
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C3ACCF42721511EF9D7B9F3DC4F9AE02.roa
File: C3ACCF42721511EF9D7B9F3DC4F9AE02.roa (raw, json)
Hash identifier: 7KCQH6meLpOVK8/ZJVRG7nvJAq7JQewcs1sltu/6jjk=
Subject key identifier: 2C:F7:74:1E:20:34:BC:11:DE:E0:8A:79:F3:97:D8:02:A7:52:59:BD
Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial: 0251
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C3ACCF42721511EF9D7B9F3DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:16:53 +0000
ROA not before: Wed 31 Dec 2025 04:24:20 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 137394
IP address blocks: 202.28.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 593 (0x251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Validity
Not Before: Dec 31 04:24:20 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a490a5-9c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b8:83:c9:18:b5:92:12:20:a5:88:78:fe:a1:
5e:15:e5:b8:b7:ee:27:2b:f1:77:9b:0c:c0:25:6d:
d3:b5:fa:82:e2:92:28:d4:d8:7d:82:fe:dc:3f:7e:
44:48:87:4d:e8:f8:b8:b2:e5:cb:0c:66:33:73:11:
0f:45:bd:bf:06:01:8a:31:0a:c8:d1:42:72:71:11:
e3:33:fe:58:25:f1:8c:05:90:7c:4e:a0:61:89:f6:
c4:4a:90:4b:2f:09:47:1f:f0:49:92:fd:3e:29:05:
46:a2:a0:13:35:7c:59:ab:e9:a5:1c:de:d5:c0:33:
8a:fe:77:b6:b4:3d:52:e8:b0:a9:97:8c:18:1f:aa:
fe:5d:dd:0b:8e:af:f8:fe:d1:4a:1f:34:1b:ea:1a:
c1:1e:3c:d7:19:78:25:7c:0f:c5:28:9c:d2:8f:36:
4b:5a:31:e8:80:16:ad:f9:79:97:89:34:6a:c9:35:
39:59:ac:83:1a:59:22:e3:8b:55:66:59:16:f3:ed:
f7:4d:28:80:01:d6:1d:e0:12:fb:3e:7d:5a:cf:2a:
a4:e3:9d:9c:10:9d:f0:e3:92:a2:e9:46:62:6c:fa:
a0:e9:ce:dd:02:84:59:66:7c:af:72:b8:e0:cd:5f:
a2:74:d4:57:fe:45:48:3b:76:ed:5e:33:9f:c9:57:
6c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F7:74:1E:20:34:BC:11:DE:E0:8A:79:F3:97:D8:02:A7:52:59:BD
X509v3 Authority Key Identifier:
keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C3ACCF42721511EF9D7B9F3DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.28.54.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:59:ce:8a:40:d2:c0:70:aa:dc:10:e9:76:fb:e5:5f:04:79:
2d:96:58:01:cd:69:15:44:ee:af:96:a8:70:9e:c8:19:b5:85:
2c:9b:73:99:65:b1:ff:d8:f3:af:35:52:1b:3a:72:c3:1b:57:
c6:e9:eb:05:4d:f2:ba:d4:96:24:10:24:aa:73:ca:d5:ce:0d:
fb:53:53:28:ef:16:15:a7:a1:cc:8e:f2:fe:70:bb:a9:c1:ec:
6d:d7:77:e1:40:61:e8:f6:71:99:39:35:72:c3:af:d1:71:5a:
f0:9d:6b:20:77:68:de:e8:98:b7:a4:06:91:8b:6a:bc:73:4e:
19:72:fc:47:de:d4:d6:75:82:2c:1f:0b:6c:80:44:ff:85:ca:
22:f7:c4:1c:f9:f0:b7:42:1c:78:f6:8c:52:d9:4b:90:70:c2:
04:8a:f4:54:30:f2:9e:b3:0c:1a:af:9f:61:bb:01:95:cf:08:
9e:8f:aa:5e:a4:94:07:8a:b4:dc:56:ab:1d:20:90:e2:93:ca:
9a:ee:45:0f:8c:6b:66:74:b4:4d:c9:ae:e9:45:f1:7f:83:f2:
52:dc:fa:50:4f:10:94:6c:4b:0b:cb:9a:d7:72:27:a4:d3:17:
0e:e0:51:d7:a1:f7:b2:6c:5c:b6:17:fb:7e:bf:f0:db:2f:f5:
7b:e4:d3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:16:27 2026 by rpki-client