
$ rpki-client -vvf rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/0F91DE9EAD4C11EB903C150DC4F9AE02.roa
File: 0F91DE9EAD4C11EB903C150DC4F9AE02.roa (raw, json)
Hash identifier: 2MWq2gYgL8Z2r2vMKeBL4wxSZIjEodsX3g/1Rc+PbcA=
Subject key identifier: 44:F6:A3:92:DD:83:73:43:8D:CB:BF:81:DD:38:D5:83:2C:88:11:AD
Certificate issuer: /CN=A91452AC/serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
Certificate serial: 0966
Authority key identifier: 36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/0F91DE9EAD4C11EB903C150DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:11:00 +0000
ROA not before: Tue 04 Nov 2025 20:39:35 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 45250
IP address blocks: 202.43.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl
rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2406 (0x966)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91452AC, serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4
Validity
Not Before: Nov 4 20:39:35 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a47324-198c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ba:ad:6a:67:c6:08:c3:74:93:8c:ac:f9:c3:
16:ed:95:6c:79:2d:34:eb:ba:50:2b:86:03:73:db:
a4:6b:78:ad:4b:ea:0c:88:4b:46:68:65:ae:2d:9a:
9c:f2:12:e1:5b:86:c6:f1:e2:77:37:33:ab:c9:4e:
ff:dc:8a:5e:7f:25:d0:13:fa:8c:e1:9e:99:1e:dd:
34:10:8e:de:1b:cb:e3:b0:ae:3b:de:2e:bc:30:66:
c0:c5:ef:f9:22:d6:b1:3e:fa:53:a1:9e:43:f9:87:
25:96:7a:8a:7e:aa:8c:d0:d1:50:fe:21:aa:39:29:
08:e3:34:e1:8b:a6:12:4b:2d:f3:12:3d:4c:91:2b:
d7:26:33:ab:8b:df:d7:09:86:ce:52:c8:ad:a4:f1:
4b:94:a1:1f:1e:2b:72:da:80:93:91:30:11:01:cb:
d6:37:4f:be:ce:eb:4d:1d:ef:88:88:be:de:80:e1:
11:b8:3c:d2:ce:09:a6:dd:24:e6:87:97:cb:2c:29:
03:c8:aa:83:e6:6f:ae:52:bc:a0:7e:b0:54:a9:12:
86:93:fe:d6:43:1f:16:0c:63:18:07:2e:97:71:f6:
8d:d6:7a:68:8f:c0:ef:f7:7f:31:14:8a:91:c1:b7:
b8:8d:4f:87:e1:1a:8d:43:d1:e6:4c:53:c1:c0:f1:
63:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F6:A3:92:DD:83:73:43:8D:CB:BF:81:DD:38:D5:83:2C:88:11:AD
X509v3 Authority Key Identifier:
keyid:36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/0F91DE9EAD4C11EB903C150DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.43.239.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:37:e4:27:5f:8c:01:b3:34:65:d9:b0:47:23:b2:8d:b5:f5:
76:99:de:4f:1d:2a:5c:c1:ef:c4:dc:df:00:b4:a3:c7:ee:0f:
66:81:d6:d4:61:c4:21:0f:02:93:e0:9e:bb:60:3d:81:29:a9:
01:d3:a6:a9:f5:9f:e0:5e:72:ae:45:c7:e4:aa:6f:56:99:d5:
f7:e2:8c:5c:bc:1d:8c:8d:3f:bd:7d:cd:30:f5:ae:8c:a9:29:
b8:8f:a9:d2:10:18:13:61:2e:d9:8f:6d:fc:c9:02:58:4e:79:
3e:9f:ad:b2:df:76:2d:bc:88:27:a6:ff:8b:fb:ae:52:ac:c1:
c5:20:dc:9d:75:48:de:aa:7c:95:19:32:50:6c:36:41:3c:96:
8a:bf:39:2d:e2:d1:63:99:8a:1c:f2:05:56:f9:ec:92:13:c0:
6e:5a:0b:d9:c2:2a:06:50:cd:a2:be:a9:0a:b3:00:39:ee:a2:
97:88:2f:b4:93:98:4f:94:3c:41:8f:d9:a8:bb:1c:da:14:c9:
40:10:4c:02:c0:19:95:ce:5a:e5:df:b2:1e:de:89:e7:72:88:
c2:b0:78:71:11:0b:33:f7:e6:09:8e:f4:de:2f:49:21:5e:bd:
9f:f3:c9:f4:86:c9:30:5d:0e:8f:49:3f:52:70:04:ae:15:2e:
c2:20:78:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:39 2026 by rpki-client