
$ rpki-client -vvf rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/8201D598AD9B11F080BD6B82C4F9AE02.roa
File: 8201D598AD9B11F080BD6B82C4F9AE02.roa (raw, json)
Hash identifier: p3ZoCtddv0DD9A8CHYHtHKNtwBeASX7tWihiJwJ4AOY=
Subject key identifier: 3B:81:41:6E:36:F5:CA:BA:BD:06:EB:45:73:AD:C1:9B:4E:15:6F:18
Certificate issuer: /CN=A91951AF/serialNumber=18ECE629EEF3B6A2696EBAB34B3FB02EF8A8B887
Certificate serial: 5C
Authority key identifier: 18:EC:E6:29:EE:F3:B6:A2:69:6E:BA:B3:4B:3F:B0:2E:F8:A8:B8:87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/8201D598AD9B11F080BD6B82C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:14:23 +0000
ROA not before: Mon 20 Oct 2025 09:59:46 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 154305
IP address blocks: 45.117.84.0/24 maxlen: 24
45.117.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.crl
rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:34:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91951AF, serialNumber=18ECE629EEF3B6A2696EBAB34B3FB02EF8A8B887
Validity
Not Before: Oct 20 09:59:46 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a3e74f-6584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1d:58:b2:67:75:0d:5c:3d:ee:5a:0d:9a:05:
26:67:1a:99:6d:3c:35:f1:55:2b:79:f9:46:7b:5c:
6a:dd:e7:ce:5d:0d:58:09:18:39:bf:ac:67:a6:e5:
21:bf:93:7b:49:8d:d8:82:04:4a:8b:21:71:36:c0:
7c:fd:e4:10:88:d8:cd:5e:5a:8a:15:1b:bd:2d:a9:
a3:9e:47:3f:46:da:e0:7f:5a:f6:40:59:1d:0f:a5:
d5:a5:84:f4:ad:18:75:86:7b:43:90:e5:c4:78:fe:
d5:b4:38:ef:9e:dd:de:64:88:f7:f6:5e:6e:d6:dd:
f5:a7:f9:f9:cd:93:ac:be:e8:dd:59:97:c9:0f:84:
33:ed:62:fc:df:18:19:73:1e:75:4d:0e:9f:07:4c:
ce:48:4c:50:a8:af:44:91:3c:3d:4c:18:a9:d9:8b:
76:ac:11:07:40:e9:b8:3a:85:78:66:c8:a9:c8:1f:
b4:d0:7a:bb:e0:c6:e0:1b:18:82:bc:cf:f5:c9:76:
34:c8:03:4f:09:df:d8:0c:d7:06:3c:ba:44:fa:56:
e6:46:5b:86:6a:c5:62:05:a5:ca:64:c4:21:46:e8:
70:31:f0:00:3b:a2:01:e1:7a:6e:03:15:cc:e1:5a:
3d:4c:7f:72:12:81:a1:94:a5:ab:1c:e0:94:44:a4:
4f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:81:41:6E:36:F5:CA:BA:BD:06:EB:45:73:AD:C1:9B:4E:15:6F:18
X509v3 Authority Key Identifier:
keyid:18:EC:E6:29:EE:F3:B6:A2:69:6E:BA:B3:4B:3F:B0:2E:F8:A8:B8:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/8201D598AD9B11F080BD6B82C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.117.84.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:74:26:7e:bc:06:44:be:7e:46:7d:9c:a6:73:13:6c:99:38:
c7:21:31:a3:87:f1:b3:8d:32:d2:0c:f9:80:e0:2f:83:c5:85:
bd:4e:ec:f0:3d:32:0c:e1:bc:f6:4b:a3:9c:2b:4a:69:51:52:
4c:66:12:2c:c0:29:1a:eb:6a:e4:ae:1b:17:4e:35:22:e0:2d:
8e:62:a9:cd:28:92:73:d9:57:d1:a8:c7:67:07:48:04:2a:ed:
38:3f:59:2f:97:f3:ba:ac:8c:51:8c:94:cc:f6:1e:30:af:10:
9b:7e:b8:40:ac:d1:a0:09:25:10:e3:11:d9:e9:51:e7:7a:94:
21:34:1c:ab:be:33:51:55:42:eb:37:ef:fd:42:ec:bd:94:aa:
1d:1f:06:03:fc:71:5c:c9:71:79:34:72:12:76:70:bb:03:13:
46:9f:8b:a9:f7:58:70:b7:97:c5:b7:10:b0:b7:d4:84:a9:aa:
38:29:1c:56:bc:23:e8:f1:a0:75:a1:0d:3d:e2:52:bc:82:fc:
ef:ea:50:83:cb:bb:77:12:96:38:5e:08:60:7e:05:21:0c:10:
db:b9:22:4b:72:28:a5:77:94:ef:e1:07:5f:fe:b9:45:db:f4:
41:68:5e:f5:85:74:26:7f:8b:c9:e9:e4:36:3d:5f:83:ce:ad:
ec:97:b4:3f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:59:58 2026 by rpki-client