
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/81D7045C0F5511EFA55FC44EC4F9AE02.roa
File: 81D7045C0F5511EFA55FC44EC4F9AE02.roa (raw, json)
Hash identifier: 9C7Ac0PFJ0pVK3uHp6lcC3NK8Wue9GSrKpStNAJGhxs=
Subject key identifier: 73:9B:E1:82:2A:DF:A3:67:37:D8:29:9A:BF:DE:F4:24:F8:5B:BF:27
Certificate issuer: /CN=A91C8DD1/serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1
Certificate serial: 0181
Authority key identifier: 06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/81D7045C0F5511EFA55FC44EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 05:39:52 +0000
ROA not before: Wed 05 Mar 2025 06:23:01 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 152644
IP address blocks: 202.47.134.0/24 maxlen: 24
202.47.135.0/24 maxlen: 24
2401:89a0::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl
rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:43:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8DD1, serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1
Validity
Not Before: Mar 5 06:23:01 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3d128-6304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:51:73:04:b2:31:37:8e:2d:3b:b1:da:2d:8e:
8e:74:ad:3d:ff:e6:67:61:23:4c:9a:43:20:92:45:
4a:a0:ea:da:30:9c:2c:19:32:6d:dd:ec:cb:b2:99:
7a:23:ea:3d:37:b5:55:e9:f3:65:0f:18:f6:e7:ce:
0d:1a:99:ce:2f:72:04:59:bb:ad:1f:e5:02:03:16:
52:30:f9:c6:6e:f0:83:eb:de:90:e8:1a:25:ac:2f:
31:d6:88:1c:e6:34:c1:bb:06:9e:02:13:85:e0:00:
78:6a:bb:ca:43:0c:e3:82:41:00:0d:b7:85:58:98:
33:03:23:89:11:eb:3c:50:6b:11:a5:3c:69:67:79:
52:3d:1c:49:e2:eb:4c:7f:6d:b6:5d:55:b5:3d:28:
1e:60:fa:00:07:c3:f4:58:99:b0:51:47:00:80:ba:
89:33:70:43:bb:37:80:36:eb:9d:fa:4a:0a:a3:34:
30:53:55:b7:1b:cd:8b:64:ec:ad:8d:e0:39:26:89:
6e:9f:97:df:26:74:c3:61:e9:83:1f:d8:df:7d:39:
71:dc:57:fe:78:80:10:12:a5:ec:42:08:d9:db:97:
96:d6:41:22:0a:1a:36:be:3a:46:28:f5:40:7f:ea:
9d:58:05:2a:49:2c:53:ca:1e:b0:8f:cf:ef:fa:01:
8a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9B:E1:82:2A:DF:A3:67:37:D8:29:9A:BF:DE:F4:24:F8:5B:BF:27
X509v3 Authority Key Identifier:
keyid:06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/81D7045C0F5511EFA55FC44EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.47.134.0/23
IPv6:
2401:89a0::/32
Signature Algorithm: sha256WithRSAEncryption
6f:28:97:0f:30:d1:ee:05:1d:3a:18:53:6f:e8:4e:44:43:3c:
20:88:03:be:3a:c3:90:09:0e:86:bb:29:96:a8:a7:91:e6:61:
f5:d3:a1:c5:55:24:a7:47:5d:41:eb:7b:b6:d3:4c:6f:0d:b3:
a2:f4:63:e6:1e:3e:0a:9b:4a:91:07:8e:d5:53:0a:e4:51:3d:
c2:12:6e:b0:e3:12:13:e4:05:c8:0e:0f:48:45:89:5c:82:8c:
df:60:bc:c8:a1:11:10:90:4e:e6:d9:33:a4:9e:d3:81:a8:d2:
d1:b9:d8:18:27:f3:b5:cc:54:b3:78:72:5d:61:8f:26:5e:21:
d1:e7:99:35:ec:a9:23:e5:b8:04:97:86:87:d7:12:c5:cb:1f:
2a:8c:ed:c0:8b:24:25:5b:5e:40:26:58:34:eb:2b:01:61:81:
20:9c:c7:19:07:99:39:7c:8a:99:1d:2c:9a:65:d2:c5:5c:ab:
71:41:b9:47:5e:03:2d:09:ca:17:57:ff:5b:84:e4:5e:ab:f7:
b2:36:12:e9:f0:9f:bc:2f:28:40:2f:6a:1c:7a:6f:88:33:20:
52:ac:46:f2:b9:70:d1:b9:72:51:95:3f:c0:c3:1b:52:b3:42:
7c:56:77:c8:9e:a0:06:e2:e1:6d:66:08:5b:64:3e:c2:40:2e:
d6:c4:4a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:25:53 2026 by rpki-client