
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/9B1ABC54486111E8AA9B1B45C4F9AE02.roa
File: 9B1ABC54486111E8AA9B1B45C4F9AE02.roa (raw, json)
Hash identifier: 5g3UB7PkGdv29Z5SCWubN0v2fUQJ0C7K/L9HhQY3p7Y=
Subject key identifier: E8:16:91:32:83:BD:08:CD:70:CE:7F:12:E2:3C:39:B9:66:9B:10:90
Certificate issuer: /CN=A91BF27F/serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F
Certificate serial: 21EF
Authority key identifier: 59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/9B1ABC54486111E8AA9B1B45C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:39:55 +0000
ROA not before: Fri 28 Mar 2025 16:24:44 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 58621
IP address blocks: 43.243.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl
rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:14:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8687 (0x21ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF27F, serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F
Validity
Not Before: Mar 28 16:24:44 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a441ab-eda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b1:20:e9:55:4a:3f:19:58:57:2f:1c:19:a8:
4a:62:50:ca:cc:cb:28:44:cf:72:f8:2e:92:a7:5e:
23:44:94:cd:30:e5:84:b3:5a:8d:a2:f1:62:f7:76:
02:1b:21:b1:2b:bd:06:7f:fc:8e:17:6b:06:7e:5e:
9c:11:6f:e1:85:58:45:29:1e:88:1b:48:a3:6d:6b:
a2:0a:d9:e9:31:b7:1f:75:f6:21:fa:1c:95:4a:53:
65:79:4c:ba:22:fa:82:56:ef:3e:fc:47:8b:45:da:
33:3d:6c:66:22:84:20:32:67:a0:de:a4:d3:c5:ff:
c3:39:51:83:3e:54:bc:4b:94:a5:51:55:be:a7:5e:
8d:40:87:d6:9e:cd:19:0b:f3:80:02:d9:18:cc:19:
c6:90:f4:76:f2:cd:d0:72:17:18:c0:94:42:f7:15:
f5:5b:9b:18:e4:45:ca:8b:74:7b:e8:df:61:8e:b9:
a4:8b:9c:ad:39:33:55:cc:66:04:77:7b:9e:12:97:
ef:29:f3:a6:b9:cd:3d:88:db:dc:2f:18:da:5b:ba:
54:5f:0f:b6:67:cc:ea:e1:8e:4c:c6:ce:e2:36:e9:
26:7d:01:bc:e3:f3:6b:3a:8f:f3:0f:21:33:92:9b:
bb:08:a0:71:8f:e0:3b:ed:ec:af:d3:69:d6:37:5e:
ab:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:16:91:32:83:BD:08:CD:70:CE:7F:12:E2:3C:39:B9:66:9B:10:90
X509v3 Authority Key Identifier:
keyid:59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/9B1ABC54486111E8AA9B1B45C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.243.118.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:ee:4c:be:ef:83:f5:c2:44:57:9d:82:a1:7e:a7:60:33:86:
e7:15:62:80:62:54:88:93:ce:10:ca:50:23:8e:2d:59:78:bc:
36:2e:2a:05:f8:56:ee:63:57:ef:57:d8:0f:93:70:f2:7b:b8:
61:8f:c6:be:2b:71:a5:ab:a4:3c:f7:5e:5c:71:b7:50:1d:06:
11:26:e1:ca:38:66:c2:8e:df:09:52:6a:fb:c7:6e:50:f7:3c:
79:04:d2:92:e6:31:8a:fe:95:77:3b:fd:90:17:3e:6b:cc:b9:
84:7b:cd:f7:3d:cd:63:40:34:f0:ff:a6:2c:df:d1:98:98:c8:
af:15:c7:49:0c:9c:6c:ab:cf:df:a9:11:50:34:d0:cc:81:b8:
28:9c:e5:41:89:f7:c2:41:4c:1f:55:13:98:37:31:28:cf:b8:
70:70:af:63:dd:97:9b:00:85:72:b1:29:00:0b:4f:75:5f:74:
ab:14:87:7f:22:0c:f6:a4:70:5c:92:4c:ef:81:26:d6:2a:f3:
d0:e5:18:fd:ed:af:3f:0a:ef:e4:ee:ed:97:9b:12:ea:6e:c4:
a1:b2:d8:2e:33:92:22:0e:e3:7e:d0:ae:2f:bb:a7:a7:a3:45:
e0:f9:9a:1b:7e:af:0d:be:e9:05:c5:16:6f:14:c0:b4:b4:8e:
85:8a:c0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:53 2026 by rpki-client