
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/DC4A492A4E6311EEBED9743CC4F9AE02.roa
File: DC4A492A4E6311EEBED9743CC4F9AE02.roa (raw, json)
Hash identifier: j6vtGdsn58n5PFNIgokVa7egz01S/Wt3cjqK2/oPYCU=
Subject key identifier: 13:56:5B:18:39:F0:84:F8:18:52:B2:A8:F4:CC:22:8E:05:E4:DB:AA
Certificate issuer: /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial: 0B25
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/DC4A492A4E6311EEBED9743CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:50:34 +0000
ROA not before: Wed 26 Mar 2025 19:59:56 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 38566
IP address blocks: 203.78.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2853 (0xb25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Validity
Not Before: Mar 26 19:59:56 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a47c6a-5164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a6:a3:26:d5:60:4f:29:72:7c:73:4a:b6:83:
99:32:01:4c:0c:68:56:6f:fe:99:7d:63:90:33:73:
19:34:84:d8:23:bd:e8:a0:37:72:58:9f:ff:ba:e3:
36:73:ff:71:e9:60:18:c2:e2:b8:b6:86:d8:03:75:
cc:26:eb:65:3e:0b:2f:d8:25:f0:74:7d:f6:e6:19:
7c:57:e0:5c:c9:f5:d7:26:91:7e:d9:9f:06:6b:41:
f4:a1:10:d4:9b:42:61:57:d5:c1:fb:b5:b3:fc:af:
6b:7e:3d:78:59:64:cf:02:ac:dd:36:6c:23:ad:c4:
76:1a:73:75:53:4e:5e:07:e1:7e:f6:50:1c:a7:77:
84:33:d8:8a:8e:84:f5:a2:2f:99:a5:21:bf:d7:b7:
41:67:55:74:0b:3a:15:53:c5:ce:c9:39:6f:66:c2:
d8:ac:f1:93:03:0d:11:5a:6f:92:96:ae:3f:f0:dd:
67:f3:e5:12:31:bf:ae:83:1e:45:34:1b:f8:4b:5e:
fa:b2:1f:df:ff:4e:0c:7e:cf:11:f1:b5:34:af:da:
48:b6:32:ed:51:c9:6d:be:4e:2e:52:6f:89:e9:fe:
27:34:8b:3d:2b:41:da:2b:58:0e:14:ca:1e:c7:0b:
58:a6:8f:4c:6a:9b:a6:3f:f8:f4:07:96:ec:d2:63:
39:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:56:5B:18:39:F0:84:F8:18:52:B2:A8:F4:CC:22:8E:05:E4:DB:AA
X509v3 Authority Key Identifier:
keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/DC4A492A4E6311EEBED9743CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.78.204.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:65:ac:d0:d3:11:99:fb:2b:da:61:f7:63:5e:e4:92:bc:cb:
da:b5:2f:a0:ad:c8:37:2e:5c:2c:e2:ca:f7:71:3f:0e:36:d2:
a2:76:45:6c:56:d2:0f:6d:f0:1b:8e:0a:d9:a1:f7:d7:a3:88:
da:ef:a8:8c:6e:ee:dc:f8:7c:96:61:cd:96:5a:43:7c:1c:77:
ac:91:ed:b1:ba:2c:80:b7:63:ff:f3:26:df:cc:fc:ae:a7:9b:
39:b2:d7:ea:d0:9e:8f:e6:ec:a8:08:1e:55:38:4b:b0:a5:e6:
2f:ef:f1:2f:85:4f:b6:30:aa:96:98:0a:e4:ec:07:0f:64:03:
20:5b:3b:16:53:d7:37:5b:65:96:d4:22:a8:6e:bd:5d:6b:f1:
70:2f:f6:67:df:ee:35:ad:36:23:44:45:bb:54:bf:7c:a3:0b:
b3:a6:7d:b2:e8:a0:24:be:8e:60:d0:f6:08:b0:2c:b9:e2:86:
7c:23:a3:84:cb:e8:e9:88:05:69:69:5a:81:ae:d9:b3:f3:a6:
96:fe:5b:64:77:87:f6:a4:21:4d:a8:8f:66:35:3d:d2:91:12:
04:65:59:4a:27:00:4b:c0:7a:7c:10:d3:b8:04:0c:81:00:79:
87:35:e2:b5:c2:d4:1d:ff:71:de:8d:aa:15:10:da:2b:da:4f:
5c:26:ac:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:57 2026 by rpki-client