
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/D4A8FF0273ED11F08E63C02DC4F9AE02.roa
File: D4A8FF0273ED11F08E63C02DC4F9AE02.roa (raw, json)
Hash identifier: tHMeyTgXVjqu1F3xAY8dG3i7T9LkiFUkLAwr5V1RAGo=
Subject key identifier: 4C:5E:B6:B2:33:EB:0F:A6:61:21:DA:03:C4:29:DB:E8:11:69:5D:F4
Certificate issuer: /CN=A91A9EE2/serialNumber=BA9D2BADA8268784F00AE858702EF8E29E72B4BC
Certificate serial: 3546
Authority key identifier: BA:9D:2B:AD:A8:26:87:84:F0:0A:E8:58:70:2E:F8:E2:9E:72:B4:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/D4A8FF0273ED11F08E63C02DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:52:12 +0000
ROA not before: Thu 12 Feb 2026 15:10:27 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 131248
IP address blocks: 203.20.74.0/23 maxlen: 23
2401:c01::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.crl
rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:42:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13638 (0x3546)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9EE2, serialNumber=BA9D2BADA8268784F00AE858702EF8E29E72B4BC
Validity
Not Before: Feb 12 15:10:27 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a460ac-c638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4f:29:45:23:30:57:d9:8b:91:ce:44:ef:64:
bb:27:d0:e4:7e:05:87:f9:81:be:40:b1:e5:e9:2a:
00:f0:93:1c:f1:60:4b:7f:11:83:14:da:06:d1:cb:
4c:f8:98:4b:45:52:e2:7b:2f:c6:9c:b8:a3:cd:56:
b0:7d:89:04:1a:be:19:e6:0c:05:2d:f1:98:96:cd:
6c:bb:94:97:0e:2b:b6:f7:7c:8b:b8:39:f3:d6:6f:
82:0e:1f:da:37:34:0b:34:44:68:07:dc:5d:17:97:
3a:bb:d7:08:5a:86:66:93:fd:99:b9:9e:7b:e7:66:
b5:24:ee:59:d9:b1:d8:86:72:73:d4:90:63:e7:08:
28:47:c0:09:c9:c7:92:0c:43:cb:a8:04:c4:ce:23:
f8:91:b8:fd:ef:d8:40:d9:72:29:ea:49:47:8d:2e:
a1:fb:09:1d:ab:2f:9b:46:87:95:d9:f1:05:d9:85:
fa:c8:1e:80:26:81:aa:6d:48:c0:af:90:05:14:24:
f6:46:2c:be:a7:5f:5b:43:54:b2:aa:a5:a6:a9:3a:
b5:7a:95:00:e5:aa:5c:9b:96:98:e8:53:3e:8d:40:
39:7c:2e:b5:0a:b1:70:c7:5c:6d:41:84:1c:2a:9b:
99:18:1f:56:fd:fa:0d:80:9a:19:78:9c:b8:13:2e:
bd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5E:B6:B2:33:EB:0F:A6:61:21:DA:03:C4:29:DB:E8:11:69:5D:F4
X509v3 Authority Key Identifier:
keyid:BA:9D:2B:AD:A8:26:87:84:F0:0A:E8:58:70:2E:F8:E2:9E:72:B4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/D4A8FF0273ED11F08E63C02DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.20.74.0/23
IPv6:
2401:c01::/32
Signature Algorithm: sha256WithRSAEncryption
44:eb:46:4c:e6:bf:60:17:de:83:94:af:8a:ad:d1:c2:0f:16:
bc:68:db:9e:cf:1b:1a:23:3f:ee:63:34:40:d3:30:f4:2f:af:
44:e0:de:20:d0:89:3f:50:68:0b:81:85:4a:4a:3e:d6:a1:90:
3a:39:08:5e:48:d5:33:30:6f:d3:4b:f8:8d:01:12:05:a9:ee:
8c:4c:dc:72:21:64:83:a1:af:20:52:3c:d1:1c:2d:25:bd:64:
b5:d6:0a:1d:6b:d6:37:f5:fd:ca:45:30:17:38:d0:65:ad:77:
3d:52:6c:cc:b2:e7:58:22:60:43:7e:7e:1b:da:93:9c:e2:34:
0a:a6:73:01:14:b0:16:a0:0c:44:12:f7:aa:73:d4:73:ae:94:
8c:bb:40:6a:90:48:f1:d3:d6:6a:be:55:a1:5b:ca:f4:b0:cb:
c3:0e:c4:be:dd:46:60:a5:2d:3b:32:15:c7:0a:2f:74:bb:df:
97:1e:7b:03:01:56:79:d2:49:62:16:65:4b:af:b2:fb:77:bb:
40:52:f3:c4:60:89:86:d6:12:94:c6:e5:0b:77:26:6d:c3:04:
20:51:bc:9e:e2:72:1c:33:3e:a5:62:75:f8:c5:9c:8d:99:3e:
39:79:92:58:47:96:7f:86:83:78:f9:5e:56:d1:2e:f2:a6:02:
6c:2a:eb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:56 2026 by rpki-client