
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/199F588CE21711EE913F3E62C4F9AE02.roa
File: 199F588CE21711EE913F3E62C4F9AE02.roa (raw, json)
Hash identifier: ddXLbsnNUJaK9PsrG7ysG03ljzK1G3ktx48YRWrpG8U=
Subject key identifier: 41:13:DA:A9:F8:51:AA:B2:CC:99:79:BB:28:0E:6A:B6:73:AA:B1:AE
Certificate issuer: /CN=A91BF2FD/serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF
Certificate serial: 0178
Authority key identifier: 5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/199F588CE21711EE913F3E62C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:04:50 +0000
ROA not before: Tue 29 Apr 2025 05:42:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139808
IP address blocks: 202.37.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl
rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:10:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376 (0x178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF2FD, serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF
Validity
Not Before: Apr 29 05:42:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a41d52-c1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0a:d2:1e:72:06:05:b9:63:9c:a7:ca:3b:1c:
11:f9:b3:64:05:9d:01:b1:e7:c3:5c:7a:7b:12:54:
b8:71:db:00:54:b8:cf:6f:e6:77:0a:2a:7a:90:1c:
8b:a2:bf:d9:08:a4:8b:49:3a:a2:67:3a:72:f5:c7:
17:aa:ae:cd:73:a2:8b:7a:40:5a:82:64:9c:4c:fa:
02:d5:08:15:39:4b:05:c3:57:8b:ca:58:9c:d3:f0:
3c:91:2d:4b:c9:02:75:96:f0:76:aa:60:26:32:cd:
fb:57:19:09:fb:75:84:67:92:c7:07:08:c7:9a:ef:
df:16:d3:63:81:13:e1:46:1a:7d:e9:25:eb:ce:aa:
8d:9c:f8:8e:ab:3f:f3:3d:c5:5b:da:02:9e:19:4d:
a6:00:f2:21:fb:c0:88:52:ae:c2:e1:50:8f:28:2a:
d9:d6:71:91:50:8b:0a:df:bc:6e:07:d3:27:54:7f:
6d:81:e6:9d:33:af:fd:03:de:c5:5c:a2:2e:33:80:
8e:dc:d0:a1:9f:40:3a:06:6b:9d:6f:9f:85:0e:87:
6e:6c:f6:5d:ef:77:b8:87:20:f1:7e:85:94:70:6a:
02:18:8b:e1:4c:0e:83:e5:54:f4:a9:ac:b1:56:0f:
2b:9a:0f:ea:47:ba:01:f4:78:09:53:ec:21:81:36:
3d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:13:DA:A9:F8:51:AA:B2:CC:99:79:BB:28:0E:6A:B6:73:AA:B1:AE
X509v3 Authority Key Identifier:
keyid:5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/199F588CE21711EE913F3E62C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.37.216.0/24
Signature Algorithm: sha256WithRSAEncryption
21:a1:de:bf:74:f8:0c:42:62:27:79:62:34:14:3c:32:09:b2:
40:59:22:cb:99:c0:2e:4e:dd:63:cd:ed:77:89:91:7a:ad:e5:
19:72:30:35:a0:c1:d9:74:44:16:d9:23:71:2f:2f:00:e8:4c:
a2:f2:13:81:c5:61:05:db:49:91:cd:c2:5f:73:dc:be:42:64:
f0:8e:7f:04:f0:fc:71:da:12:63:8a:af:82:3d:78:ce:c1:d5:
3e:46:d4:e1:24:f2:0f:a8:cd:c2:99:7f:ed:43:4e:0c:97:b9:
55:6c:35:44:ca:0d:4f:bb:1c:cb:b6:5b:d7:a1:4d:fd:75:59:
ad:8f:4e:a6:ed:07:c0:98:0c:92:c6:26:f0:07:d8:b2:74:a0:
b8:dc:f0:09:f5:00:59:70:55:b0:b2:f0:b5:ee:1a:2a:77:81:
9d:b3:db:bf:80:2c:80:93:05:0b:b4:34:b8:51:f7:1c:72:89:
53:19:1a:d8:c0:f8:af:6a:bb:44:33:7d:53:af:75:16:cd:a7:
fd:0c:8f:fb:a8:c7:03:d8:3f:27:c5:e4:03:ec:0e:3a:0d:9e:
c1:5d:07:d8:be:e5:72:39:ac:e4:06:d9:e9:30:90:a2:ab:4a:
bc:f8:f3:a8:58:fa:ce:a5:b7:1b:2d:ac:9f:64:e0:af:a7:62:
3f:9a:90:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:53:36 2026 by rpki-client