
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/44D1A4E69DAB11F0A7401064C4F9AE02.roa
File: 44D1A4E69DAB11F0A7401064C4F9AE02.roa (raw, json)
Hash identifier: /dWw78lmDvPsrlgqtDvPWypN8cQFZwkLxuNHhkdxFFI=
Subject key identifier: 18:F4:60:2A:9C:5F:E6:53:C4:35:29:7D:60:74:D4:66:9C:22:19:70
Certificate issuer: /CN=A91CA294/serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE
Certificate serial: 59
Authority key identifier: AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/44D1A4E69DAB11F0A7401064C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:14:27 +0000
ROA not before: Tue 30 Sep 2025 03:12:17 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 4648
IP address blocks: 202.37.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl
rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:38:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA294, serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE
Validity
Not Before: Sep 30 03:12:17 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a3e753-4fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8a:93:63:d3:00:43:b9:f4:d6:f3:58:50:72:
16:11:db:c3:66:26:fa:60:5c:23:c6:0c:81:f1:af:
f6:a7:fc:43:ba:3e:db:cd:c7:25:2b:3c:b6:52:d2:
85:c5:47:5e:56:1e:ee:d2:47:41:93:87:f2:8b:7e:
13:c9:e6:81:26:75:40:7b:8a:70:be:5c:70:b7:d2:
82:d1:cd:97:91:10:aa:5c:db:a6:71:78:67:40:61:
c4:1a:ee:e9:19:05:b7:8d:53:a5:b8:e2:3f:52:77:
ec:86:55:cf:1f:d1:3c:d6:88:7f:12:98:82:5a:24:
e3:25:ba:c5:a7:5f:6e:ff:7c:a1:3b:d0:82:a5:3b:
b9:a6:f5:43:dd:43:a1:4f:6c:3f:a5:f6:05:5e:7d:
4e:72:e2:af:77:41:28:d8:f2:72:e5:63:07:64:31:
f4:2c:e8:30:b3:e7:e1:c8:ac:12:39:90:b6:12:72:
f8:7d:d7:f2:8d:bd:e0:cc:ba:49:44:e9:4d:29:bd:
b8:e3:90:6c:0e:54:41:7e:fd:03:2e:33:c5:da:6f:
02:06:a4:e6:22:3c:01:9d:57:6c:26:af:ce:55:60:
ef:88:e3:ab:ab:06:f4:5c:ea:44:dd:d5:a4:97:5b:
35:af:aa:f5:69:1a:1d:18:47:91:80:9b:c2:25:52:
26:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F4:60:2A:9C:5F:E6:53:C4:35:29:7D:60:74:D4:66:9C:22:19:70
X509v3 Authority Key Identifier:
keyid:AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/44D1A4E69DAB11F0A7401064C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.37.26.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:58:99:3d:32:b8:de:20:4a:68:63:e6:11:d5:7e:87:4a:90:
d4:ce:82:19:fc:75:38:b8:7a:7e:c7:ab:a1:e0:ea:5a:a9:36:
f1:85:bd:4b:fc:d5:38:b6:a2:21:61:52:63:36:b5:11:8f:1c:
54:57:15:b5:02:c9:ac:0b:a5:6b:35:c7:b6:92:6d:ad:20:15:
a2:ab:61:36:7c:56:30:d9:3b:45:4b:45:43:1e:c6:01:d3:a5:
d4:9c:ba:cc:40:02:d8:65:83:3d:dc:da:d4:16:2c:75:24:a9:
15:2f:7e:33:82:48:3c:c4:3f:9d:af:1b:23:c4:c5:da:60:0f:
fb:96:f1:dc:a1:19:18:e0:96:35:67:6c:1f:ae:ac:95:51:b7:
b7:38:08:13:d2:cb:52:41:be:51:02:a7:d4:74:10:01:08:29:
e8:dc:74:bc:60:54:09:94:8c:a9:36:72:a5:ff:64:bf:ce:a9:
b5:7e:f2:87:25:7e:84:be:5b:6f:fd:8e:20:c7:a5:79:a7:38:
49:82:37:09:42:9f:0e:3a:9f:d3:79:ad:b0:71:4b:e0:a2:4c:
d3:a1:58:64:33:37:a5:7f:da:9c:a1:8d:0d:6d:ad:32:7d:a9:
1a:54:9a:58:d0:8d:6d:03:6c:ef:97:a7:44:c7:41:2f:e7:e0:
73:c3:a4:f0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:54:36 2026 by rpki-client