
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/93215346C57811EA8440684AC4F9AE02.roa
File: 93215346C57811EA8440684AC4F9AE02.roa (raw, json)
Hash identifier: GkrwtuT72dcowf7mU2eU5qvGeobprJWLD2bGtgFry8U=
Subject key identifier: 3D:AA:5E:76:50:22:F0:0A:4D:3D:F4:0E:2C:75:FF:A9:77:FE:83:FB
Certificate issuer: /CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Certificate serial: 3578
Authority key identifier: C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/93215346C57811EA8440684AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:11:11 +0000
ROA not before: Mon 28 Apr 2025 14:50:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132873
IP address blocks: 203.124.190.0/24 maxlen: 24
203.124.191.0/24 maxlen: 24
2401:401::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:47:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13688 (0x3578)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF59C, serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Validity
Not Before: Apr 28 14:50:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a42cdf-1c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d0:cd:91:1f:95:9e:fa:7f:fa:98:57:7d:a0:
44:0a:58:bf:3b:8b:8c:1c:3a:a6:fd:67:fe:82:c5:
30:bf:b8:d5:a7:8a:30:a0:32:d0:3b:72:93:4e:ca:
f3:06:ae:07:40:46:32:6a:d7:1f:ca:28:e7:a2:13:
fe:93:24:c7:bc:19:1d:0e:33:79:01:d6:eb:f9:60:
1f:31:15:b9:d9:b5:9e:2d:d6:26:f7:26:48:91:8e:
da:d4:90:35:d8:87:42:a3:13:75:73:95:d7:4c:b9:
d9:fd:4a:af:c4:92:a3:23:d0:48:9f:70:ee:7d:15:
ea:c9:3f:09:30:62:54:ac:ba:f8:5d:f4:e2:2e:67:
24:19:f5:61:16:d1:16:e4:9e:c2:dc:c8:3a:21:51:
ba:83:96:de:6b:f0:cb:34:f6:5e:ec:d5:91:22:f5:
31:d1:34:23:4a:d4:56:df:21:9f:53:4e:55:cd:59:
fe:45:f9:36:b4:78:80:1a:4d:5c:0a:b0:2d:dd:03:
aa:70:44:2d:25:cc:68:fe:f9:8e:5d:91:ae:09:cb:
d6:0d:a4:76:83:16:c2:fd:b3:f5:28:32:f1:50:c2:
72:46:8b:42:be:aa:fe:cd:7f:cb:da:17:c6:a6:65:
d7:06:c2:f0:fe:0e:5b:d2:cf:b6:7c:be:e9:f2:7d:
8b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AA:5E:76:50:22:F0:0A:4D:3D:F4:0E:2C:75:FF:A9:77:FE:83:FB
X509v3 Authority Key Identifier:
keyid:C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/93215346C57811EA8440684AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.124.190.0/23
IPv6:
2401:401::/32
Signature Algorithm: sha256WithRSAEncryption
ab:83:a5:dd:54:63:b7:cd:65:58:98:c9:8e:bd:93:4f:3c:ab:
c5:a9:c2:43:d5:af:24:d5:5d:a3:3c:5a:dc:bb:12:cb:15:ad:
10:86:54:2f:82:c5:21:4d:af:24:d3:9b:3c:f5:81:a0:88:68:
f4:61:cc:c6:fc:c3:f9:7f:ec:c7:50:fc:49:8c:8e:dd:9d:b3:
b2:68:f4:a5:19:ab:dc:4f:ab:15:68:a8:c0:71:37:8d:08:49:
a1:11:fc:7f:c6:b3:1a:5b:aa:0c:07:04:bd:24:07:57:b7:b6:
d0:4e:1d:34:83:64:ab:12:1b:95:bd:29:b1:de:b7:d8:09:65:
b9:e8:2d:c6:2a:3c:e3:44:6b:31:26:0e:ef:c0:c3:60:38:12:
b7:6d:99:99:e7:aa:e1:55:1e:b6:cc:2c:c4:b9:36:30:88:e6:
db:d9:07:84:70:10:9e:3c:81:da:85:4c:67:15:f4:04:8f:d7:
ba:ac:c1:7e:a8:2d:4f:fd:ae:f9:bc:41:80:ae:b9:3a:84:b6:
af:50:bf:fb:a6:80:81:9c:71:b9:46:10:ab:b4:3b:3d:8f:06:
23:63:f0:b3:50:3e:9b:bd:79:1e:f2:67:4c:b3:b9:17:5d:20:
78:4f:65:92:2a:3a:5c:cd:25:e6:41:e2:a9:23:f2:f8:1b:14:
4c:98:08:1d
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICNXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUY1OUMxMTAvBgNVBAUTKEMxMjk2RkZBRDM0RjI5RjA0RTBFRkFENUQ5MjQ0QzAy
QTdEODdEOEQwHhcNMjUwNDI4MTQ1MDQ2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MmNkZi0xYzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl9DNkR+Vnvp/+phXfaBECli/O4uMHDqm/Wf+gsUwv7jVp4owoDLQO3KTTsrz
Bq4HQEYyatcfyijnohP+kyTHvBkdDjN5Adbr+WAfMRW52bWeLdYm9yZIkY7a1JA1
2IdCoxN1c5XXTLnZ/UqvxJKjI9BIn3DufRXqyT8JMGJUrLr4XfTiLmckGfVhFtEW
5J7C3Mg6IVG6g5bea/DLNPZe7NWRIvUx0TQjStRW3yGfU05VzVn+Rfk2tHiAGk1c
CrAt3QOqcEQtJcxo/vmOXZGuCcvWDaR2gxbC/bP1KDLxUMJyRotCvqr+zX/L2hfG
pmXXBsLw/g5b0s+2fL7p8n2LvQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFD2qXnZQ
IvAKTT30Dix1/6l3/oP7MB8GA1UdIwQYMBaAFMEpb/rTTynwTg761dkkTAKn2H2N
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjU5Qy83MzVEQzRENjFE
OEQxMUUyOUE3NTQzRUIwOEIwMkNEMi93U2x2LXROUEtmQk9EdnJWMlNSTUFxZllm
WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dTbHYtdE5QS2ZCT0R2clYyU1JNQXFmWWZZMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUY1OUMvNzM1REM0RDYxRDhEMTFFMjlBNzU0M0VCMDhCMDJDRDIvOTMyMTUzNDZD
NTc4MTFFQTg0NDA2ODRBQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBy3y+MA0EAgACMAcDBQAkAQQBMA0GCSqGSIb3DQEBCwUAA4IBAQCr
g6XdVGO3zWVYmMmOvZNPPKvFqcJD1a8k1V2jPFrcuxLLFa0QhlQvgsUhTa8k05s8
9YGgiGj0YczG/MP5f+zHUPxJjI7dnbOyaPSlGavcT6sVaKjAcTeNCEmhEfx/xrMa
W6oMBwS9JAdXt7bQTh00g2SrEhuVvSmx3rfYCWW56C3GKjzjRGsxJg7vwMNgOBK3
bZmZ56rhVR62zCzEuTYwiObb2QeEcBCePIHahUxnFfQEj9e6rMF+qC1P/a75vEGA
rrk6hLavUL/7poCBnHG5RhCrtDs9jwYjY/CzUD6bvXke8mdMs7kXXSB4T2WSKjpc
zSXmQeKpI/L4GxRMmAgd
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:20 2026 by rpki-client