
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/B00A68E6014A11EFA8F03B5BC4F9AE02.roa
File: B00A68E6014A11EFA8F03B5BC4F9AE02.roa (raw, json)
Hash identifier: EFBskJYMHfJRXujHupPsFrdh1ToDlvL0xJdWDE7eAo8=
Subject key identifier: 86:2E:9C:AC:A7:FD:C4:F5:84:63:DB:A4:1F:65:8C:15:36:87:9C:E0
Certificate issuer: /CN=A91C2B93/serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D
Certificate serial: 017C
Authority key identifier: D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/B00A68E6014A11EFA8F03B5BC4F9AE02.roa
Signing time: Thu 09 Apr 2026 04:38:36 +0000
ROA not before: Thu 09 Apr 2026 04:38:36 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 4637
IP address blocks: 202.27.128.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl
rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380 (0x17c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2B93, serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D
Validity
Not Before: Apr 9 04:38:36 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69d72d4c-354f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:29:f1:05:d9:a6:3e:90:83:e0:62:1a:d7:1e:
d5:5b:dd:aa:ba:b6:4e:69:72:ef:87:43:9d:69:84:
b1:4f:7f:14:f2:7c:0a:42:33:bb:16:08:85:33:b4:
cb:27:45:96:6e:ae:c1:60:7e:cc:e7:db:7c:a0:87:
98:85:3e:ca:86:70:4a:c0:ee:3a:c5:b5:50:6f:d0:
d1:0b:ec:f5:f3:a9:6b:47:84:27:54:1b:c0:a2:86:
58:2a:02:88:d0:05:2c:97:b0:0a:93:cf:cf:58:3e:
0c:d0:d9:a2:0a:cd:80:5e:a8:3f:cb:22:0e:21:c6:
10:f7:ca:d5:88:83:81:52:16:d6:ed:15:f2:07:72:
7e:52:bc:d3:3c:93:e9:1a:01:83:f9:24:e5:62:b6:
e0:99:b4:e7:96:29:94:ec:30:e8:22:41:7c:4f:48:
ee:ad:cd:b7:4d:5a:08:10:7d:fd:a8:24:af:fc:44:
0c:b4:cd:59:f2:e0:b6:07:e4:6c:15:09:0a:f0:54:
be:a4:d5:d8:a4:6a:95:1b:a9:2a:30:fa:b7:28:17:
ea:e5:f8:6b:24:27:0b:99:a5:ba:8d:6f:24:d7:d2:
cf:fb:47:ec:cc:39:d7:a3:23:df:78:f9:be:90:4b:
26:4a:a6:e8:2c:75:aa:b6:6c:d2:91:f0:ef:39:be:
25:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2E:9C:AC:A7:FD:C4:F5:84:63:DB:A4:1F:65:8C:15:36:87:9C:E0
X509v3 Authority Key Identifier:
keyid:D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/B00A68E6014A11EFA8F03B5BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.27.128.0/23
Signature Algorithm: sha256WithRSAEncryption
35:f3:44:37:21:f9:52:97:d9:41:38:bf:aa:79:a9:d5:58:5d:
ac:98:5f:0d:e9:7c:9e:cd:ec:07:f1:3b:18:cb:2a:6a:d2:d7:
41:32:6b:43:f3:2b:bc:5e:38:2e:0b:8a:a6:92:ca:b7:76:e4:
c7:f5:dc:19:be:31:cf:93:86:a7:98:a4:61:ff:6a:5e:8e:3e:
24:3d:37:af:66:d7:28:11:eb:0f:aa:8f:57:86:0d:02:86:64:
0e:a9:a0:e3:e6:47:67:b7:dd:12:01:ad:e2:a5:7f:59:45:f9:
01:65:65:36:ba:70:9d:3d:34:16:1a:28:3c:23:32:c7:cf:c6:
96:1a:cf:92:31:f9:2d:6f:fa:8a:e6:5f:b6:43:89:a2:56:43:
a4:7b:69:57:37:cc:6c:6e:de:ad:3c:5e:c4:e1:72:73:78:52:
f6:ad:b5:fb:9e:e7:68:d7:e0:17:0c:6b:7f:b9:be:63:c7:8d:
d3:5d:17:8f:52:d3:ea:32:78:b6:ef:39:f2:cc:cc:7b:4c:b8:
02:88:c3:14:60:e5:b7:18:44:8b:69:30:63:7e:c6:82:42:ef:
dd:09:18:d6:fb:62:4d:ea:53:3f:32:8d:26:69:ca:42:67:5c:
be:ba:fa:48:d1:00:90:63:36:6b:8f:63:36:54:82:47:06:1a:
81:41:69:57
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzJCOTMxMTAvBgNVBAUTKEQ5RDY1RjdGMzYwOTBDNDAxQkNGMjBENEJDODBDNDNG
MERDNTkzM0QwHhcNMjYwNDA5MDQzODM2WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWQ3MmQ0Yy0zNTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsSnxBdmmPpCD4GIa1x7VW92qurZOaXLvh0OdaYSxT38U8nwKQjO7FgiFM7TL
J0WWbq7BYH7M59t8oIeYhT7KhnBKwO46xbVQb9DRC+z186lrR4QnVBvAooZYKgKI
0AUsl7AKk8/PWD4M0NmiCs2AXqg/yyIOIcYQ98rViIOBUhbW7RXyB3J+UrzTPJPp
GgGD+STlYrbgmbTnlimU7DDoIkF8T0jurc23TVoIEH39qCSv/EQMtM1Z8uC2B+Rs
FQkK8FS+pNXYpGqVG6kqMPq3KBfq5fhrJCcLmaW6jW8k19LP+0fszDnXoyPfePm+
kEsmSqboLHWqtmzSkfDvOb4ljwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIYunKyn
/cT1hGPbpB9ljBU2h5zgMB8GA1UdIwQYMBaAFNnWX382CQxAG88g1LyAxD8NxZM9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkI5My8zQUM4NzRFRTAx
NDMxMUVGODI1QTY0NjVDNEY5QUUwMi8yZFpmZnpZSkRFQWJ6eURVdklERVB3M0Zr
ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJkWmZmellKREVBYnp5RFV2SURFUHczRmt6MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzJCOTMvM0FDODc0RUUwMTQzMTFFRjgyNUE2NDY1QzRGOUFFMDIvQjAwQTY4RTYw
MTRBMTFFRkE4RjAzQjVCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQByhuAMA0GCSqGSIb3DQEBCwUAA4IBAQA180Q3IflSl9lBOL+qeanV
WF2smF8N6XyezewH8TsYyypq0tdBMmtD8yu8XjguC4qmksq3duTH9dwZvjHPk4an
mKRh/2pejj4kPTevZtcoEesPqo9Xhg0ChmQOqaDj5kdnt90SAa3ipX9ZRfkBZWU2
unCdPTQWGig8IzLHz8aWGs+SMfktb/qK5l+2Q4miVkOke2lXN8xsbt6tPF7E4XJz
eFL2rbX7nudo1+AXDGt/ub5jx43TXRePUtPqMni27znyzMx7TLgCiMMUYOW3GESL
aTBjfsaCQu/dCRjW+2JN6lM/Mo0macpCZ1y+uvpI0QCQYzZrj2M2VIJHBhqBQWlX
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:59:17 2026 by rpki-client