
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/A1DFD796A65511EABDAED713C4F9AE02.roa
File: A1DFD796A65511EABDAED713C4F9AE02.roa (raw, json)
Hash identifier: YyKcKSJ7S51a2fFSdQw73Pts8nXvTGeoBxsVn9SkZSo=
Subject key identifier: 58:C7:4E:B6:2A:06:BA:18:0C:2B:58:44:5D:00:C1:78:F4:D1:42:9F
Certificate issuer: /CN=A91C9D04/serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0
Certificate serial: 09A5
Authority key identifier: 7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/A1DFD796A65511EABDAED713C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:57:34 +0000
ROA not before: Thu 06 Mar 2025 17:05:36 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 17981
IP address blocks: 202.131.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl
rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2469 (0x9a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9D04, serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0
Validity
Not Before: Mar 6 17:05:36 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a48c1e-be6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:80:66:31:dc:e8:51:2e:69:ed:72:ff:dc:17:
6d:93:1b:cc:40:c0:61:88:a8:fd:a5:c9:e6:9a:90:
a4:a0:2d:20:19:da:9e:ec:b2:60:18:41:26:50:9d:
2e:ee:38:88:cd:44:49:cf:db:f6:3d:f2:9b:08:16:
22:69:71:78:70:f3:81:79:99:38:d3:3c:72:e2:e6:
24:b2:ce:9b:27:c3:06:11:f5:c3:35:65:99:a5:20:
42:4c:37:76:67:d3:12:97:96:83:d5:b6:88:47:5f:
d7:be:19:d8:84:19:6d:ce:9b:1a:fd:5d:60:0c:35:
70:41:ae:dc:ee:e0:ec:9f:33:50:68:93:10:a9:61:
df:51:bf:43:b8:f3:da:41:38:3e:5b:f8:2d:e9:14:
8a:fb:66:ec:c8:50:38:0b:e0:7b:c1:25:d5:67:d0:
18:22:ad:a9:f5:d0:09:fd:b2:4e:73:d7:51:88:0e:
a7:7b:81:da:ae:98:7b:e3:ff:a8:cb:0b:6d:85:0b:
58:4f:97:b2:44:14:ca:28:b1:d6:59:38:6f:b1:1c:
34:f0:fa:81:4c:ee:4f:af:df:a3:92:2f:11:90:76:
52:58:5e:9a:ec:0b:ae:62:e6:92:dd:e8:f4:ef:33:
30:43:be:9a:b2:c5:33:88:0f:64:ec:cb:e1:6a:fa:
27:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C7:4E:B6:2A:06:BA:18:0C:2B:58:44:5D:00:C1:78:F4:D1:42:9F
X509v3 Authority Key Identifier:
keyid:7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/A1DFD796A65511EABDAED713C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.131.80.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:15:c1:90:27:64:8b:91:c9:48:f7:24:dc:66:fa:29:13:0b:
e5:b7:74:5e:11:19:cc:43:db:c4:66:ad:24:a2:25:bf:e7:db:
3c:a1:d9:0c:2a:a6:2d:a0:f4:9d:2a:63:69:97:11:e0:04:fe:
f9:76:32:80:ea:97:f6:d6:17:1e:70:b0:2f:72:62:e9:f4:33:
34:e4:47:3f:0c:32:3f:58:c2:4b:07:c3:de:ff:3f:cc:1a:6b:
f2:72:c5:fe:a9:35:fa:6b:1e:16:49:d5:80:dd:74:b1:5c:ea:
f9:9f:cc:8a:3a:5f:7b:4e:81:e6:82:4c:88:30:f2:c9:3f:e1:
f7:8f:3a:6b:8e:d7:ad:87:c6:4c:fa:ad:c5:0e:7a:6d:96:c1:
a3:2b:64:e3:d3:e7:77:29:ab:48:b4:c9:0f:a3:fb:6b:6a:aa:
aa:b5:84:f6:20:cc:3d:0b:9d:13:8a:cd:fc:18:ee:d7:ef:9e:
43:b5:7f:0e:ee:42:d1:96:2f:00:b3:bc:80:8d:52:36:07:dc:
e0:d2:d5:4f:15:21:b0:39:70:de:57:75:da:1c:46:2f:ea:ca:
20:b2:fe:32:76:23:74:46:93:f7:e7:d5:3c:d5:47:dc:de:8d:
95:4c:13:a6:3d:4d:65:47:9d:84:56:29:35:13:ec:e7:17:f8:
6b:e7:76:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:27:22 2026 by rpki-client