
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/91E9F5FCEB7211F0B89C2E104F6F56BC.roa
File: 91E9F5FCEB7211F0B89C2E104F6F56BC.roa (raw, json)
Hash identifier: VEHFIL+hcJEK3QNTlF8lEQzRTP0/e2Y3Of5xJtsfhRI=
Subject key identifier: 13:87:D2:E6:45:F1:13:9A:CC:A6:FD:BB:CE:48:E5:4B:8D:4E:BF:45
Certificate issuer: /CN=A91A55C9/serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71
Certificate serial: 0189
Authority key identifier: 78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/91E9F5FCEB7211F0B89C2E104F6F56BC.roa
Signing time: Sun 01 Mar 2026 13:07:47 +0000
ROA not before: Wed 07 Jan 2026 02:42:55 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 17461
IP address blocks: 203.3.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl
rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A55C9, serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71
Validity
Not Before: Jan 7 02:42:55 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a43a23-ab63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4b:bf:7f:94:4a:f7:2f:3e:e4:42:77:21:8e:
f4:2b:d2:1c:61:ca:6c:40:8e:83:b1:f5:ba:50:49:
9c:41:db:9d:4e:4f:f6:a0:0c:93:6c:c7:34:66:9e:
6c:eb:5e:67:79:ec:55:2b:eb:44:be:91:3c:57:a6:
17:ad:7c:4b:90:9f:df:b9:e9:b9:97:44:4e:8b:19:
9d:93:b8:48:37:2b:0f:1a:e2:5f:77:6f:26:fb:0c:
4f:e0:6d:2c:8d:cd:d9:ae:ba:f4:55:50:61:d5:97:
5c:4d:49:d5:88:a1:b8:cc:d6:19:e1:ac:d1:50:e0:
81:95:d0:7c:26:4a:00:37:ff:ff:16:f7:30:45:f0:
f0:cd:7a:06:08:02:03:72:3a:00:da:10:89:18:bf:
1a:45:52:ea:56:69:b0:de:c2:51:1b:ee:b2:7d:c1:
06:6b:25:8e:ff:2b:4f:d2:2b:50:7b:fa:f1:c6:46:
67:38:98:25:19:67:19:ac:ac:72:ac:0a:1f:bd:d1:
22:b3:04:16:10:6d:13:dd:bd:8c:61:a8:fa:a8:9d:
22:ea:6a:1d:3d:bb:71:f0:dc:df:16:ed:f3:ce:b5:
aa:61:a5:e5:d7:97:5b:0c:62:36:7a:1a:01:30:5b:
97:52:59:35:4f:94:42:69:65:28:b9:97:9f:1b:c9:
14:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:87:D2:E6:45:F1:13:9A:CC:A6:FD:BB:CE:48:E5:4B:8D:4E:BF:45
X509v3 Authority Key Identifier:
keyid:78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/91E9F5FCEB7211F0B89C2E104F6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
203.3.237.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:d2:4d:26:5f:2e:d4:25:ff:2a:d1:1d:37:7b:1f:5e:49:05:
e9:4f:1e:1d:96:d8:a6:9f:b2:73:e8:fc:a4:91:6f:64:48:b1:
c7:c1:82:43:38:ab:87:83:2d:47:3e:8a:11:00:87:43:eb:f6:
c4:1d:56:bb:d3:10:57:91:cd:05:35:26:30:22:e7:be:cd:43:
9f:a2:4d:a5:a7:b0:bb:84:67:5e:95:37:d4:33:54:9b:88:14:
ea:7f:24:18:3b:7d:96:65:58:6f:7f:25:8b:ae:76:53:4e:e3:
3e:5d:8e:8c:6d:d5:fd:b8:0d:5b:29:7e:d2:c4:fa:e5:6f:6b:
c4:af:ab:bf:6d:9c:34:1e:e8:f0:d8:d0:dd:16:17:20:49:57:
ad:d3:06:6d:e4:d5:2c:18:ff:55:53:78:9f:4f:2d:88:31:5f:
fe:3f:08:a2:1c:c5:a2:2e:75:13:29:de:30:36:bc:b5:a3:f6:
66:c1:6f:e2:df:33:f0:4c:1d:86:9e:c9:0a:90:30:74:c7:2d:
03:1b:0f:d7:53:35:0b:7a:e5:d5:a0:a4:9d:14:53:1c:94:50:
c3:a5:7b:1e:1d:87:95:22:d2:91:14:5c:4e:ed:8a:56:a2:0d:
cd:20:1c:4c:95:8f:f3:af:d1:91:9a:9d:f5:43:c1:95:94:ea:
38:be:40:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:49:38 2026 by rpki-client