
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F41921E6721311EFA9D7CA3AC4F9AE02.roa
File: F41921E6721311EFA9D7CA3AC4F9AE02.roa (raw, json)
Hash identifier: lM8xvfrFyXe14uxQy6xnomonD7DUaAhexsT6qlzTJQE=
Subject key identifier: 98:2D:DA:0E:6B:FF:19:20:B7:40:CC:84:A0:69:6C:84:0D:6D:E7:E7
Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial: 025F
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F41921E6721311EFA9D7CA3AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:17:05 +0000
ROA not before: Wed 31 Dec 2025 04:24:32 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 150410
IP address blocks: 202.29.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 607 (0x25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Validity
Not Before: Dec 31 04:24:32 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a490b1-c9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:18:2b:20:05:57:a1:96:3b:0e:7d:5c:a3:8c:
f0:d7:38:cf:41:88:fd:7f:a2:72:8b:33:4e:a7:5f:
32:c3:c1:19:59:90:5a:19:19:e8:d1:8d:12:6c:92:
3a:17:f5:32:cf:70:be:a5:d7:87:58:d8:9d:c7:74:
10:4b:e3:f0:2e:f6:f8:e1:56:5f:d3:2e:0b:25:20:
98:5d:79:6f:a7:97:65:65:2f:78:6e:59:d2:22:7c:
25:9d:db:cf:e9:1d:1f:f2:c7:f4:82:6b:ba:3b:0e:
ba:52:94:3e:ba:2e:9f:39:47:3a:fa:99:91:64:9c:
54:16:16:29:18:25:f0:8a:4e:f3:2e:fc:8a:76:9d:
f0:b4:38:cd:ef:4a:54:ad:53:04:7d:4f:61:54:85:
dd:7d:ac:07:a3:5c:9d:61:6c:78:de:2f:b7:0f:ec:
87:40:ee:af:e8:b9:4d:ae:7d:50:85:20:65:38:50:
b0:db:47:a3:ce:5a:55:8d:76:5e:a7:ce:f2:ed:57:
25:5e:fc:25:fa:03:b5:9d:c1:8c:c3:a4:eb:6c:e6:
da:11:04:b3:ba:72:a9:dc:2d:59:4e:87:5c:98:9d:
8d:ee:65:42:ea:6f:4f:d2:d7:99:12:41:2b:72:d9:
59:5e:4b:2a:09:56:25:e0:84:9c:cf:35:45:1b:63:
49:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2D:DA:0E:6B:FF:19:20:B7:40:CC:84:A0:69:6C:84:0D:6D:E7:E7
X509v3 Authority Key Identifier:
keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F41921E6721311EFA9D7CA3AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.29.93.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:44:ae:38:b3:30:46:33:63:15:11:da:37:ae:e9:ed:bb:b5:
67:03:27:d4:48:df:92:9d:9e:d6:f0:d3:79:9d:41:3c:20:10:
db:c5:23:08:8d:f6:46:09:c6:19:14:b4:9b:1b:06:66:2e:69:
14:36:68:a9:95:8f:8c:40:1d:07:92:67:6c:63:94:d4:5b:fc:
86:1f:36:c6:0c:d8:fb:42:01:e0:c5:68:3d:ca:ae:c7:84:db:
ae:10:d2:2c:b3:af:3a:96:4f:f0:4a:f7:07:6b:8e:38:30:b2:
19:a8:d3:52:34:c6:71:20:56:f8:81:47:ae:7a:83:76:27:2a:
9f:4a:b0:21:53:76:c1:b8:ff:ad:b1:f0:c0:a3:80:37:3b:d2:
8b:49:56:bd:a9:cc:d7:39:55:82:33:2f:93:c0:b4:f9:d4:bc:
13:04:83:8d:4b:c2:08:ad:b8:09:e0:22:4b:75:9e:ed:2b:57:
5c:42:f4:ef:3e:ba:49:97:e0:f6:42:08:ec:e7:18:c7:ad:77:
ac:02:b1:7a:bb:b5:10:3e:00:76:1c:a7:48:43:9d:16:49:c6:
85:af:2e:98:d8:7b:93:04:af:8c:cd:e5:08:60:a6:80:48:bb:
1b:51:c9:c4:15:d8:eb:11:46:fd:57:cf:8d:72:d1:48:55:bd:
4b:0a:8e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:38:48 2026 by rpki-client