
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EE93C5C6721A11EFBDE87567C4F9AE02.roa
File: EE93C5C6721A11EFBDE87567C4F9AE02.roa (raw, json)
Hash identifier: mV2VgvYQv237B5yQ+qB7358rFKMQxF1HzLt8qLjCC+4=
Subject key identifier: 55:24:DC:CA:7E:6F:13:F6:D0:00:2A:93:6A:B5:EC:7D:3D:B7:77:5C
Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial: 0243
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EE93C5C6721A11EFBDE87567C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:16:40 +0000
ROA not before: Wed 31 Dec 2025 04:24:07 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 132493
IP address blocks: 202.29.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 579 (0x243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Validity
Not Before: Dec 31 04:24:07 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a49098-64d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:80:ac:da:81:6b:78:f4:8d:9b:92:d0:18:6f:
97:31:b2:f5:91:5d:15:b9:4e:1d:c8:16:51:c8:1e:
8f:24:ad:82:ef:7a:b4:c8:b3:ae:b5:c9:c6:7b:f3:
a5:ed:3f:03:46:a6:9a:06:62:b3:f8:1d:e2:db:2e:
7f:29:57:f2:12:f8:dc:8a:2c:96:67:f0:a5:d4:8a:
73:15:0e:d4:55:86:62:5e:52:b1:31:cd:15:2a:05:
aa:e1:e0:aa:ab:c9:3d:d5:47:62:69:9f:6f:a0:e7:
bd:6c:93:ca:0b:8b:f4:63:b5:ce:b6:2f:9a:41:33:
d9:49:a1:fa:6a:72:3a:20:7f:f7:e0:4d:47:9e:aa:
2f:75:6a:c3:5a:bc:d5:50:2b:d2:d9:e6:6b:16:7e:
96:41:d4:24:02:5c:55:b0:40:d3:ef:ad:b4:f5:68:
27:de:d2:bf:41:63:d8:fc:f6:02:78:39:a7:00:e6:
b9:43:14:db:d7:4f:bb:dd:f1:b6:e7:62:04:e5:d2:
48:1b:e1:65:1d:67:5a:a2:5f:10:79:f2:69:b6:ac:
62:f1:fb:15:6a:f6:53:a4:9e:97:ff:06:cf:2a:da:
a8:68:89:47:64:de:bc:7c:ec:47:48:ab:92:81:be:
54:a6:e0:3a:76:16:56:94:ac:18:51:c3:97:43:35:
50:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:24:DC:CA:7E:6F:13:F6:D0:00:2A:93:6A:B5:EC:7D:3D:B7:77:5C
X509v3 Authority Key Identifier:
keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EE93C5C6721A11EFBDE87567C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.29.58.0/24
Signature Algorithm: sha256WithRSAEncryption
43:d4:77:45:72:2b:c2:26:8c:18:06:f1:06:59:27:d4:ad:ef:
05:26:7e:75:cc:14:1c:67:f6:72:3d:61:a5:5f:b3:af:89:51:
5f:f1:f2:3b:b4:95:85:3b:ab:7c:89:99:1d:6d:f6:78:85:c9:
14:52:cb:c7:2c:e8:75:f2:92:46:ec:26:13:3f:14:38:9d:08:
2d:89:ab:0d:c5:83:32:80:6b:94:df:73:d5:d6:01:42:a7:cf:
dc:91:a3:be:59:2d:21:5e:db:c6:7b:42:b5:b8:c7:df:d7:7d:
18:1a:9c:6e:fb:58:99:33:8b:7c:df:70:3a:ff:f1:13:a2:fb:
ae:3a:47:a4:43:06:30:af:c6:72:db:37:b4:6e:bd:59:31:3e:
c1:60:0e:03:42:34:6f:54:c9:19:a2:0f:f6:30:5a:eb:99:99:
12:a6:08:9f:a2:83:c4:df:89:4b:10:52:49:8f:ba:b3:64:33:
a4:e4:fc:91:b2:1f:a6:d1:dd:7f:1c:52:50:7b:0a:97:3e:8e:
f0:41:88:70:e2:fd:53:9f:1c:52:15:a5:ea:6e:36:29:a7:50:
ca:1c:97:e7:f0:c1:27:f2:a2:34:12:f0:95:bb:21:77:d5:4e:
b8:79:2f:26:db:be:2b:93:21:f8:76:3a:bd:ca:84:df:8f:be:
9e:88:a5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:01:31 2026 by rpki-client