
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/9F0BF8AE48C711ECAA1A222EC4F9AE02.roa
File: 9F0BF8AE48C711ECAA1A222EC4F9AE02.roa (raw, json)
Hash identifier: k7pNWs8rxOIJwQwNSf++pyf5UhHis3rC6IchuHrW/pQ=
Subject key identifier: 06:9D:D7:AD:DB:03:AB:82:A2:C6:BD:41:B2:22:4B:E7:6F:40:B8:6B
Certificate issuer: /CN=A91B9B37/serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F
Certificate serial: 0507
Authority key identifier: 47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/9F0BF8AE48C711ECAA1A222EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:12:31 +0000
ROA not before: Fri 03 Oct 2025 00:25:19 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 45768
IP address blocks: 202.129.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl
rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:48:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1287 (0x507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9B37, serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F
Validity
Not Before: Oct 3 00:25:19 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4575f-345f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a8:32:63:35:73:7e:22:a0:fb:8e:ec:dd:cb:
e8:a3:6a:78:20:fb:b9:d3:62:82:4c:2a:92:78:7f:
4c:c8:b8:56:1f:82:76:e6:4d:48:92:6f:b1:9b:84:
67:39:59:7a:d4:73:68:3b:41:87:0a:c5:e0:1a:68:
99:33:f9:1d:e8:7f:59:87:76:48:de:f7:d1:9d:a0:
3b:e0:f7:99:a7:dc:9e:9a:5c:92:96:56:f6:d0:a5:
c1:da:cd:18:06:98:c5:4e:23:2c:8f:c9:1d:ac:3c:
9a:87:cf:55:64:16:16:fe:05:20:15:ee:bf:8b:6f:
52:1b:e3:6d:b4:9f:9a:35:92:9e:0a:31:f4:c4:a1:
cd:ed:9e:e2:5f:fd:9f:f2:48:a8:d5:53:ca:50:bc:
8c:b5:e8:f7:5b:f1:77:c2:2a:3b:46:3b:78:59:b0:
ee:f4:a7:99:b3:26:f9:51:75:72:2e:14:29:94:ee:
9b:36:b4:97:f7:81:f8:29:70:6a:69:92:7c:57:24:
08:7d:23:eb:b0:14:61:58:77:2c:4b:a1:1e:fd:69:
44:18:6f:63:e6:7f:ab:a6:b3:d5:a7:fe:f3:2a:d3:
0f:ea:2f:a8:a2:0c:d3:db:f3:e2:d6:cf:75:77:27:
0b:9e:b8:28:c7:f5:bc:5a:df:d1:11:bb:dd:2b:ed:
8a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9D:D7:AD:DB:03:AB:82:A2:C6:BD:41:B2:22:4B:E7:6F:40:B8:6B
X509v3 Authority Key Identifier:
keyid:47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/9F0BF8AE48C711ECAA1A222EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.129.252.0/24
Signature Algorithm: sha256WithRSAEncryption
37:71:44:e5:85:56:06:2d:6f:c1:2a:30:40:4f:d5:8c:fc:ba:
fb:ea:22:9c:81:23:92:b5:64:5c:9c:ad:90:21:f5:75:34:6f:
5b:26:00:21:29:64:30:7b:d3:67:94:d9:24:39:fc:c2:6f:fb:
32:c3:b7:72:43:94:de:aa:07:60:bc:fa:ae:6e:95:f8:28:01:
89:f4:d7:29:4f:a8:44:4b:e5:ae:4d:fd:4c:ed:31:99:3e:93:
cc:4e:1d:b5:0f:55:32:5d:a6:7b:11:92:4b:b8:2a:a7:27:4a:
ee:2e:b0:c6:01:6a:47:e2:3b:c2:1a:fa:a7:42:5a:15:b1:73:
b6:7e:e7:51:56:c6:38:fa:0e:2d:ca:34:68:2c:c5:34:ab:69:
84:2e:bc:a9:a3:5e:8d:8c:10:92:5d:25:59:c9:86:86:f7:46:
22:e6:b6:86:24:18:a6:6f:6f:a3:7a:5b:6c:f6:28:09:a2:b8:
e3:ef:ad:82:a8:e3:f0:80:e7:d1:4f:8f:00:38:b0:a5:a5:36:
f5:72:aa:8a:ef:1c:76:df:9a:49:2a:b1:60:68:5f:e3:09:3f:
19:f1:af:67:75:d5:71:ba:15:82:17:8f:71:a7:5d:78:19:16:
99:6e:ef:60:4c:92:b9:16:1c:21:1f:0c:6a:bc:6c:e9:38:2d:
86:93:16:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:51:31 2026 by rpki-client