
$ rpki-client -vvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/F6E7CED8B8C611EEAC13CC11C4F9AE02.roa
File: F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (raw, json)
Hash identifier: maTY8uJW9ok2Nd5jKcr1wzbCRMfOdEbNppY27f+QdBs=
Subject key identifier: 85:21:9C:21:35:D2:01:50:D1:8E:47:85:E8:4B:5D:D6:41:1D:49:22
Certificate issuer: /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053
Certificate serial: 01AA
Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/F6E7CED8B8C611EEAC13CC11C4F9AE02.roa
Signing time: Sat 11 Apr 2026 04:36:36 +0000
ROA not before: Sat 11 Apr 2026 04:36:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 131239
IP address blocks: 202.37.64.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl
rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:52:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 426 (0x1aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91573B8, serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053
Validity
Not Before: Apr 11 04:36:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69d9cfd4-c730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6d:da:25:ca:5c:23:ad:96:85:6b:a7:84:84:
af:fc:4b:0b:33:6d:c4:4d:1f:5d:3b:47:f2:da:4c:
66:e6:81:78:02:e5:3c:0c:eb:dc:77:97:a2:82:59:
7e:10:92:12:5a:bd:3b:3a:8f:3a:26:15:cb:7b:ac:
d6:51:c5:9b:03:8b:59:58:1a:5b:e3:8d:65:b8:8e:
70:68:8a:17:00:90:20:6b:03:8c:6b:c3:75:3f:9d:
b9:ca:7d:d7:d2:4c:bc:41:6f:50:54:b0:52:75:e3:
30:32:6a:e5:d1:f7:3b:0e:96:9a:f0:60:ed:0f:ce:
1d:35:47:6c:55:0d:7a:14:9d:0b:60:45:a4:39:95:
1a:e1:cf:84:cb:25:b5:54:27:a4:e5:b5:3d:5e:fa:
76:07:c3:90:a9:8f:5b:31:7a:fb:c2:57:1d:d2:2b:
d2:0a:7d:71:51:13:5c:ca:35:a0:30:ee:df:07:83:
80:85:c1:70:1c:e9:ac:54:b7:f0:e7:67:1c:73:e9:
51:7d:c4:0e:f1:e1:41:23:25:f9:d6:0a:a6:b4:21:
79:b3:f9:4f:f4:67:20:f3:67:84:a4:7b:ef:8b:be:
4b:63:53:d7:4c:c1:dc:1f:ca:9e:83:41:9d:f3:83:
56:25:64:0e:77:49:34:df:28:d4:f6:17:e5:84:14:
ce:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:21:9C:21:35:D2:01:50:D1:8E:47:85:E8:4B:5D:D6:41:1D:49:22
X509v3 Authority Key Identifier:
keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/F6E7CED8B8C611EEAC13CC11C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.37.64.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:ef:93:8b:8d:c4:d2:31:05:03:a8:3f:69:55:5c:a0:f1:87:
b3:92:1a:47:42:b8:e8:39:c4:a4:b0:c8:c3:d0:41:3c:81:03:
2b:4b:3c:b4:dc:80:f9:7c:7a:1d:c6:3b:2a:b9:5d:98:c6:19:
a6:63:a0:5d:9d:db:0f:83:68:cc:d2:f0:43:42:8e:48:81:cd:
2b:b4:12:81:60:e4:0e:4c:d4:29:2d:69:aa:8c:0d:6a:20:a2:
9c:8d:65:8f:7e:fd:28:d9:19:ba:cc:60:55:6e:89:c9:3b:4d:
da:32:41:c2:a9:42:8d:df:fa:5e:bf:c2:d2:7b:f7:7a:c7:32:
5a:74:91:c1:95:13:a9:b1:36:0e:90:a4:02:e3:84:49:90:d4:
69:34:b2:60:67:16:a9:f1:ff:c8:6e:7d:c3:3a:d9:e1:f0:99:
ca:b3:4a:60:b8:19:51:93:ba:21:94:e4:31:d3:d8:7c:3e:f8:
93:14:53:63:23:54:6c:e4:cc:dc:d0:a1:b0:55:4c:48:11:d2:
e4:75:fa:6c:90:99:a7:b4:f7:c6:f9:08:fa:62:39:ab:5b:c3:
dc:9c:cf:9f:15:ec:29:58:5e:90:ec:cb:2f:e7:e6:43:73:ed:
53:72:52:9e:59:68:3f:cc:00:f5:8d:48:7c:21:1e:27:73:44:
f8:01:af:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:46:21 2026 by rpki-client