
$ rpki-client -vvf rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/8093CCBA13F611EF8ED7D71EC4F9AE02.roa
File: 8093CCBA13F611EF8ED7D71EC4F9AE02.roa (raw, json)
Hash identifier: 3GcRz8YX9pHosfBQliC8AvKFaO9CH7AWUAE0UuJmdBA=
Subject key identifier: 87:68:A7:DF:90:D9:B5:6A:FE:F9:85:CE:00:36:CB:5F:E2:39:FA:E4
Certificate issuer: /CN=A91626D2/serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54
Certificate serial: 015A
Authority key identifier: 6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/8093CCBA13F611EF8ED7D71EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:20:54 +0000
ROA not before: Tue 09 Dec 2025 03:11:40 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 38022
IP address blocks: 202.27.240.0/23 maxlen: 23
202.27.242.0/24 maxlen: 24
202.27.243.0/24 maxlen: 24
202.36.85.0/24 maxlen: 24
202.36.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl
rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346 (0x15a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91626D2, serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54
Validity
Not Before: Dec 9 03:11:40 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a45955-af70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:88:d0:7a:ce:22:6d:2c:61:c2:7c:d5:87:
39:c0:2c:1b:eb:37:b4:61:74:0c:41:9c:dd:b5:1f:
a2:fc:84:28:fe:0e:64:ec:8e:41:cd:af:44:c1:bd:
20:37:67:55:71:e7:a6:e4:17:33:5f:82:75:8f:a5:
d5:7a:20:d9:e8:d8:de:d2:c8:ae:e4:44:30:6b:55:
a7:cc:9a:4c:53:5b:27:10:64:5e:bd:37:5d:00:f3:
a0:1a:0d:ef:ae:e0:86:43:8b:cb:ee:d4:42:b5:a5:
ac:c3:82:45:cb:28:0a:f7:42:6c:20:c1:ee:32:8b:
c6:4c:d5:9f:44:8b:6b:f7:de:df:f0:06:82:5e:ae:
df:a8:ad:83:a4:b7:8a:34:e5:19:88:91:6f:e6:6b:
70:a8:ee:1b:2a:d0:0a:cf:fd:cf:32:d5:f6:f2:f7:
c3:81:95:9c:02:3a:52:71:14:0c:f7:a8:af:4b:db:
30:70:26:15:b1:b6:7a:4e:4e:42:93:bb:50:6d:89:
38:e8:81:b5:11:17:06:23:77:47:73:e8:2b:18:c3:
07:59:14:44:54:ea:c7:87:14:b9:f1:05:17:00:08:
d3:df:bd:24:99:ec:af:30:5e:64:00:25:26:2a:c9:
50:cc:52:25:8b:65:af:5d:f4:11:91:39:e7:dc:65:
de:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:68:A7:DF:90:D9:B5:6A:FE:F9:85:CE:00:36:CB:5F:E2:39:FA:E4
X509v3 Authority Key Identifier:
keyid:6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/8093CCBA13F611EF8ED7D71EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.27.240.0/22
202.36.85.0-202.36.86.255
Signature Algorithm: sha256WithRSAEncryption
7d:d5:d9:26:63:4c:6a:02:61:d2:ec:a5:50:04:0b:e6:38:a1:
69:9d:79:5c:74:2d:6c:12:f3:46:8b:b3:f8:1c:b9:72:67:c6:
0a:28:76:7e:b1:61:19:94:e2:c2:08:44:d4:98:8e:4c:64:c2:
d8:b1:89:15:8d:e1:c2:bc:82:ea:a7:c8:0d:00:cb:a2:7a:ae:
b8:c6:3e:6a:00:bd:50:56:35:3a:79:c2:24:80:b1:ff:0b:3f:
ac:47:21:8a:d9:8b:50:6b:97:db:d2:18:fc:42:a0:31:37:49:
75:68:fc:3b:55:6d:ed:92:5e:75:16:d3:61:20:e5:9c:94:8a:
db:f1:b7:52:8b:b3:bd:e8:52:cd:1f:63:01:83:0a:ef:89:4a:
3f:b9:71:d0:e8:f9:62:71:b8:72:85:2f:cf:ea:00:2d:c5:6c:
6a:b9:8d:a6:57:d9:9c:9d:7b:be:53:3f:54:09:8e:66:61:07:
39:26:31:71:0c:a0:8b:a4:4b:55:6b:60:af:a6:aa:91:c7:5b:
9b:b4:a7:ed:8a:71:af:35:26:40:6b:1f:21:38:be:c8:b3:ab:
16:18:4b:31:86:b9:75:87:7e:a7:7d:36:cc:8d:b0:a3:9d:71:
f3:10:9f:17:15:85:5b:c2:0d:43:79:aa:b0:e1:e4:89:fc:c3:
fe:19:5c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:07:48 2026 by rpki-client