
$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/B81F8808A72E11EDA708F167C4F9AE02.roa
File: B81F8808A72E11EDA708F167C4F9AE02.roa (raw, json)
Hash identifier: +vK9sN/wwEHgTPgsw6vo/nMVxNjCNVxPKRzOcPHnjxI=
Subject key identifier: 9E:CF:CB:7E:04:26:83:56:58:29:05:05:D5:3B:EE:C1:0D:DA:90:C5
Certificate issuer: /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Certificate serial: 087A
Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/B81F8808A72E11EDA708F167C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:44:29 +0000
ROA not before: Wed 08 Oct 2025 22:24:37 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 55454
IP address blocks: 182.23.176.0/21 maxlen: 24
202.50.246.0/24 maxlen: 24
2404:1c00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:45:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2170 (0x87a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91406AA, serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Validity
Not Before: Oct 8 22:24:37 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4890d-0b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2c:86:d0:9f:f7:08:c2:66:34:88:cb:6b:f9:
d6:4d:c8:d8:1a:c7:b0:2c:7f:ce:8d:ae:1d:25:c4:
75:91:1b:7f:db:53:3f:dc:cd:89:c8:d6:d3:23:00:
26:e8:8e:db:12:a8:09:e5:c4:19:4e:be:2d:77:a3:
ab:fc:3f:8a:6a:cc:57:72:d0:68:60:a2:15:4c:bd:
1b:df:88:97:88:12:9f:52:52:a3:cf:74:de:03:c2:
4a:25:eb:77:bc:6a:90:2e:ee:4a:d2:f1:82:87:e7:
f0:4a:ee:d5:cd:ee:79:c3:e6:b8:84:e6:86:35:e3:
36:89:9b:ea:6b:5a:82:5a:9b:a9:8c:ce:ef:66:56:
01:cb:ba:8d:39:71:7f:83:72:35:b1:e2:81:5a:04:
0e:10:6b:b5:87:ee:ef:32:c1:50:f2:6c:02:48:6d:
bd:a1:f6:d3:7d:1b:8e:92:a3:bb:57:9f:05:2c:32:
e9:6d:ed:82:a2:b4:4e:61:70:99:b0:6f:f7:76:50:
16:9c:52:15:81:9a:49:43:68:46:83:b8:02:08:45:
ed:e0:1c:5e:db:7b:e9:87:9c:6d:ef:b8:e6:9d:a4:
0a:f6:fb:09:f9:b9:6e:2d:2c:6f:04:05:08:9b:ba:
3f:2c:50:7f:b0:a0:e9:be:96:3f:2c:3e:81:47:10:
e8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CF:CB:7E:04:26:83:56:58:29:05:05:D5:3B:EE:C1:0D:DA:90:C5
X509v3 Authority Key Identifier:
keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/B81F8808A72E11EDA708F167C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
182.23.176.0/21
202.50.246.0/24
IPv6:
2404:1c00::/32
Signature Algorithm: sha256WithRSAEncryption
84:0e:1b:c1:79:f6:7f:d3:b5:b2:d8:92:bc:8f:ca:e0:bf:e8:
a2:9e:35:ae:bf:23:68:b2:ec:99:21:bd:90:e2:62:5d:6b:c7:
b9:c0:75:5c:61:a0:90:ca:72:0c:d7:b3:97:d0:c2:4b:48:62:
bf:85:21:92:76:91:94:6f:2a:b1:92:63:9e:aa:ad:28:45:7b:
8d:09:b4:af:ea:81:bc:88:c7:a9:da:b4:f1:5e:0b:8b:69:2f:
f1:e1:6a:28:ba:2d:44:99:a2:73:ad:f2:30:2c:bd:5f:df:71:
2f:03:7b:da:df:a5:5d:5d:c5:6c:2a:1c:5e:de:bb:a2:0c:9b:
bb:fa:3f:92:c1:6c:b2:9c:4d:61:47:0f:e5:99:80:1f:df:7a:
de:a7:3f:c3:fc:ff:60:75:ed:67:b0:ff:79:b9:10:66:9c:43:
2e:02:31:0e:d4:88:06:4f:7e:4e:ce:9d:1f:10:f3:81:70:74:
75:12:9f:11:73:74:90:c9:60:9a:04:3f:0d:84:19:7f:a1:fb:
15:87:51:bd:59:ad:0d:78:cf:86:f7:1c:c6:41:7e:08:f2:d9:
4c:b8:06:13:fe:2e:81:f4:b6:7c:82:04:61:95:31:90:99:93:
87:99:94:b7:65:35:e2:4d:4d:e9:e3:a0:5c:83:44:cd:79:ef:
89:69:c3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:14 2026 by rpki-client