
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/47F872C4768911F0AC56AE5AC4F9AE02.roa
File: 47F872C4768911F0AC56AE5AC4F9AE02.roa (raw, json)
Hash identifier: 9knzdW0PCXzgpdwkDT1Tbch9gGjitaXc+H32jDp8ksw=
Subject key identifier: 21:AF:30:C6:BC:CD:C6:1B:A4:34:83:F5:E7:6C:31:61:75:36:E4:93
Certificate issuer: /CN=A91C2B6D/serialNumber=4D4F3AACC7395A13D642007F9910DF88040E4BAB
Certificate serial: 6E
Authority key identifier: 4D:4F:3A:AC:C7:39:5A:13:D6:42:00:7F:99:10:DF:88:04:0E:4B:AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/47F872C4768911F0AC56AE5AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:13:03 +0000
ROA not before: Mon 11 Aug 2025 08:00:44 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 17476
IP address blocks: 203.29.202.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.crl
rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:15:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2B6D, serialNumber=4D4F3AACC7395A13D642007F9910DF88040E4BAB
Validity
Not Before: Aug 11 08:00:44 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a3e6ff-e07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d2:ea:cf:64:8e:80:a6:a5:ab:72:7f:af:83:
95:29:37:31:af:7f:52:27:d7:74:0b:6c:6d:1a:89:
ee:f7:7d:0c:9a:a7:49:42:f6:d2:75:06:2b:bc:2a:
cd:60:67:c8:e8:52:b1:d1:a8:b2:36:f0:4b:f4:d2:
da:8c:5d:43:1e:c8:e0:29:73:42:23:e7:95:fa:c5:
a9:de:c8:7d:53:e4:e4:4a:33:fb:77:77:94:31:31:
48:43:5a:2a:40:5e:0b:73:66:e0:f5:55:8c:c4:94:
6c:3b:aa:c1:68:83:87:0b:d9:3b:c2:3b:2e:ff:7a:
7f:a2:56:11:ad:29:29:a4:7f:84:0d:d8:34:c2:8b:
5e:df:e6:de:cf:52:8a:01:d0:11:e4:9e:6a:00:b8:
56:57:ab:2d:67:64:8b:88:87:8a:f5:3a:b0:15:27:
04:c0:5d:64:7a:32:29:2f:89:22:7b:5f:25:b3:08:
cb:9b:e5:bc:6b:90:c2:3d:58:72:fb:d7:19:62:b6:
cc:09:77:e0:ce:cc:f5:d2:4a:08:41:12:b5:35:ec:
8f:ad:36:3e:bd:7c:0a:4a:5c:c0:0f:e4:f2:41:9f:
10:bd:2d:37:ac:5c:e6:8c:1e:84:d5:6f:d4:21:47:
52:d4:92:48:7b:43:2b:7e:ba:13:75:af:6a:b7:68:
99:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AF:30:C6:BC:CD:C6:1B:A4:34:83:F5:E7:6C:31:61:75:36:E4:93
X509v3 Authority Key Identifier:
keyid:4D:4F:3A:AC:C7:39:5A:13:D6:42:00:7F:99:10:DF:88:04:0E:4B:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/47F872C4768911F0AC56AE5AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.29.202.0/23
Signature Algorithm: sha256WithRSAEncryption
32:03:5a:be:11:bf:9f:af:c0:98:69:0a:9f:59:c6:9b:1d:f6:
d3:07:f0:4b:b6:59:21:3d:96:bd:c8:c9:4f:f5:cb:f3:70:d8:
85:29:90:55:18:59:52:2b:f8:ab:22:a6:d9:22:68:0e:38:a5:
f2:3c:d4:83:0e:26:ea:56:ea:63:04:8b:9d:a2:1c:91:5d:22:
f7:e6:9b:7c:57:5d:b4:06:79:1e:95:64:1a:c6:cd:a3:ba:56:
fa:28:a8:fd:0a:04:71:01:5b:9b:da:7a:0b:4f:01:18:c7:5a:
15:4b:53:21:c5:d7:28:5b:8a:4f:fb:dc:1e:7a:d6:4e:20:a0:
67:77:46:d1:dd:ed:aa:38:7b:3f:d2:54:34:da:c2:35:a8:ec:
c8:f5:ab:2d:ec:5f:96:c8:a2:3c:b7:b7:8a:e4:7b:a5:e4:ae:
29:45:d8:73:c9:40:d0:a3:6e:90:a7:d2:18:65:5c:c3:37:bb:
f2:16:18:07:98:5f:17:16:11:a0:7b:34:64:8b:3a:52:24:27:
ea:90:a9:f1:80:b2:8e:34:82:f1:85:cb:03:17:90:6e:9a:46:
2a:11:1d:fb:6a:ba:38:d6:97:63:19:ab:35:29:dc:90:b3:2d:
44:1a:2a:33:50:ff:fd:af:01:13:ea:e7:31:0d:12:12:1c:1f:
d6:89:94:73
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:43 2026 by rpki-client