
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/9CD8288C4E8A11F19227706FB4833773.roa
File: 9CD8288C4E8A11F19227706FB4833773.roa (raw, json)
Hash identifier: bz5HvlyJChQOF3XneSRjJVVssggTRFwZETZcrDevXF8=
Subject key identifier: 36:DD:C8:0F:3A:3C:9F:F5:34:76:95:DD:50:B9:8E:DD:A3:A5:4D:31
Certificate issuer: /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial: 0378
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/9CD8288C4E8A11F19227706FB4833773.roa
Signing time: Fri 05 Jun 2026 02:33:40 +0000
ROA not before: Fri 05 Jun 2026 02:33:40 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 202.126.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 888 (0x378)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Validity
Not Before: Jun 5 02:33:40 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a223584-12f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:78:21:a8:c9:7f:7d:37:ce:3a:e0:d8:0e:43:
f4:c6:88:cb:3c:0e:f0:71:bd:9d:77:34:cc:92:81:
aa:58:93:6a:6e:66:17:5f:55:9b:a3:89:47:36:ca:
8d:52:20:04:25:1d:f7:69:3b:db:7e:37:25:0f:b5:
3d:87:81:84:da:56:a2:cf:62:94:98:74:ac:11:d2:
f2:a5:0c:43:fa:3a:5c:2d:58:f0:ad:1f:7c:7f:90:
8b:55:e5:d8:3b:92:a8:98:49:ef:d0:da:2f:54:c7:
5a:16:9e:dd:56:e2:ba:79:45:d3:45:e2:62:b8:60:
80:50:58:b1:72:d7:8d:60:c4:ee:9a:66:54:84:b8:
11:b2:bc:51:9d:73:42:36:4c:10:6a:c0:72:17:da:
9e:cd:7b:3c:1b:79:ef:88:b1:28:10:20:81:7a:cd:
23:b0:c1:7e:12:1e:5b:86:94:50:f0:e8:bd:ad:50:
3a:3a:91:67:f6:10:13:cd:4f:2e:9c:27:49:57:a0:
ce:0b:3d:e4:9f:3d:b6:a0:0d:58:0d:74:0c:31:43:
f9:48:4a:c9:93:d6:ad:94:88:fe:5d:d0:ef:9c:73:
9b:71:24:20:bc:a1:d3:23:b6:5f:53:08:ad:c5:aa:
37:4d:00:fa:4e:71:82:55:a6:9b:09:79:0e:aa:5c:
45:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DD:C8:0F:3A:3C:9F:F5:34:76:95:DD:50:B9:8E:DD:A3:A5:4D:31
X509v3 Authority Key Identifier:
keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/9CD8288C4E8A11F19227706FB4833773.roa
sbgp-ipAddrBlock: critical
IPv4:
202.126.97.0/24
Signature Algorithm: sha256WithRSAEncryption
94:66:f3:6a:d7:08:e2:01:c9:f4:d2:a1:16:99:6d:ba:00:be:
ca:b6:dc:01:3d:3d:b9:ea:64:f1:5e:34:f8:18:a8:ee:3a:30:
5a:d5:c7:c6:61:a8:b3:73:76:74:be:c8:5c:ec:45:24:2e:5a:
2a:de:3c:a0:56:98:4c:02:83:79:ae:c7:0f:6c:7b:f4:ba:d2:
ff:d4:25:61:e9:b7:36:df:f1:b1:10:bf:f6:d8:f2:b1:9d:fb:
7f:ee:bd:cb:f0:4b:36:7b:75:27:2d:6a:b8:90:9c:42:bc:b6:
b9:63:54:b9:82:bf:b2:ab:bd:f5:ab:93:86:64:32:2b:d9:f9:
e5:cb:c7:ee:5f:15:04:21:10:f6:89:3b:e5:0f:18:6c:7e:fa:
06:2c:55:d0:d4:b6:05:81:bd:5e:38:16:d3:28:6d:9d:62:d9:
4d:ab:a3:81:45:0a:77:10:87:a9:0d:3f:be:e9:c6:8e:31:d4:
be:46:60:53:70:fb:99:58:ca:4f:b9:fd:66:ca:cd:b3:ce:a5:
27:64:d5:1e:5e:2d:b5:b0:18:c1:7d:9d:d7:42:98:da:9e:d4:
43:e1:1b:a6:29:f9:4b:bd:ca:b2:02:6f:3e:e0:93:db:16:fe:
35:f6:ce:0c:f5:f1:a5:ac:d8:a1:42:69:d4:80:9a:e4:24:d1:
3f:7d:c3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:06:43 2026 by rpki-client