
$ rpki-client -vvf rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/4DF7BBE0B9A411EB8621D13CC4F9AE02.roa
File: 4DF7BBE0B9A411EB8621D13CC4F9AE02.roa (raw, json)
Hash identifier: sGBsBvvjVOXcMSvoZxggTWP1eTxexWQrQGaZYHB+t3U=
Subject key identifier: 55:40:6D:56:4B:29:77:F3:A2:99:D9:E6:49:05:9B:99:97:94:44:9B
Certificate issuer: /CN=A91813E4/serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03
Certificate serial: 0674
Authority key identifier: 90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/4DF7BBE0B9A411EB8621D13CC4F9AE02.roa
Signing time: Sat 28 Feb 2026 23:19:26 +0000
ROA not before: Sat 28 Feb 2026 23:19:26 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 5716
IP address blocks: 202.12.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl
rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:19:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1652 (0x674)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91813E4, serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03
Validity
Not Before: Feb 28 23:19:26 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a377fe-43b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7e:46:c1:d6:43:97:cc:f5:bf:78:bd:87:5b:
e3:4d:5a:42:10:47:0e:7c:8f:c1:8d:0d:fb:be:c9:
ca:53:82:2c:cd:dd:ee:23:78:e1:e0:3b:7c:1e:85:
f6:69:35:58:3d:ac:64:e5:c8:18:aa:07:f6:df:71:
66:43:bf:fc:31:9d:77:49:8b:06:9e:66:0f:a8:7f:
12:54:27:a2:e5:fb:f3:cb:e6:1d:41:10:b3:3b:58:
c3:c3:9c:b2:2d:2c:04:39:7f:0d:a3:b3:a2:54:a0:
17:7f:9d:8c:82:41:1d:c3:20:64:09:de:f5:5e:8e:
32:28:91:c7:f6:72:b9:de:d1:c7:83:fc:0b:69:42:
29:36:f6:ae:ef:cd:50:8c:b8:58:f8:84:89:c3:a7:
59:4c:21:78:d0:97:2b:4e:c4:b4:94:a9:70:f1:58:
f0:98:ca:c5:bd:2e:60:59:61:c0:19:a9:06:35:cb:
bd:00:20:4d:9e:a8:fd:fc:c2:72:71:65:21:0f:d8:
e9:2a:70:03:3d:bb:62:e2:de:29:eb:9f:89:47:22:
0a:b8:e4:38:d9:d4:85:68:cb:e2:01:a7:00:a0:88:
1a:8e:42:f2:ab:e3:99:81:4c:10:45:0b:d0:04:a4:
24:e6:d1:69:a4:59:fb:82:71:a7:6a:97:74:df:4f:
8f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:40:6D:56:4B:29:77:F3:A2:99:D9:E6:49:05:9B:99:97:94:44:9B
X509v3 Authority Key Identifier:
keyid:90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/4DF7BBE0B9A411EB8621D13CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.12.127.0/24
Signature Algorithm: sha256WithRSAEncryption
06:74:be:ef:0d:77:00:0a:c6:ec:b2:d8:ad:12:65:5c:f3:53:
64:4c:f9:35:7e:6e:8e:02:c3:ca:9d:aa:d8:fe:eb:e7:61:4e:
65:65:63:81:ae:dd:0e:5c:7b:84:0d:7f:10:4f:d0:73:b6:25:
f4:d3:4b:36:94:6e:65:c9:d8:50:80:0c:c3:f9:99:72:f7:6e:
e5:54:76:e2:cd:8c:5d:ef:50:e5:36:d5:d0:34:b8:ca:ba:f5:
7a:bf:c4:52:93:66:bb:6a:a7:88:3b:6e:92:6d:17:7c:76:02:
a6:19:26:48:91:2e:b3:5b:f2:14:36:73:4d:07:48:a3:91:fd:
a5:db:6d:47:9e:48:40:d1:84:8c:49:3e:fe:56:79:cd:4d:60:
c5:ea:89:32:a8:b7:ba:7e:a4:91:68:2f:54:a4:af:97:e1:35:
e1:1d:0e:50:b1:81:e7:ed:5f:68:95:d8:49:7f:60:78:84:ad:
f8:41:6a:88:ea:75:53:06:5c:8e:7a:58:53:8a:f5:17:5b:b3:
79:2b:4b:d7:c4:22:6a:ba:c0:e4:78:28:72:30:47:5d:c1:6e:
be:de:1b:3c:34:ae:10:02:0f:0c:fd:be:45:a0:f2:c4:e1:04:
60:cf:da:01:f5:3e:f2:a8:ab:5e:fc:4a:d6:17:09:5a:ba:9b:
5e:b6:f5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:16:21 2026 by rpki-client