
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/DB701E584E6311EEBED9743CC4F9AE02.roa
File: DB701E584E6311EEBED9743CC4F9AE02.roa (raw, json)
Hash identifier: Ks6wPXQrbbeCTTlosIDswm4J7H1L/F650F9YqKuuo/A=
Subject key identifier: 3A:17:7A:DE:0C:B2:85:FE:9C:97:E1:1B:E9:EA:87:5F:00:C0:82:7F
Certificate issuer: /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial: 0B21
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/DB701E584E6311EEBED9743CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:50:31 +0000
ROA not before: Wed 26 Mar 2025 19:59:50 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 10204
IP address blocks: 203.78.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2849 (0xb21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Validity
Not Before: Mar 26 19:59:50 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a47c66-85dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:60:a0:0b:20:52:76:9f:1b:d6:63:3e:ae:d9:
e6:76:7e:ea:67:85:4d:38:5e:9a:3c:0a:00:ed:c5:
22:0a:ba:8a:a9:ca:2e:8b:46:56:5d:b7:e3:40:65:
b6:f6:a9:f6:61:73:64:47:a1:97:c0:6f:d5:a9:59:
71:5d:de:ca:9c:20:53:ab:6f:09:14:50:a9:af:c5:
3f:09:26:e4:52:ed:fd:83:83:f6:55:e5:be:40:91:
21:cc:26:22:a0:cc:10:ad:2b:1f:07:c5:76:2e:e2:
54:5e:64:7e:40:12:87:4e:19:e5:aa:ab:5b:51:b4:
9e:f1:af:0a:6e:66:08:e4:26:62:78:52:68:33:c6:
d4:cc:af:9e:8d:e1:e6:7d:2a:85:c5:22:85:30:a5:
49:c7:40:5f:ae:81:44:b7:c6:d9:33:95:0f:4d:ca:
d4:4f:58:68:b5:90:57:8e:dd:29:27:10:c8:35:0f:
b8:57:b2:36:20:8e:42:82:ad:e4:ff:9f:0b:0e:55:
55:0c:52:4f:25:be:e9:1f:49:e5:e6:6e:2d:33:f2:
9f:2c:fa:0a:38:a8:5c:f8:f4:e3:7e:1f:81:c9:b7:
b1:93:b7:a8:4e:c4:2b:8b:00:a7:1d:97:c2:07:f5:
0e:a2:23:74:cb:6c:b0:1d:4f:62:d4:23:18:2f:c1:
e2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:17:7A:DE:0C:B2:85:FE:9C:97:E1:1B:E9:EA:87:5F:00:C0:82:7F
X509v3 Authority Key Identifier:
keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/DB701E584E6311EEBED9743CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.78.200.0/22
Signature Algorithm: sha256WithRSAEncryption
06:49:b1:44:30:a4:39:91:a5:1a:9e:75:e2:5c:16:a2:6c:db:
06:75:5e:62:42:77:52:38:1c:ad:9d:f0:2a:c1:ea:b3:a9:4d:
c1:e6:2f:ed:ec:0b:9b:a6:80:29:0a:69:20:d5:12:15:0f:f1:
1e:cb:7c:ab:7c:de:47:27:92:c6:01:4f:4a:91:77:26:9a:ce:
3e:ab:d7:68:1a:01:2f:97:a2:02:e5:20:f9:20:2e:0d:63:3b:
c1:34:63:22:66:d3:68:62:19:63:79:9f:76:e9:8f:9f:3f:29:
23:33:99:ea:4c:02:55:3d:e0:9e:8c:ec:e3:a5:0f:90:cd:39:
6f:5c:14:96:31:85:2f:8d:62:e3:1f:ed:2b:e6:a3:b4:d8:55:
5f:d9:a5:4a:bf:ab:00:7f:bf:b4:06:e7:18:85:de:d0:c5:32:
e5:ee:53:90:37:26:77:72:1d:75:65:3e:87:cb:6c:e7:1f:ee:
d4:02:3e:62:24:00:27:3c:d8:1e:ac:f9:29:ae:3b:aa:5c:af:
33:ce:01:21:16:38:7e:bc:b9:49:22:e4:6e:3c:b4:35:f1:a9:
e2:7f:25:01:d3:dc:9f:8f:2f:68:11:ad:1c:76:de:f0:c9:91:
4e:0e:c5:ac:ed:d7:d0:c6:66:3b:24:28:f0:db:9a:c1:2a:77:
93:a3:99:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:42 2026 by rpki-client