
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/657EDAC0003D11F187167F2F4B6F56BC.roa
File: 657EDAC0003D11F187167F2F4B6F56BC.roa (raw, json)
Hash identifier: weYMUmUD1ARPw1SwwWxeCqTkxxR1HXaS9FBc7fRBcGo=
Subject key identifier: 99:CF:AC:27:9C:12:A6:1A:3D:0F:24:E9:A3:73:9A:11:56:E3:B9:61
Certificate issuer: /CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
Certificate serial: 019C
Authority key identifier: B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/657EDAC0003D11F187167F2F4B6F56BC.roa
Signing time: Sun 01 Mar 2026 17:52:27 +0000
ROA not before: Mon 02 Feb 2026 13:45:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152702
IP address blocks: 202.71.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl
rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:11:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412 (0x19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4849, serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
Validity
Not Before: Feb 2 13:45:12 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a47cdb-c652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:92:dd:af:5b:d7:e2:d0:2d:ff:fe:ff:0d:a1:
ce:0e:cb:9d:89:e1:75:fd:bf:9f:4d:e4:32:95:83:
2e:8c:7e:c8:26:9e:e8:10:05:59:ae:99:4b:5b:32:
70:6a:2f:b4:76:45:18:25:b1:39:6c:35:95:d3:4a:
03:34:85:74:0e:e0:49:47:81:cd:60:7e:30:f4:f8:
ad:23:1a:b2:c0:e7:b1:4e:0c:f6:de:ad:e2:cf:9b:
03:fd:59:3e:64:d0:18:2d:62:90:ba:0d:75:62:67:
5d:f3:f7:42:97:2c:c7:b0:24:96:70:c2:be:5f:2b:
d9:26:e1:56:b4:fb:44:d7:ef:a9:fe:18:4b:ae:86:
fc:b3:42:71:a5:43:b2:f3:23:2f:56:4b:a1:5f:7b:
a3:1b:99:fb:5f:4f:a8:b4:95:0d:dc:e1:b4:42:40:
4f:e6:be:d5:04:0a:14:9f:08:e7:46:b1:02:b1:6b:
6c:85:ff:8b:75:75:30:72:f8:c4:3b:e8:94:c9:42:
9d:6e:bb:82:b8:1c:91:2e:7c:69:a3:93:1d:a3:22:
e1:72:da:0e:40:fa:a9:b5:33:e2:b8:1e:a7:23:1f:
f9:af:71:40:ba:41:7d:b2:89:bd:29:47:19:0e:51:
77:1e:17:01:83:12:84:8d:bc:3c:9c:f8:25:29:89:
36:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CF:AC:27:9C:12:A6:1A:3D:0F:24:E9:A3:73:9A:11:56:E3:B9:61
X509v3 Authority Key Identifier:
keyid:B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/657EDAC0003D11F187167F2F4B6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
202.71.184.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:b0:a0:52:e1:63:e6:bd:fa:0a:06:f1:ef:2c:05:5a:45:fa:
29:8c:af:8b:67:5b:96:06:b9:c2:df:d7:a5:d3:37:92:1d:48:
a2:f6:09:23:90:de:02:71:53:51:8e:2d:f0:3b:23:db:eb:2a:
5b:e2:95:db:fa:3f:1d:ec:15:81:4b:50:f0:47:d7:27:ee:c7:
7c:b5:1a:44:33:e4:95:e2:f4:ac:33:67:ae:8a:1f:e3:c5:85:
e8:2f:9e:ac:a0:93:24:34:98:9d:73:e2:66:23:52:92:3c:30:
b9:17:ea:f2:46:31:ae:e4:15:f9:72:d8:0b:59:eb:dc:b8:89:
be:8b:51:44:ca:d4:5b:d6:4a:c5:0f:9e:17:a4:c8:1e:65:88:
b2:d3:5b:b3:16:b2:38:84:03:72:21:5c:fd:d3:bb:27:96:48:
cb:3f:97:d2:9d:02:a9:ba:1a:dd:5c:45:13:df:4c:7f:7c:b2:
9c:05:7b:be:f7:38:2a:04:c8:28:35:bf:85:54:c8:7d:65:9e:
c6:fe:f4:15:6c:e0:b1:13:8f:6b:bd:43:bf:20:cd:df:f6:18:
b0:97:1b:c7:7d:82:63:53:db:b3:ff:1e:e8:d1:9b:53:3b:48:
72:4d:20:31:65:20:39:7b:19:e7:bf:3f:9e:b5:60:f3:58:ce:
74:40:8d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:27:13 2026 by rpki-client