
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/CADB5E342D2211EE87D1FB10C4F9AE02.roa
File: CADB5E342D2211EE87D1FB10C4F9AE02.roa (raw, json)
Hash identifier: 0skmBNM9BwZjrcs8PPJ5wWo+HqwM6hEGkjxBgQglrdQ=
Subject key identifier: DB:A5:81:31:7C:EC:87:69:A8:F2:D4:4C:CD:31:25:1F:9E:8D:79:93
Certificate issuer: /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Certificate serial: 6178
Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/CADB5E342D2211EE87D1FB10C4F9AE02.roa
Signing time: Thu 16 Apr 2026 20:25:32 +0000
ROA not before: Thu 16 Apr 2026 20:25:32 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 17794
IP address blocks: 203.184.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:25:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24952 (0x6178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1323, serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Validity
Not Before: Apr 16 20:25:32 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69e145bc-94e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:68:66:2b:ea:6b:e7:d2:ab:21:c6:f4:90:1f:
a5:7a:79:26:33:f7:b6:71:72:84:ef:af:e4:69:17:
9b:54:3f:20:9e:08:79:b8:41:9d:ad:cf:f2:23:83:
fa:79:bf:38:de:97:84:b0:f3:e6:09:dd:03:62:32:
73:d3:21:85:3a:c1:dd:bf:e2:a8:e3:eb:7b:94:49:
3e:cb:23:9a:5e:3a:10:26:86:0e:ef:af:88:b1:e4:
72:ca:05:88:33:d2:5c:39:64:e8:a8:22:90:e0:a1:
57:8c:42:13:d6:7b:29:f8:a5:35:e4:25:72:61:c8:
3c:4f:dc:7d:15:c1:1f:9c:88:14:e4:35:fc:dd:a3:
2d:ad:cb:3e:2f:00:07:2d:cb:59:35:a7:bb:69:1a:
9c:f7:55:2a:5f:6a:53:3c:74:06:20:75:54:8e:b5:
81:c0:0d:af:11:ab:47:4c:f3:df:4e:99:25:b7:55:
59:43:b6:72:f2:95:7a:f6:54:b8:cc:a8:12:9d:a8:
01:08:9a:6e:5f:ee:6a:d0:7e:2c:93:a5:66:26:77:
b2:00:88:7a:ae:b8:ba:39:99:c3:29:e5:21:b8:a6:
5d:b1:ab:3e:30:de:8d:15:9c:97:5c:7b:a6:19:d7:
4e:60:83:90:09:e0:fa:54:18:24:da:b1:52:68:ea:
c6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A5:81:31:7C:EC:87:69:A8:F2:D4:4C:CD:31:25:1F:9E:8D:79:93
X509v3 Authority Key Identifier:
keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/CADB5E342D2211EE87D1FB10C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.184.147.0/24
Signature Algorithm: sha256WithRSAEncryption
28:33:18:62:b0:aa:79:45:2b:3d:5d:81:90:3e:fc:18:be:aa:
32:4a:9f:4b:43:70:82:b7:ee:57:3f:d9:8c:9b:4d:35:53:ed:
84:23:7a:e7:61:1b:5a:4e:ac:9d:0d:7f:72:4d:df:47:55:30:
0a:7b:ba:e4:71:f0:af:78:e1:00:c2:c5:04:13:37:d6:d3:d8:
2c:53:80:21:71:71:dc:f9:d6:64:cb:df:b5:0a:9c:54:9c:9c:
7b:fc:26:51:a7:d2:b1:4b:e7:5e:b0:94:b6:ff:3d:5e:11:6e:
c5:dc:97:4f:cc:84:3e:76:c1:50:a5:0d:31:29:e9:c5:87:11:
1c:de:69:d2:86:42:ff:4d:83:a5:89:a6:79:94:df:64:19:5b:
9c:fb:c2:96:20:0f:e9:5f:ef:d0:86:68:3d:55:ea:bc:49:f4:
17:b7:7d:53:10:63:56:d5:9d:9c:c4:cc:ac:bb:37:62:9b:e1:
7a:7a:38:a1:9e:38:21:0d:61:9a:e0:52:0e:cc:ad:c9:51:ed:
ee:01:38:de:85:09:28:fc:e1:ac:59:6b:49:6d:93:b5:11:d7:
02:7e:00:f8:8f:12:f5:08:7f:3a:2d:93:da:04:e2:b7:97:1d:
11:38:d0:5d:91:ac:dc:90:82:95:89:3a:ec:e6:45:91:ae:48:
f6:b8:33:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:44:43 2026 by rpki-client