
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/B2CE886C07B811F0992B401EC4F9AE02.roa
File: B2CE886C07B811F0992B401EC4F9AE02.roa (raw, json)
Hash identifier: 8EUGhRCP1C7fP3uUzXjL2AJ8lpQGKmsozVIrwWjsB7k=
Subject key identifier: E4:A6:7A:59:A7:12:F3:1A:15:49:67:74:99:E5:3F:16:60:1C:92:8B
Certificate issuer: /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Certificate serial: 6137
Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/B2CE886C07B811F0992B401EC4F9AE02.roa
Signing time: Tue 24 Feb 2026 07:49:20 +0000
ROA not before: Tue 24 Feb 2026 07:49:20 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 203.184.180.0/24 maxlen: 24
203.184.228.0/24 maxlen: 24
203.184.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:08:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24887 (0x6137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1323, serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Validity
Not Before: Feb 24 07:49:20 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=699d57ff-9bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5e:dc:a2:b2:53:c2:50:88:74:f4:a1:aa:bf:
29:be:eb:6f:c1:cb:60:48:35:a9:79:1c:c1:86:d5:
79:a7:fd:d5:cf:dc:06:47:80:94:f2:52:81:3f:08:
8f:6a:99:4c:ac:ee:a1:25:2a:6e:fc:70:22:db:e8:
be:b7:25:0a:3c:62:f8:ec:de:c8:13:55:88:5d:e5:
f5:19:e4:66:97:17:85:c7:ff:69:20:25:a2:04:3e:
4e:f6:3f:68:99:d7:a8:b3:63:0b:f5:23:d6:55:3c:
68:b4:50:42:d3:aa:e9:43:50:00:51:67:6f:68:df:
a0:ac:22:bd:f9:20:62:9c:40:96:26:bb:1d:5a:f5:
86:11:29:9d:15:b4:57:83:b7:35:e5:2b:c2:77:9c:
bf:e3:e1:31:fe:fd:6a:71:5f:13:04:de:61:3b:69:
9e:50:b9:cf:73:4b:77:32:d7:74:4d:49:18:3b:f8:
d8:d2:58:e7:13:aa:1a:3b:f0:16:8f:c0:93:fd:59:
fc:5e:0b:3f:3f:c8:2f:8f:98:f2:25:76:ab:55:65:
a7:86:50:21:4b:3c:c0:8e:85:82:ec:53:54:27:c7:
32:24:6b:d5:b6:47:43:ed:d6:af:62:fb:d7:9f:55:
cf:c2:bf:3e:c6:6a:3d:d6:dd:2b:d0:d4:e7:1b:af:
bd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A6:7A:59:A7:12:F3:1A:15:49:67:74:99:E5:3F:16:60:1C:92:8B
X509v3 Authority Key Identifier:
keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/B2CE886C07B811F0992B401EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.184.180.0/24
203.184.228.0/23
Signature Algorithm: sha256WithRSAEncryption
98:47:a2:a5:14:75:70:e8:00:5e:7c:d8:75:22:59:b0:67:58:
b2:af:60:79:86:6d:a2:8b:2c:25:d1:04:55:2c:10:37:ef:4e:
bb:0c:3a:1e:b1:4b:a8:4b:ce:62:dc:87:99:72:43:5c:e5:39:
e0:91:18:81:d1:fc:00:a5:c8:93:a1:fe:b3:ea:4b:02:e2:cc:
66:9f:34:e6:42:9a:5e:95:8a:4e:ad:53:e7:16:3c:02:e2:c6:
e8:87:59:27:fc:09:1a:e8:ca:d0:69:8c:75:eb:79:5e:41:39:
3f:e8:34:16:ea:57:a7:6f:bc:a9:15:d6:6b:1f:e0:0d:9d:bd:
b5:c9:d3:b0:45:da:76:81:da:3d:42:b8:4a:df:16:22:52:cc:
9a:49:af:24:d6:95:ff:2b:e3:4a:76:f1:a8:3b:fb:75:b6:5b:
df:a3:3a:02:fb:e2:ce:81:ea:d2:0b:9f:5e:7f:ea:51:5f:2d:
a9:ed:9b:f5:8e:a8:12:8e:92:c5:a0:30:e7:2d:ee:58:37:41:
2a:26:cd:8a:11:dc:0a:ec:47:11:02:ed:0a:a2:94:52:04:d6:
fc:39:b4:91:b9:e0:44:06:fa:cb:ec:55:60:3a:5c:6a:31:c1:
3b:17:e2:f5:a1:88:d3:c8:8c:02:9c:8d:72:72:10:d8:af:db:
28:f3:32:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:13:30 2026 by rpki-client