
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/00FEEFF0536911EE8594503BC4F9AE02.roa
File: 00FEEFF0536911EE8594503BC4F9AE02.roa (raw, json)
Hash identifier: LAlnyo3rb9AwHKq6SAQyKOj1FSqQ0wWefEg411QdKi4=
Subject key identifier: 6C:79:73:B5:11:EF:42:56:93:35:37:F0:5F:B9:0A:BC:E5:2A:B3:1A
Certificate issuer: /CN=A91C0D37/serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2
Certificate serial: 01DA
Authority key identifier: CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/00FEEFF0536911EE8594503BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:02:57 +0000
ROA not before: Fri 09 Jan 2026 03:22:25 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 4768
IP address blocks: 202.36.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl
rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:03:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474 (0x1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0D37, serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2
Validity
Not Before: Jan 9 03:22:25 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a43901-afa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ba:7f:66:ac:2c:48:a9:20:8d:08:5b:0a:c6:
eb:b9:ce:3c:01:5c:a6:3a:61:9e:b6:51:4b:73:28:
69:a5:2c:26:29:08:00:2e:9a:82:fc:7c:b1:89:b0:
be:fc:f4:66:62:74:4e:45:13:fb:3e:7e:98:4d:66:
3a:ae:62:ab:b4:a3:63:fb:f3:61:30:55:ea:15:2a:
75:7b:3b:2e:50:e9:bc:55:24:64:67:2b:af:2a:69:
9a:09:d3:79:d6:a4:a7:0d:2b:ab:7c:93:78:50:7a:
97:be:41:8f:f9:23:0f:31:ad:06:de:a9:52:ac:d8:
2e:5d:d1:b1:24:0f:eb:e0:a0:ee:74:5f:b9:61:8a:
de:62:02:b1:2a:87:2e:c0:46:6b:61:ed:04:78:8f:
8a:2e:d3:fc:e4:89:e4:b6:ba:89:00:56:34:2d:36:
8c:4a:16:f6:0d:46:10:57:de:a9:a1:9c:b0:1b:1f:
36:6e:19:a9:b3:d3:17:cc:c9:57:0e:84:ec:c1:76:
97:d2:d4:9d:c6:c9:a3:d9:97:b0:84:17:92:1e:8b:
25:98:ed:cb:ed:94:48:37:a2:d7:5e:0f:6b:61:39:
bd:0d:66:65:9b:da:28:0b:77:30:39:91:a2:e4:00:
78:2e:02:ca:4a:05:50:e6:b4:ff:21:18:f1:0f:c6:
fd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:79:73:B5:11:EF:42:56:93:35:37:F0:5F:B9:0A:BC:E5:2A:B3:1A
X509v3 Authority Key Identifier:
keyid:CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/00FEEFF0536911EE8594503BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.36.44.0/24
Signature Algorithm: sha256WithRSAEncryption
73:33:59:85:3c:29:3d:5c:ea:f3:d1:71:2d:b0:fd:57:c9:08:
04:73:da:a3:3c:3a:ed:85:5c:af:eb:7b:08:cb:db:0e:bd:3e:
76:98:f5:18:f0:ef:88:b6:f4:ff:01:35:ba:d9:09:55:13:61:
b4:29:04:0f:f0:3e:eb:02:54:f1:ca:c3:e4:e8:08:0a:53:d1:
4e:ae:bb:cb:ac:af:77:3e:82:3f:bb:cd:45:cd:a1:f5:da:81:
f8:89:81:1b:fa:51:be:34:d8:18:ab:8c:17:ac:89:31:07:d3:
22:ea:70:c3:0c:e4:2b:59:9a:84:71:e2:84:54:3a:fe:08:c3:
84:f6:1f:f9:41:58:c7:41:54:2b:17:88:0e:63:df:1a:25:5b:
3d:48:72:cd:2e:9c:24:a0:ab:da:a3:6b:9c:be:29:c8:de:3d:
00:04:6f:06:1d:7e:dc:8d:e3:80:cc:cd:c8:d4:6e:97:5c:da:
ae:89:8b:2e:2f:b0:fc:81:80:0b:29:d3:3f:a3:02:ce:14:5d:
e9:d5:3a:cc:ee:0e:43:2b:dc:a4:0c:07:0b:d9:fe:3c:2d:c2:
6a:37:16:dd:68:22:75:cb:f5:6c:1e:ea:25:fd:50:77:ad:50:
1a:fe:94:11:13:c0:b0:d8:84:d4:05:ba:c2:19:c7:e4:2c:22:
78:d9:e5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:00:30 2026 by rpki-client