
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/D0B32912090911F0A5348F26C4F9AE02.roa
File: D0B32912090911F0A5348F26C4F9AE02.roa (raw, json)
Hash identifier: 4Lyw/AU+Wk60oVjtMsai5M/XpQ4x8ZuW3TaDGBXdpZU=
Subject key identifier: 77:0C:B5:1C:D4:24:81:B9:A1:9B:C8:A1:01:EB:65:55:FB:C5:97:40
Certificate issuer: /CN=A91A5A82/serialNumber=5ABECD8EAAD37EA57AEB939F2C0B142974841F8A
Certificate serial: B5
Authority key identifier: 5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/D0B32912090911F0A5348F26C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:18:13 +0000
ROA not before: Mon 05 Jan 2026 05:28:31 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 153598
IP address blocks: 203.24.49.0/24 maxlen: 27
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.crl
rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:43:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181 (0xb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5A82, serialNumber=5ABECD8EAAD37EA57AEB939F2C0B142974841F8A
Validity
Not Before: Jan 5 05:28:31 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a42075-445c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9f:c2:ef:3b:42:4b:e3:29:5c:51:1e:5f:79:
0c:31:8d:0f:49:c1:5b:04:8c:8d:c6:30:85:9f:96:
c0:00:de:63:a7:1c:8a:fb:b2:36:8b:a1:7a:49:af:
50:fa:8e:a0:00:d9:00:2e:2f:3d:23:eb:73:bf:82:
a1:27:19:5a:b0:36:c0:f1:04:86:cd:59:ba:96:35:
c6:02:82:0c:b1:b9:5c:34:e3:8a:37:05:f2:40:b4:
3e:14:67:9a:cc:9b:fc:cb:06:a9:33:0d:32:da:87:
1e:66:b1:5e:b9:70:ac:a5:78:9f:29:98:4c:45:5d:
29:4b:75:4d:e9:33:93:ff:a0:41:d7:ea:2d:98:b0:
31:aa:f9:46:ea:f0:1f:64:f5:3f:15:ef:21:1c:14:
01:aa:f7:81:00:7d:95:a8:ab:a8:ec:e4:f4:62:fc:
93:87:fd:65:8f:5b:be:d9:f9:b3:dc:77:d0:be:d7:
4b:7b:8a:a5:e4:50:31:c6:e8:5e:71:bf:70:a3:f6:
b4:60:3c:c9:b2:0c:6a:05:78:50:f4:5d:82:32:a8:
19:60:94:e4:81:cb:30:ed:10:b9:d4:6f:71:0b:de:
f6:c5:26:07:19:aa:a4:56:43:dc:c8:01:6e:00:da:
e7:ad:04:fc:dd:71:44:a1:41:74:ed:75:1c:ec:8a:
f1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0C:B5:1C:D4:24:81:B9:A1:9B:C8:A1:01:EB:65:55:FB:C5:97:40
X509v3 Authority Key Identifier:
keyid:5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/D0B32912090911F0A5348F26C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.24.49.0/24
Signature Algorithm: sha256WithRSAEncryption
76:ba:71:97:54:82:f8:72:29:88:c5:23:53:1b:6c:fb:b5:7d:
54:2b:5d:72:d6:8d:89:20:58:d8:fa:a8:e3:cd:47:18:bf:dd:
e9:eb:70:b2:26:eb:30:1f:85:9c:76:ca:8e:8e:d2:92:c6:e4:
0b:ad:a4:87:67:07:15:db:6c:71:fd:8b:9a:6f:53:92:67:9a:
25:17:2f:11:b1:04:39:24:25:99:41:d7:5a:d3:3e:f6:0e:94:
8f:93:8e:93:8b:72:c7:40:ae:2a:e1:d3:58:2a:68:d9:76:b2:
30:50:8e:4a:79:79:08:0f:d7:16:fb:62:fd:d0:a9:f5:de:69:
bf:52:ab:d0:0a:b0:ba:2c:90:41:64:41:a1:68:ec:f2:3b:ed:
83:9b:64:71:59:38:bc:ca:9a:aa:77:54:3d:41:c7:28:4d:09:
86:86:0f:94:d9:48:ff:50:42:03:99:24:18:94:52:29:9e:43:
5a:c8:08:92:2d:f5:39:ab:0c:7e:6a:65:9b:69:16:f7:a0:b6:
0e:9e:41:5a:d0:e8:30:3a:8f:da:09:5c:ae:ee:eb:b1:b4:e5:
de:2f:7f:fa:92:36:1a:4a:fb:9e:e6:c8:f8:02:6e:34:bf:b2:
f3:1c:58:ef:03:3f:57:53:53:40:5e:ff:2d:81:eb:a0:19:29:
da:bd:41:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:40:56 2026 by rpki-client