
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/F41AA87837C311F1976C4134BE833773.roa
File: F41AA87837C311F1976C4134BE833773.roa (raw, json)
Hash identifier: +641YeMPVXU1XF3EY/Wo8DEhhBoEin7Q7KVnql2z71o=
Subject key identifier: 78:9D:38:17:99:25:73:D4:B8:3A:17:45:25:53:37:0F:5E:85:57:3D
Certificate issuer: /CN=A91B2D85/serialNumber=3DB34CB8B5BD6A99ECF7D52928913E6525A71C5F
Certificate serial: 09
Authority key identifier: 3D:B3:4C:B8:B5:BD:6A:99:EC:F7:D5:29:28:91:3E:65:25:A7:1C:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbNMuLW9apns99UpKJE-ZSWnHF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/F41AA87837C311F1976C4134BE833773.roa
Signing time: Tue 14 Apr 2026 05:36:58 +0000
ROA not before: Tue 14 Apr 2026 05:36:58 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 4764
IP address blocks: 203.23.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.crl
rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbNMuLW9apns99UpKJE-ZSWnHF8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2D85, serialNumber=3DB34CB8B5BD6A99ECF7D52928913E6525A71C5F
Validity
Not Before: Apr 14 05:36:58 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69ddd27a-7bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c8:b7:c4:b5:ac:86:d7:2e:ec:2d:c1:8f:70:
0e:d5:ba:ca:4d:d2:6f:c1:94:ef:1a:19:37:f7:d0:
e6:a8:a2:98:6a:23:11:be:d6:53:72:71:ed:ae:1c:
8a:d5:5d:dd:0d:12:f7:19:45:c3:d0:90:29:82:14:
c0:16:ba:b2:9a:89:cf:44:aa:b7:69:fb:b7:b9:d2:
67:ae:89:83:42:cf:06:43:07:a7:4e:29:1e:e5:fc:
17:3f:b3:77:c9:c7:7e:13:9c:be:66:8d:e2:cd:61:
d8:cd:6e:3a:76:ed:00:03:ea:3a:9e:3f:e1:3e:d4:
5e:e6:42:7a:29:78:c3:aa:c4:06:15:8a:58:4a:b3:
7b:72:8b:b0:35:36:3a:69:a2:59:de:5a:3c:08:c0:
45:8e:0c:09:4e:aa:59:84:56:1c:5e:dc:e9:52:2c:
f6:80:e0:f2:15:4b:74:e7:51:e1:88:e9:85:dc:27:
10:d3:6f:cf:95:08:1d:2c:98:21:96:12:28:f6:26:
83:9f:e2:40:b2:80:eb:a7:a4:66:0a:fd:25:11:b9:
db:31:b3:f8:a5:e4:36:30:e8:2e:56:8a:e8:37:b6:
0a:20:5c:6c:36:7c:08:84:c6:dd:52:cc:08:c0:9d:
a9:a9:65:0c:d7:29:dd:3f:b6:8d:90:eb:ea:bd:9e:
80:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9D:38:17:99:25:73:D4:B8:3A:17:45:25:53:37:0F:5E:85:57:3D
X509v3 Authority Key Identifier:
keyid:3D:B3:4C:B8:B5:BD:6A:99:EC:F7:D5:29:28:91:3E:65:25:A7:1C:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbNMuLW9apns99UpKJE-ZSWnHF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/F41AA87837C311F1976C4134BE833773.roa
sbgp-ipAddrBlock: critical
IPv4:
203.23.118.0/24
Signature Algorithm: sha256WithRSAEncryption
88:4b:d7:f8:75:e0:3f:48:c0:fa:0b:e4:20:04:9d:8f:8b:d1:
63:30:fb:f0:89:ee:3a:25:c2:30:02:a5:e2:36:83:61:e6:d8:
08:24:9f:39:9a:51:8f:06:ca:a5:23:11:4c:49:ca:77:a9:a5:
91:a6:23:6c:fc:62:8a:ca:df:86:62:af:4c:54:7f:3d:71:57:
89:95:8f:5b:6c:63:c0:4c:f0:ce:98:c8:fc:01:db:45:45:34:
d4:46:e2:32:e2:b3:c0:13:82:b3:da:fa:99:96:6c:c1:64:0b:
c7:cd:9d:ef:fc:54:77:2c:12:46:20:56:0a:41:13:28:7f:e8:
ff:c6:fb:1e:79:95:bf:46:48:33:31:95:3e:4d:73:60:c5:0e:
44:22:7a:4f:7e:b4:16:5a:3b:d9:dd:ea:89:48:18:d5:8d:60:
ee:b3:3b:b1:15:0b:92:8a:3d:30:48:a6:2d:42:05:87:ac:45:
da:4b:f4:c1:9d:d9:7f:f4:b4:f2:12:a2:f4:7d:99:c4:04:d6:
f1:08:e0:34:e5:e2:3c:47:b9:94:ea:d1:eb:a4:6e:3b:9f:fe:
3b:c1:a0:64:10:5b:ff:bf:4e:dc:86:5b:a5:19:ea:0c:13:7d:
aa:67:ca:27:38:f1:af:92:7b:6c:fc:fd:f4:1a:35:95:40:c3:
70:f9:03:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:24:41 2026 by rpki-client