
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/C8F47C68CA7D11F08981F02FC4F9AE02.roa
File: C8F47C68CA7D11F08981F02FC4F9AE02.roa (raw, json)
Hash identifier: OG3oYepv5jinbrTIqLnKVnsyRhVbKiJfo0/1FedLH6A=
Subject key identifier: 6E:32:EC:63:E7:1A:F3:19:D2:36:BB:AE:AA:B1:AC:D7:FF:DC:B8:25
Certificate issuer: /CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5
Certificate serial: 0C02
Authority key identifier: 45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/C8F47C68CA7D11F08981F02FC4F9AE02.roa
Signing time: Thu 26 Feb 2026 19:15:59 +0000
ROA not before: Thu 26 Feb 2026 19:15:59 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 202736
IP address blocks: 116.193.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl
rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:08:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3074 (0xc02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3B8A, serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5
Validity
Not Before: Feb 26 19:15:59 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a09bef-5217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4e:88:01:c8:e7:5f:9d:51:5b:a0:a4:61:7e:
65:c4:47:1a:f4:49:ed:18:ba:97:a0:e7:b0:3b:2d:
ef:e4:d8:e0:0b:0b:38:4d:5a:e6:f9:25:95:e9:34:
7d:15:9f:46:1c:8d:8f:f9:25:2c:49:ad:a8:15:0a:
a0:32:e8:1e:9d:21:0d:ba:f5:6f:fe:a5:f2:b2:fe:
1d:68:a4:00:cc:40:7a:c2:b8:1f:9a:ef:03:36:84:
66:70:3a:64:c8:d5:08:de:f7:b0:49:fd:4f:7e:37:
73:f8:51:57:96:61:5e:58:ae:49:d3:43:98:ef:10:
d3:c8:58:3a:0f:69:74:80:a6:0e:62:d3:46:37:61:
36:44:12:f8:78:fa:89:ae:b5:07:cf:26:d1:f7:b2:
86:28:8c:eb:07:e5:0f:a1:7d:fb:98:8a:fb:f4:ef:
c3:56:4f:c3:bb:a9:7b:35:ab:93:cf:f4:67:c8:b0:
e7:4a:8d:85:00:68:ed:4b:40:2c:04:eb:b5:b3:e5:
dc:4e:6a:73:87:81:f5:af:8e:0c:3a:ae:66:ee:2f:
f1:cf:f1:fd:a2:4e:1f:84:29:a9:c2:39:b6:90:62:
40:7c:56:33:98:e4:e1:3e:3a:43:e3:81:d4:4f:2a:
31:14:3e:c9:f8:33:2b:13:11:b8:55:35:f5:41:13:
a3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:32:EC:63:E7:1A:F3:19:D2:36:BB:AE:AA:B1:AC:D7:FF:DC:B8:25
X509v3 Authority Key Identifier:
keyid:45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/C8F47C68CA7D11F08981F02FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.193.156.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:48:f6:ba:e8:c1:69:d2:ac:a6:53:35:e3:6e:2c:b0:16:15:
3a:fd:4c:7e:c9:30:12:bb:d4:1a:a1:4f:0d:59:16:31:11:e2:
cd:56:bf:c0:f1:ea:93:43:87:a1:1e:5a:23:a9:a8:c5:c1:2b:
a1:f4:57:66:6e:d9:7f:4f:b7:0d:40:ee:90:21:2f:d4:af:a0:
44:1b:67:c7:21:47:f2:fa:de:6a:aa:d1:ef:73:27:38:40:ff:
5f:23:82:0b:34:e3:05:cd:16:19:08:da:d8:d4:6e:bf:44:6a:
f8:1f:40:1d:6a:fd:55:e9:52:c4:7b:9c:34:8d:9b:8c:da:63:
62:8a:ac:aa:f4:be:4a:18:26:c7:37:cc:cc:96:94:5f:bd:f5:
1c:32:c5:dc:02:0b:fe:fc:c3:8f:80:c0:6f:38:9f:b0:e3:4a:
02:0e:92:1d:f6:c2:40:f4:89:f3:84:1e:92:f5:8f:ea:7b:9e:
da:81:34:b3:2b:cd:e3:7b:a1:41:35:85:22:b3:b1:f9:a3:06:
7b:7c:6c:3d:c1:c0:7f:32:9b:44:56:30:45:12:1c:89:84:26:
22:29:3a:dc:18:e5:32:20:70:cf:3d:67:8a:72:13:f4:5f:75:
70:64:09:a0:14:71:0f:e1:8d:b7:49:e5:43:8b:33:58:08:d2:
c7:20:62:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:54 2026 by rpki-client