
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/0C2077B6D1B511EF944F205DC4F9AE02.roa
File: 0C2077B6D1B511EF944F205DC4F9AE02.roa (raw, json)
Hash identifier: B0zzX5iDXgPapsRrYTYWSQgEs4jb8ZthX/Rm+C+DCPI=
Subject key identifier: 74:9E:7F:A3:C7:EB:B5:F2:FE:74:A7:03:E4:73:17:D1:ED:4A:FA:98
Certificate issuer: /CN=A91A9083/serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA
Certificate serial: E5
Authority key identifier: E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/0C2077B6D1B511EF944F205DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:57:15 +0000
ROA not before: Mon 11 Aug 2025 12:13:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134351
IP address blocks: 23.81.40.0/21 maxlen: 21
23.106.224.0/21 maxlen: 21
142.91.104.0/23 maxlen: 23
142.91.106.0/23 maxlen: 23
142.91.108.0/22 maxlen: 22
173.234.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl
rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:52:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229 (0xe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9083, serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA
Validity
Not Before: Aug 11 12:13:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3e34b-2677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7b:14:75:8f:98:2d:2b:86:dc:7f:d8:2b:9d:
93:9a:63:03:81:c0:2a:0a:e2:81:42:5f:3a:4a:3c:
e3:b5:53:b8:c5:ed:0b:3d:8d:cb:66:ea:f5:99:33:
b4:84:e9:cb:21:43:7e:21:a2:6b:dd:eb:5b:6d:77:
ef:90:d2:47:c1:f5:8b:2d:4e:ec:91:ff:0c:ee:02:
f2:2c:af:8f:84:a2:bb:27:ca:52:61:00:4d:1c:8e:
6e:88:d4:c5:f6:a1:8f:0b:f2:09:a5:93:bb:55:4b:
4e:4e:da:e3:97:96:4f:f7:90:a0:4d:b7:c1:e7:d6:
03:3d:f4:cf:91:23:75:91:dd:8b:b8:c3:6b:52:33:
47:27:22:36:6a:85:b3:17:87:05:60:36:4c:a1:51:
25:b4:65:67:ee:72:b8:82:31:20:97:3f:ce:bd:ca:
f3:a8:3c:66:b8:5a:a1:d5:b6:f0:a5:4e:c6:bc:bb:
f0:96:b0:23:5c:ad:d7:89:d5:7a:c6:84:64:e5:30:
43:35:63:27:cb:28:a3:69:ae:57:95:d2:a1:85:5a:
39:33:19:bb:1c:1a:c0:7b:54:1f:70:74:22:ea:ea:
6f:cc:e7:e1:90:df:ef:9e:47:e3:48:d2:83:3a:6f:
29:05:bf:b8:a3:31:12:e4:21:be:75:c7:20:06:ff:
d4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9E:7F:A3:C7:EB:B5:F2:FE:74:A7:03:E4:73:17:D1:ED:4A:FA:98
X509v3 Authority Key Identifier:
keyid:E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/0C2077B6D1B511EF944F205DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
23.81.40.0/21
23.106.224.0/21
142.91.104.0/21
173.234.64.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:81:ca:1c:15:3e:c5:f0:6b:e4:32:28:d7:3f:ea:77:72:29:
98:62:2d:98:73:5e:19:bc:44:9b:55:42:8a:d3:df:08:e6:49:
b1:8e:94:e8:ce:9a:65:a4:63:8f:10:b2:ce:32:f9:f2:63:30:
7f:2c:54:57:e4:ac:67:a8:79:3d:d7:9f:2d:1b:6d:d8:36:78:
d3:c4:a1:36:23:98:0a:c2:f3:7c:d8:67:b9:c9:de:5c:e7:fe:
f0:2d:2d:36:c0:46:8d:c2:b0:51:b9:cc:39:9b:bf:67:ac:40:
ae:c9:cd:58:a7:2b:5c:f8:30:bc:14:eb:2d:71:57:84:ea:23:
df:a4:e2:5e:aa:6c:f4:11:09:6d:40:ea:2c:64:32:00:13:b8:
fd:5e:b8:91:fd:30:19:bf:1d:31:bb:6c:e0:84:b9:2f:8c:2b:
41:8c:16:c7:14:ec:dd:fa:18:70:19:da:2e:97:1c:4f:65:16:
fd:f6:94:af:85:7a:6b:f5:72:e6:79:40:58:c2:ec:ee:50:51:
cd:b4:ac:10:45:60:49:14:ff:d6:a7:ed:7f:68:72:51:2b:61:
98:46:c9:a6:85:1c:04:2e:61:ea:cc:44:54:66:17:fe:fb:1b:
ae:78:b4:e4:75:3c:56:1f:a2:9a:22:16:bc:89:20:63:78:a6:
4d:ab:3f:db
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTkwODMxMTAvBgNVBAUTKEU4Q0YyMkEwOEU0MzkxQ0FEMTUwRkEzMUI0NERDOTND
OEFCODI1RUEwHhcNMjUwODExMTIxMzA3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZTM0Yi0yNjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvnsUdY+YLSuG3H/YK52TmmMDgcAqCuKBQl86SjzjtVO4xe0LPY3LZur1mTO0
hOnLIUN+IaJr3etbbXfvkNJHwfWLLU7skf8M7gLyLK+PhKK7J8pSYQBNHI5uiNTF
9qGPC/IJpZO7VUtOTtrjl5ZP95CgTbfB59YDPfTPkSN1kd2LuMNrUjNHJyI2aoWz
F4cFYDZMoVEltGVn7nK4gjEglz/OvcrzqDxmuFqh1bbwpU7GvLvwlrAjXK3XidV6
xoRk5TBDNWMnyyijaa5XldKhhVo5Mxm7HBrAe1QfcHQi6upvzOfhkN/vnkfjSNKD
Om8pBb+4ozES5CG+dccgBv/UZwIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFHSef6PH
67Xy/nSnA+RzF9HtSvqYMB8GA1UdIwQYMBaAFOjPIqCOQ5HK0VD6MbRNyTyKuCXq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTA4My9DMDZGMkU0MkQx
QjAxMUVGODgzM0M5MzNDNEY5QUUwMi82TThpb0k1RGtjclJVUG94dEUzSlBJcTRK
ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzZNOGlvSTVEa2NyUlVQb3h0RTNKUElxNEplby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTkwODMvQzA2RjJFNDJEMUIwMTFFRjg4MzNDOTMzQzRGOUFFMDIvMEMyMDc3QjZE
MUI1MTFFRjk0NEYyMDVEQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe
BAIAATAYAwQDF1EoAwQDF2rgAwQDjltoAwQCrepAMA0GCSqGSIb3DQEBCwUAA4IB
AQCigcocFT7F8GvkMijXP+p3cimYYi2Yc14ZvESbVUKK098I5kmxjpTozpplpGOP
ELLOMvnyYzB/LFRX5KxnqHk9158tG23YNnjTxKE2I5gKwvN82Ge5yd5c5/7wLS02
wEaNwrBRucw5m79nrECuyc1Ypytc+DC8FOstcVeE6iPfpOJeqmz0EQltQOosZDIA
E7j9XriR/TAZvx0xu2zghLkvjCtBjBbHFOzd+hhwGdoulxxPZRb99pSvhXpr9XLm
eUBYwuzuUFHNtKwQRWBJFP/Wp+1/aHJRK2GYRsmmhRwELmHqzERUZhf++xuueLTk
dTxWH6KaIha8iSBjeKZNqz/b
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:51 2026 by rpki-client