
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/ABB7CDCC9C1811F1ADB92E767011F970.roa
File: ABB7CDCC9C1811F1ADB92E767011F970.roa (raw, json)
Hash identifier: WqoVvbSiwJn5rj2IxfeamtzmjM8ScyXIZRXq+6IcKl0=
Subject key identifier: 3C:6D:BF:DD:17:3A:EA:B8:A3:29:32:31:50:9C:15:4A:C1:C0:61:77
Certificate issuer: /CN=A91A4DBF/serialNumber=0CA3162124EE64629643FF29EB311072D9128533
Certificate serial: E2
Authority key identifier: 0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/ABB7CDCC9C1811F1ADB92E767011F970.roa
Signing time: Thu 20 Aug 2026 17:42:11 +0000
ROA not before: Thu 20 Aug 2026 17:42:11 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 154173
IP address blocks: 203.174.23.0/24 maxlen: 24
2001:df6:90c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl
rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:33:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4DBF, serialNumber=0CA3162124EE64629643FF29EB311072D9128533
Validity
Not Before: Aug 20 17:42:11 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a873c73-00b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:aa:fe:94:75:d1:27:0a:c1:70:22:35:a8:ba:
42:82:af:d4:8b:f3:a0:7e:65:cb:1e:41:bf:80:1f:
fe:1b:f1:2c:fc:e9:13:f0:c3:c7:6f:82:8c:88:ca:
65:6a:28:1b:50:3c:00:31:e2:20:a9:a9:05:63:c7:
a9:d1:77:bd:c7:43:fc:23:35:d0:b7:7d:c5:9b:b4:
34:4f:c0:4d:a4:f9:42:f9:a5:d9:ec:9f:ee:e7:bb:
b3:99:50:d7:16:bf:c7:58:23:ac:ae:58:a3:37:f4:
2b:87:7d:3b:58:87:77:40:88:f8:cd:b2:ae:51:90:
94:88:56:d2:b9:1f:b0:c6:9a:85:70:ad:80:8c:90:
de:3b:3d:00:ee:86:3a:5f:e7:8a:46:69:a7:d5:f8:
29:9e:bc:5c:e0:ee:ae:d7:81:0c:c7:7d:ed:62:bb:
58:2a:89:ba:2f:5c:91:cb:d8:d1:22:97:b4:91:5a:
61:59:32:7f:6c:94:79:58:77:cd:7a:74:5e:bb:50:
9d:24:8b:27:f9:a3:4c:fb:a6:a6:94:80:49:1e:9b:
2b:c8:45:4e:af:fa:3b:f9:58:28:6b:3b:82:c8:95:
44:cc:43:6a:9f:d2:42:0f:8f:23:a7:91:f8:62:26:
ce:da:f5:cf:b7:6f:e7:fd:0b:4b:9c:78:cc:d1:66:
50:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6D:BF:DD:17:3A:EA:B8:A3:29:32:31:50:9C:15:4A:C1:C0:61:77
X509v3 Authority Key Identifier:
keyid:0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/ABB7CDCC9C1811F1ADB92E767011F970.roa
sbgp-ipAddrBlock: critical
IPv4:
203.174.23.0/24
IPv6:
2001:df6:90c0::/48
Signature Algorithm: sha256WithRSAEncryption
3e:8f:fe:a0:67:9c:b1:20:e7:ec:40:28:4e:8d:b0:a6:ae:4a:
ed:ab:cc:15:ff:31:cd:93:f5:af:9d:3a:c2:27:2f:e0:36:d2:
51:8b:0a:5f:41:e2:d8:57:6d:18:26:74:c0:6d:94:9e:16:42:
26:20:de:c4:69:f9:18:ad:51:bb:f2:b2:02:d0:b1:11:e0:31:
e0:f8:22:93:91:05:eb:12:04:d4:50:12:cf:33:d8:8d:b5:b0:
76:42:83:97:ef:16:19:fe:ae:21:38:65:aa:ba:56:03:ec:e4:
67:7f:61:b8:45:16:61:c0:4a:fd:20:01:e4:24:61:c5:39:14:
27:53:3e:0c:d5:d0:93:23:98:68:0b:5c:8c:f9:e8:d3:9a:13:
81:2e:7d:b1:7a:ac:1b:8e:fa:77:d1:34:c8:e1:4b:8e:2a:17:
2f:4f:ce:a9:c5:d6:7c:23:6a:39:c4:11:fa:ea:5a:93:9e:43:
92:2b:14:e0:b1:e4:82:98:87:e9:0b:da:64:6b:4e:8d:72:56:
be:19:f2:76:c9:42:9e:a0:49:cc:4f:dc:44:b1:5c:df:c0:9d:
19:03:e5:3e:6a:8c:ed:73:76:f7:1f:c7:14:50:5a:bc:f8:06:
8e:4b:8a:6b:25:79:ae:aa:90:e2:a2:ab:b0:1e:54:59:7b:a9:
0a:c2:e1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:23:33 2026 by rpki-client