
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/B2CE886C07B811F0992B401EC4F9AE02.roa
File: B2CE886C07B811F0992B401EC4F9AE02.roa (raw, json)
Hash identifier: PwDTDxHvqEbGUM+7/VWMB7V8nvsWJKnGzuqpWyR+ZKE=
Subject key identifier: 61:28:57:35:FB:A5:35:E6:EB:DE:77:8F:DD:DE:B8:66:0E:57:2E:96
Certificate issuer: /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Certificate serial: 6151
Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/B2CE886C07B811F0992B401EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:39:33 +0000
ROA not before: Tue 24 Feb 2026 07:49:20 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 203.184.180.0/24 maxlen: 24
203.184.228.0/24 maxlen: 24
203.184.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:24:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24913 (0x6151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1323, serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Validity
Not Before: Feb 24 07:49:20 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a487e5-39dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b9:c8:eb:10:03:50:2a:08:51:12:c3:7e:1e:
28:dc:47:60:38:aa:44:c8:72:2e:33:10:5c:a9:25:
e3:ea:f1:6d:aa:47:55:e9:0f:36:6c:f3:ff:14:81:
9b:f9:b7:d9:62:88:3e:c7:05:bc:c0:cb:7e:a5:c1:
e6:7c:01:43:7f:ea:37:a1:a5:ff:81:a8:20:e5:b6:
58:fc:6d:64:26:db:5e:24:51:ff:7c:34:35:9b:80:
41:01:5f:67:8f:f1:bc:50:2a:77:4c:62:e8:fb:94:
0c:f3:6d:5b:d9:ba:80:e8:15:5e:3a:52:ff:64:85:
58:2b:7a:d8:ca:9f:a0:5c:b6:ab:23:c9:72:6d:68:
92:30:33:be:bd:e2:c9:e0:63:83:f9:9c:d4:f9:d3:
32:be:17:32:81:79:f1:71:77:ac:0b:05:02:62:16:
75:06:c2:38:63:2c:4a:7e:bb:08:6e:91:f6:65:15:
db:5c:08:d5:73:84:3c:af:00:8a:eb:c6:8b:a8:74:
40:5b:de:2f:5e:e6:01:07:ed:a8:43:d3:46:cc:48:
d0:5b:5b:48:81:ee:8c:ef:72:d0:a4:0a:17:92:c6:
28:f2:3e:14:7b:aa:9b:af:5f:b5:e8:05:d2:34:b3:
b1:26:68:70:39:89:ef:d1:7d:c4:a6:60:55:05:f0:
cb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:28:57:35:FB:A5:35:E6:EB:DE:77:8F:DD:DE:B8:66:0E:57:2E:96
X509v3 Authority Key Identifier:
keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/B2CE886C07B811F0992B401EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.184.180.0/24
203.184.228.0/23
Signature Algorithm: sha256WithRSAEncryption
97:77:1b:66:1c:77:d4:5a:1e:7a:40:72:d9:7f:1f:52:8a:a8:
3d:b7:7c:eb:bb:8f:c5:12:c7:2c:47:76:ce:1a:54:da:6d:d3:
f5:b5:a5:8c:e5:82:48:b2:06:2d:03:ae:f3:c0:a2:97:74:48:
a4:51:2c:c6:ca:18:5a:1e:bb:8c:0f:1d:67:eb:40:5a:c2:25:
74:56:99:12:1a:5f:68:20:78:d9:40:48:84:14:bd:91:d1:81:
4c:3e:b5:fc:ee:82:a1:e7:bc:4b:7c:54:b9:44:ba:04:c4:7b:
f0:f2:c5:60:23:c0:6e:cc:9e:57:cc:74:1f:c2:57:65:73:68:
51:fb:12:31:e8:63:a1:d9:08:78:65:de:e7:df:f7:21:fc:ad:
13:76:8d:f6:53:2c:5c:f1:a8:27:f3:8e:0c:d5:ac:ad:d5:c8:
41:e1:d7:26:09:86:3d:3f:db:9e:f6:1d:2e:3b:77:eb:c5:20:
4a:9c:c2:71:97:7a:31:42:7c:d7:be:51:50:86:75:fd:8f:32:
70:71:47:09:cf:45:8a:14:60:67:74:1f:ed:f6:88:c1:28:fc:
d0:d5:57:f2:4e:5e:e0:e2:d8:fa:f3:74:74:f5:8e:4a:37:47:
a7:89:52:14:a8:81:aa:5d:0f:3a:da:62:8d:f3:dd:0a:10:ef:
ee:4b:f6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:49:24 2026 by rpki-client