, json)
Hash identifier: ApRSn/Ex+zsbcgkYpd+d+Dx8MKNptT/BXsBbr4u4SDI=
Subject key identifier: 35:C9:FC:E4:DE:A8:10:7B:D3:13:A6:D7:0A:DB:E5:66:44:66:6B:BF
Certificate issuer: /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial: 13D9
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/E6B3F23C041E11EA8A736F7EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:33:48 +0000
ROA not before: Mon 15 Sep 2025 02:16:09 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 19551
IP address blocks: 122.11.196.0/24 maxlen: 24
203.117.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:21:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5081 (0x13d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Validity
Not Before: Sep 15 02:16:09 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a4868c-be3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7b:ce:b7:0d:55:ba:57:70:a6:66:44:68:3a:
2e:bf:9d:57:13:0a:fe:df:9d:c6:a9:30:ac:e1:df:
5c:79:42:24:71:2e:3f:21:ce:65:34:8d:78:6e:36:
41:d1:5b:d9:04:1c:6d:3a:d1:a6:8b:d8:ee:7d:60:
31:9e:f0:c7:92:8d:2b:20:0e:8b:1f:e5:b1:da:98:
8d:ce:30:28:fc:a0:a4:97:84:e1:45:0e:3b:f5:81:
af:5a:9a:1c:38:92:a5:35:50:96:c4:19:6e:2b:3e:
03:21:81:16:60:de:47:4f:5b:ba:b8:e7:15:c6:19:
ac:1c:0e:6b:8a:5d:06:43:7e:df:f3:9d:21:97:de:
58:4c:11:b1:f0:de:e2:dd:95:45:f2:dc:50:73:e0:
69:ee:18:7c:64:db:34:a4:47:7e:56:d0:13:6e:a2:
6f:53:fb:12:bf:b7:a8:a1:7c:93:81:f9:24:56:ac:
97:c1:20:90:0a:1e:6e:32:3f:90:00:ff:bd:29:32:
f0:db:aa:b6:e1:bc:f3:29:9a:d3:49:4c:a3:17:87:
ed:55:98:b8:ba:f6:01:8a:e7:22:67:e8:75:a7:0e:
c1:44:e4:b2:4a:8d:17:11:74:f3:92:40:44:b6:66:
23:00:eb:0b:5a:1f:93:74:f6:bb:93:1b:d2:20:52:
21:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C9:FC:E4:DE:A8:10:7B:D3:13:A6:D7:0A:DB:E5:66:44:66:6B:BF
X509v3 Authority Key Identifier:
keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/E6B3F23C041E11EA8A736F7EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
122.11.196.0/24
203.117.53.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:25:cf:9b:4c:9a:c4:2e:9a:8b:c3:33:79:f2:e9:9d:18:e9:
53:32:61:86:70:31:d2:b0:e5:25:20:4e:a8:b2:f7:5e:56:54:
aa:3e:0e:68:6f:a8:81:ff:ae:2d:57:67:28:0e:4d:f3:02:d9:
26:c8:a3:72:03:72:48:b9:9c:3d:0c:2a:2f:68:ff:b2:fe:d6:
c7:29:d2:a6:72:4a:6b:ea:37:60:a7:d1:51:bb:12:09:0c:f2:
71:98:fd:f2:ce:d6:b3:1d:6b:0e:78:ce:cb:46:53:42:aa:6f:
a5:04:91:1b:f4:0f:5d:23:2d:a8:50:30:68:45:a3:c1:cc:77:
29:f9:6d:34:b6:27:1b:be:9d:e9:d0:f4:cc:0c:83:96:8c:18:
5e:79:65:40:be:ca:31:1d:30:60:9d:8b:1f:9f:d2:ca:29:2c:
cf:c7:09:a2:cb:aa:23:4e:36:aa:66:a6:ac:e0:fa:75:fe:c4:
b9:eb:fa:6d:90:dc:74:9b:6c:96:4d:70:32:a1:79:8f:2f:cb:
07:d5:6d:d1:7d:f2:fb:82:d9:72:c3:bc:d4:c6:4d:72:cd:81:
61:35:33:67:09:ee:b6:85:f8:c3:ed:56:af:d1:43:24:ab:df:
6a:bd:37:18:b6:98:44:29:68:ad:00:db:a8:a1:de:f4:b3:01:
94:51:db:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:55:58 2026 by rpki-client