
$ rpki-client -vvf rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/18164B6AB2C811EFA702DF80C4F9AE02.roa
File: 18164B6AB2C811EFA702DF80C4F9AE02.roa (raw, json)
Hash identifier: IlwuqYd+V3i+RoW8n6rnlp+BLBlUeaUn1+UQMM4yK1U=
Subject key identifier: 03:EA:64:24:CE:F0:61:3B:60:A1:4D:88:EC:DE:06:2D:30:F6:6A:47
Certificate issuer: /CN=A91517CF/serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096
Certificate serial: EA
Authority key identifier: EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/18164B6AB2C811EFA702DF80C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:56:10 +0000
ROA not before: Thu 01 May 2025 06:45:17 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 203.34.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.crl
rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91517CF, serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096
Validity
Not Before: May 1 06:45:17 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3e309-91d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:25:b4:bb:d4:5b:e1:ec:06:20:b6:a0:4c:61:
cf:df:6a:f3:7d:91:d1:51:fe:7c:64:c3:9e:b3:96:
a1:c0:02:fb:0c:dd:6a:09:59:9b:d1:24:c0:01:16:
53:75:68:89:a9:5d:f6:d5:3a:b5:e1:d5:1a:88:15:
54:ca:3f:94:23:7e:fb:5e:cf:36:00:10:db:c5:0d:
98:2c:84:08:8c:31:05:78:9a:11:d9:ca:c7:a7:81:
60:e8:f3:d8:c7:d4:18:8d:21:bb:6a:02:7e:f9:9c:
87:8b:e8:66:5a:3f:df:53:0d:34:db:13:4e:d4:e4:
c5:f6:d6:a2:d0:56:df:ec:11:71:cb:93:5f:b1:c9:
3a:51:f9:d3:e1:4b:25:f1:c6:a4:83:1d:94:7e:91:
2e:b2:5b:a3:80:8b:6f:04:30:c0:80:10:92:ae:15:
81:70:d8:e0:d1:01:3a:f3:3c:f7:79:d3:64:c5:9e:
ef:7f:2b:ba:f2:1a:41:ef:68:c0:a0:5a:75:cb:c1:
3e:46:b2:02:90:24:b5:ab:88:38:04:d9:7f:4c:b3:
1a:20:1d:69:d4:c2:be:7d:34:c6:1a:15:f9:18:4a:
5d:34:77:66:4f:f9:75:48:33:60:a6:f9:23:26:d7:
91:27:cb:fb:2b:42:8c:4c:04:2e:d5:83:2f:7c:9d:
96:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EA:64:24:CE:F0:61:3B:60:A1:4D:88:EC:DE:06:2D:30:F6:6A:47
X509v3 Authority Key Identifier:
keyid:EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/18164B6AB2C811EFA702DF80C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.34.237.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:70:97:a0:27:11:86:c4:77:98:bb:cd:f6:9d:c2:b3:ec:d0:
9c:b4:45:6c:64:36:cd:aa:04:0c:1d:76:10:7f:d7:91:3c:e1:
0a:0d:65:59:9f:82:ef:65:57:56:20:69:0e:9c:52:6e:49:71:
38:a2:da:58:5e:f4:b4:15:ee:63:85:35:80:bc:d2:7a:62:b2:
cf:87:93:e2:42:ed:f2:c9:9a:04:9a:43:9e:c5:92:86:08:c5:
69:28:0b:c6:a1:46:93:26:19:42:2a:21:55:e6:4b:fc:0d:14:
5d:df:ca:b4:e6:3f:3e:59:c1:fb:d9:7d:ae:2f:90:e7:4d:67:
82:6e:f4:26:95:f0:5e:9f:ed:5a:e0:16:b3:20:35:c3:5a:9e:
b3:5d:c1:fa:41:ad:8f:55:ba:ab:14:eb:91:9c:5a:18:7b:2e:
18:e8:99:ae:05:aa:1c:d9:04:e2:99:bd:e5:a7:96:48:3e:8f:
df:ed:2f:8d:c0:3e:90:87:03:f3:8a:74:a7:49:b0:e3:c8:d3:
7b:6b:11:3a:69:55:ff:6c:60:9f:a9:60:f9:6b:15:86:d2:36:
f6:71:ad:39:b1:93:a9:77:92:7a:17:9e:9e:4c:17:9c:af:ae:
81:fa:3a:64:44:ed:37:3c:74:0b:0b:ab:11:63:6d:6c:6b:d8:
2f:3d:b6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:09:04 2026 by rpki-client