
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/3014B5BC86D011F08795B91FC4F9AE02.roa
File: 3014B5BC86D011F08795B91FC4F9AE02.roa (raw, json)
Hash identifier: icWxf2EeuNRrL9AzCEZgALKnzPw6palewZWFR0NzHmQ=
Subject key identifier: F1:AF:73:4B:39:71:5E:46:6A:FB:02:B7:A8:0A:3D:34:E0:2B:53:FF
Certificate issuer: /CN=A91AC567/serialNumber=856BC19FEEBEB0B5595F03BB121483E53A8103CC
Certificate serial: 62
Authority key identifier: 85:6B:C1:9F:EE:BE:B0:B5:59:5F:03:BB:12:14:83:E5:3A:81:03:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/3014B5BC86D011F08795B91FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:13:42 +0000
ROA not before: Mon 01 Sep 2025 06:36:25 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 154189
IP address blocks: 202.66.182.0/24 maxlen: 24
2001:df6:1240::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl
rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:27:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC567, serialNumber=856BC19FEEBEB0B5595F03BB121483E53A8103CC
Validity
Not Before: Sep 1 06:36:25 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a3f536-8616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c8:52:e7:2a:48:a0:29:91:6e:5a:74:2a:04:
a3:e0:8d:ce:4e:6f:85:24:b0:12:74:27:c0:a7:0f:
f4:c4:75:de:c1:bf:2f:08:3e:1a:10:eb:4f:8d:a5:
5f:76:40:03:24:c9:c1:e1:77:8b:ab:e7:aa:42:3b:
55:f0:ca:e4:6d:59:bf:71:4f:94:a5:7a:f5:fe:3e:
27:1c:e3:e9:ed:2d:f2:df:24:d3:77:36:65:73:61:
0a:22:a9:c1:46:cd:67:df:11:73:d1:45:d3:f1:fa:
bb:fd:b5:c1:5f:40:4c:09:89:fb:61:3f:49:2f:fe:
50:85:48:77:1f:6c:ad:2f:2c:6f:5e:dc:c8:6b:d5:
78:2d:ec:ae:bf:80:c2:12:ac:c0:77:7c:ed:2b:1e:
64:91:a5:05:b5:d3:35:70:0f:e5:95:8e:7d:f6:98:
a2:63:df:d5:e8:d2:ce:06:8a:a9:25:c7:85:a8:b1:
20:9b:19:8e:b4:83:02:48:86:2b:88:fa:a9:73:b2:
81:97:dd:1d:a8:9e:64:73:27:65:05:e3:15:c4:a4:
e1:16:71:1a:2d:f4:63:7b:97:93:9d:48:e3:b9:89:
9d:c8:3e:ba:43:32:9b:94:ae:3d:8a:f1:c5:06:ac:
1b:73:91:97:91:34:7b:70:f0:da:cb:3b:42:34:98:
1f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AF:73:4B:39:71:5E:46:6A:FB:02:B7:A8:0A:3D:34:E0:2B:53:FF
X509v3 Authority Key Identifier:
keyid:85:6B:C1:9F:EE:BE:B0:B5:59:5F:03:BB:12:14:83:E5:3A:81:03:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/3014B5BC86D011F08795B91FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.66.182.0/24
IPv6:
2001:df6:1240::/48
Signature Algorithm: sha256WithRSAEncryption
3e:ea:7e:d6:4e:cf:43:b0:85:ac:36:18:48:31:0d:20:9f:8d:
8d:4f:d6:95:bf:de:a3:1f:84:2e:2a:39:ab:61:eb:6c:cc:a7:
87:11:d8:69:20:54:de:dc:ad:06:c4:a7:4b:0d:2d:81:04:0f:
9c:3c:ee:86:8a:05:98:e9:9a:81:99:83:29:45:f4:d9:b4:72:
e1:2d:46:93:e1:fd:cd:bd:c0:4f:89:d5:8c:37:34:45:d4:7b:
e9:6e:98:fb:4b:88:d7:90:11:1b:56:13:3b:78:85:15:81:9e:
0c:e0:22:b5:9a:7e:f9:74:9c:8c:b0:42:ba:49:81:d5:1c:4e:
e7:c1:47:cd:f3:a0:26:b1:e4:a5:a7:bc:01:de:39:7f:4d:57:
42:bc:5a:62:eb:dc:df:15:91:57:32:b1:69:4b:3d:30:9a:09:
7b:7d:60:d6:d6:27:82:24:1f:e5:39:d5:11:2d:37:dc:ee:ca:
41:d7:e6:9f:a7:9d:cf:4a:d6:e2:b0:0d:2f:7c:fc:1f:6c:88:
97:38:93:0c:6d:ad:b8:9b:11:1b:76:bf:d2:66:d5:29:9f:e6:
03:71:2c:58:dd:03:07:2e:79:6e:da:a5:c6:0f:cf:f5:80:26:
04:5e:e6:1b:e8:b7:55:8a:d1:b3:91:58:da:ce:5e:8c:61:9c:
9d:1c:01:0b
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
QzU2NzExMC8GA1UEBRMoODU2QkMxOUZFRUJFQjBCNTU5NUYwM0JCMTIxNDgzRTUz
QTgxMDNDQzAeFw0yNTA5MDEwNjM2MjVaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNmNTM2LTg2MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDIyFLnKkigKZFuWnQqBKPgjc5Ob4UksBJ0J8CnD/TEdd7Bvy8IPhoQ60+NpV92
QAMkycHhd4ur56pCO1XwyuRtWb9xT5SlevX+Picc4+ntLfLfJNN3NmVzYQoiqcFG
zWffEXPRRdPx+rv9tcFfQEwJifthP0kv/lCFSHcfbK0vLG9e3Mhr1Xgt7K6/gMIS
rMB3fO0rHmSRpQW10zVwD+WVjn32mKJj39Xo0s4Giqklx4WosSCbGY60gwJIhiuI
+qlzsoGX3R2onmRzJ2UF4xXEpOEWcRot9GN7l5OdSOO5iZ3IPrpDMpuUrj2K8cUG
rBtzkZeRNHtw8NrLO0I0mB+PAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQU8a9zSzlx
XkZq+wK3qAo9NOArU/8wHwYDVR0jBBgwFoAUhWvBn+6+sLVZXwO7EhSD5TqBA8ww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNTY3LzQwRUYyRkQwODZD
RjExRjBCODcwN0E1NEM0RjlBRTAyL2hXdkJuLTYtc0xWWlh3TzdFaFNENVRxQkE4
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaFd2Qm4tNi1zTFZaWHdPN0VoU0Q1VHFCQTh3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QzU2Ny80MEVGMkZEMDg2Q0YxMUYwQjg3MDdBNTRDNEY5QUUwMi8zMDE0QjVCQzg2
RDAxMUYwODc5NUI5MUZDNEY5QUUwMi5yb2EwMAYIKwYBBQUHAQcBAf8EITAfMAwE
AgABMAYDBADKQrYwDwQCAAIwCQMHACABDfYSQDANBgkqhkiG9w0BAQsFAAOCAQEA
Pup+1k7PQ7CFrDYYSDENIJ+NjU/Wlb/eox+ELio5q2HrbMynhxHYaSBU3tytBsSn
Sw0tgQQPnDzuhooFmOmagZmDKUX02bRy4S1Gk+H9zb3AT4nVjDc0RdR76W6Y+0uI
15ARG1YTO3iFFYGeDOAitZp++XScjLBCukmB1RxO58FHzfOgJrHkpae8Ad45f01X
QrxaYuvc3xWRVzKxaUs9MJoJe31g1tYngiQf5TnVES033O7KQdfmn6edz0rW4rAN
L3z8H2yIlziTDG2tuJsRG3a/0mbVKZ/mA3EsWN0DBy55btqlxg/P9YAmBF7mG+i3
VYrRs5FY2s5ejGGcnRwBCw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:21:06 2026 by rpki-client