
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/583C1F6854F611E79DF7E643C4F9AE02.roa
File: 583C1F6854F611E79DF7E643C4F9AE02.roa (raw, json)
Hash identifier: +rkvcv94NMaYampI+fYTUB0c8pEWY+GEMSJjHTOiOXE=
Subject key identifier: C0:97:C1:D5:82:F5:A1:AC:EB:66:27:22:59:51:FB:83:53:E3:E7:E1
Certificate issuer: /CN=A91B80BD/serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0
Certificate serial: 3180
Authority key identifier: A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/583C1F6854F611E79DF7E643C4F9AE02.roa
Signing time: Tue 22 Sep 2026 16:20:21 +0000
ROA not before: Tue 22 Sep 2026 16:20:21 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 187
IP address blocks: 203.119.88.0/23 maxlen: 24
2001:dd8:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.crl
rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 15:27:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12672 (0x3180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B80BD, serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0
Validity
Not Before: Sep 22 16:20:21 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ab2aac5-10b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fd:be:c7:d4:ca:38:cc:f1:3b:dd:19:e6:66:
11:e2:c1:04:a4:b9:ea:13:1a:6c:c4:5f:ae:dc:77:
be:c7:a9:4f:81:9a:4d:07:ee:5c:a5:9a:dc:60:36:
1c:ab:49:53:9a:b4:3b:58:f6:b1:0b:ce:96:39:b7:
af:89:23:b1:09:79:ec:73:02:fc:65:d5:eb:1d:4a:
ca:bd:b9:ce:0a:f7:ef:44:44:6f:13:8f:c5:0b:68:
6a:c8:ff:72:24:24:8b:a1:6c:b8:72:09:e5:69:55:
28:1b:f9:50:cf:da:a0:e5:78:59:7c:5b:59:bb:2c:
d8:44:5e:71:53:7c:b7:5b:78:c5:66:5c:15:1e:d7:
56:7b:be:30:65:5b:55:27:be:2d:50:ff:2b:b5:fd:
a2:68:40:29:77:82:bf:c1:bd:fc:9c:77:50:58:69:
6d:61:ec:1c:22:b6:e6:37:5f:be:ef:fa:ea:9b:f4:
c0:cf:5c:55:13:5e:8d:17:ea:8c:82:1b:23:8e:2e:
26:66:0c:bb:b2:94:42:bc:0e:2f:9e:7b:ba:6c:62:
3e:67:a1:87:d9:ae:d8:91:d8:d0:1f:a5:53:4c:93:
a6:50:49:b2:6b:ee:a0:f9:bd:10:72:0b:bb:6e:f2:
eb:ef:c7:fc:94:1e:d6:5c:65:7d:0c:68:51:5b:f3:
85:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:97:C1:D5:82:F5:A1:AC:EB:66:27:22:59:51:FB:83:53:E3:E7:E1
X509v3 Authority Key Identifier:
keyid:A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/583C1F6854F611E79DF7E643C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.119.88.0/23
IPv6:
2001:dd8:7::/48
Signature Algorithm: sha256WithRSAEncryption
75:90:49:03:82:21:05:37:fa:6c:da:e5:ab:46:0f:0c:a8:9d:
d3:2f:fc:8b:4b:01:b5:0e:9a:05:38:1f:78:1b:fa:e2:7d:6b:
51:64:57:ad:f7:79:8f:96:a1:73:03:a0:24:8c:42:1e:a3:c9:
28:b2:49:f1:fb:d5:33:51:fe:c9:7a:f9:1c:94:72:65:a1:3e:
4f:01:81:b5:91:46:fb:29:e7:40:ad:34:ff:c0:59:ed:28:a1:
64:45:2f:31:a4:5c:d3:61:f9:8c:7c:eb:ed:0a:bf:21:50:32:
a4:26:65:2b:5b:e9:d7:2b:30:32:92:52:6c:dd:24:a9:30:49:
05:ba:27:16:5c:b2:e9:c8:45:4a:56:bc:91:80:c3:5c:ef:47:
8b:29:48:d8:86:4d:42:4e:ed:44:80:b3:4b:0e:f4:62:12:88:
67:3f:f2:7b:2b:3f:cb:13:7b:68:e4:31:4e:82:bc:1b:55:ce:
1f:3c:82:87:7a:cf:90:62:32:57:b3:a6:f7:86:8e:00:8f:50:
3f:79:3e:53:4a:19:e6:69:47:cb:ff:c5:c7:d9:96:c0:4e:fe:
3e:f5:f7:32:0e:d3:07:58:c0:e0:4b:85:25:f8:af:66:e8:a7:
43:00:16:3c:c9:ef:af:d9:1c:0c:a2:cf:46:66:4c:71:7d:47:
ce:8c:5f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:00:02 2026 by rpki-client