
$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/47A6C8E08DB811E98ACC9F7EC4F9AE02.roa
File: 47A6C8E08DB811E98ACC9F7EC4F9AE02.roa (raw, json)
Hash identifier: tim1sMDu0bOwl1syg0MHcvHXmnELHIcAaqZu6XOIY64=
Subject key identifier: D0:FC:7B:D5:83:94:6C:87:30:8A:21:A1:A7:B0:28:49:A5:07:52:0C
Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial: 368C
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/47A6C8E08DB811E98ACC9F7EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:48:10 +0000
ROA not before: Thu 24 Jul 2025 14:50:36 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 46079
IP address blocks: 203.107.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:23:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13964 (0x368c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Validity
Not Before: Jul 24 14:50:36 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a489ea-3afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:53:40:55:8a:d3:f7:8d:f1:f5:4c:ee:5b:a0:
95:2d:70:f6:ec:3d:ff:92:74:89:bf:99:64:27:c4:
91:cb:27:65:70:3a:f1:27:49:cc:6b:06:9c:dc:c1:
9d:29:28:e4:ee:47:c0:54:9f:4d:7f:e1:74:3a:bf:
e6:1c:88:ac:92:bf:67:6b:94:e4:f1:7f:e5:20:02:
30:b6:ce:7c:87:93:43:3e:63:9f:af:9d:82:bf:0d:
6a:5d:36:22:3e:f7:d1:76:25:78:07:fc:db:d6:50:
5a:7c:02:14:00:c3:6a:17:3c:b8:bb:7f:58:95:19:
56:a7:a8:b0:c2:6f:71:a3:ca:43:cb:9f:7f:a8:d1:
f0:aa:de:b2:dc:7e:74:f0:24:1e:3a:7a:6d:01:54:
bb:11:36:1f:9d:a8:11:88:0f:ae:d0:52:62:0c:8c:
2e:62:be:37:2c:11:ae:d4:e2:6e:88:23:c1:fe:a3:
4d:8a:81:42:d5:28:29:e6:81:b2:96:b3:65:ab:b1:
e9:11:cf:00:82:da:2b:05:f0:37:92:76:19:b8:dd:
49:c2:59:f4:68:12:2e:65:09:2b:a7:e9:7c:eb:bc:
86:b9:66:69:18:fa:55:6c:01:cc:ba:3c:e5:df:9b:
50:20:2e:f8:63:db:47:28:aa:0c:af:43:92:c7:71:
c7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FC:7B:D5:83:94:6C:87:30:8A:21:A1:A7:B0:28:49:A5:07:52:0C
X509v3 Authority Key Identifier:
keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/47A6C8E08DB811E98ACC9F7EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.107.177.0/24
Signature Algorithm: sha256WithRSAEncryption
68:d5:c5:20:c1:00:14:a2:3c:5e:97:66:6d:2a:30:60:40:bf:
cc:d9:2e:bc:d0:58:e0:25:84:76:c1:2c:8d:98:80:10:da:5f:
b3:33:9e:64:7a:9d:8a:0a:8d:dc:73:1a:74:f6:5a:1f:a4:5a:
9c:d6:3f:23:9d:56:df:e8:3b:8a:ad:ea:5e:23:de:cc:79:fa:
df:35:82:ba:11:27:bf:34:8d:4a:e1:be:df:a7:fe:8a:75:95:
8f:f9:5b:b3:ba:8d:7e:56:c7:43:b5:41:c7:fe:75:0d:20:4c:
29:da:1c:ac:0c:87:5c:55:3a:71:d7:3e:6d:02:d6:60:d2:6b:
d7:00:2d:2f:60:aa:49:76:52:97:80:88:93:3d:3b:0a:b5:c5:
fc:cf:ef:26:58:23:81:fe:fa:20:4b:5d:db:d1:3a:a0:d9:a4:
ea:a8:d4:9d:08:f6:8d:c0:fd:16:87:4a:99:ee:26:b3:ba:70:
97:bd:3c:37:2a:3a:90:09:28:a4:c4:32:0c:78:ef:28:6c:f1:
de:28:d9:c4:97:68:6c:a2:6f:a1:36:02:42:5e:5c:f9:27:08:
f5:64:23:e7:1d:e9:72:e6:06:f2:ef:68:24:61:5c:68:bf:6c:
7d:44:4d:ac:64:9c:24:b9:73:ae:cf:8e:02:cd:95:15:ed:3f:
e4:13:58:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:02:32 2026 by rpki-client