
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/5B2236E6FD6D11EE951DE436C4F9AE02.roa
File: 5B2236E6FD6D11EE951DE436C4F9AE02.roa (raw, json)
Hash identifier: Rf2OB0gbO9TU9XhcIRlFWi1S/4ci6e0SOPcukNmd0Hg=
Subject key identifier: D8:35:AB:27:4A:06:D1:4D:C8:F2:ED:A0:92:D2:BC:99:73:CB:60:68
Certificate issuer: /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Certificate serial: 08CB
Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/5B2236E6FD6D11EE951DE436C4F9AE02.roa
Signing time: Fri 20 Feb 2026 21:18:44 +0000
ROA not before: Fri 20 Feb 2026 21:18:44 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 14618
IP address blocks: 203.27.226.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl
rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:56:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2251 (0x8cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB7AB, serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Validity
Not Before: Feb 20 21:18:44 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6998cfb4-7392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:c0:86:33:a6:a1:d7:67:b2:f2:ca:6b:ef:
94:14:51:92:42:1d:10:c5:1c:c5:85:6b:43:94:54:
92:25:f6:16:d3:32:8a:c6:b5:27:9a:6d:5b:97:cc:
5e:ae:3a:ae:10:0e:87:b6:b7:99:e8:72:96:f5:c7:
71:40:2a:3f:c4:3e:19:f9:3b:46:43:3b:23:3c:de:
22:d5:f8:2a:a4:61:2d:9a:83:75:be:a8:92:11:b7:
e0:c0:86:33:10:00:6f:79:2f:ba:cc:22:ce:70:d4:
9f:85:25:cd:ec:e2:fb:5b:1f:30:02:68:f2:a5:c6:
30:79:ad:aa:5f:73:7b:3a:2f:30:56:58:1e:42:e2:
c9:42:94:18:4c:2f:9a:1f:2d:38:a9:8e:99:54:67:
a7:33:80:88:63:ef:d2:28:3e:d4:39:07:86:6a:32:
d7:40:11:03:ac:05:ab:ac:53:05:99:94:44:e6:22:
ce:ea:3a:dc:c9:27:f7:d9:aa:8b:fd:43:f7:f4:19:
87:ba:b9:2d:37:49:7e:e2:3f:99:92:a2:03:14:ef:
bc:ad:99:93:50:54:0b:54:82:42:4c:43:34:90:5d:
f2:0f:61:e9:f1:f5:27:d4:b1:f8:a3:65:31:7c:65:
05:1e:e0:03:12:93:92:8b:26:31:05:ad:b6:6b:e4:
5d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:35:AB:27:4A:06:D1:4D:C8:F2:ED:A0:92:D2:BC:99:73:CB:60:68
X509v3 Authority Key Identifier:
keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/5B2236E6FD6D11EE951DE436C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.27.226.0/23
Signature Algorithm: sha256WithRSAEncryption
21:98:de:7d:17:91:e1:c9:f0:6b:53:7f:24:e5:86:51:9b:2d:
7b:5a:0a:40:0a:78:f8:77:f7:98:26:05:61:c4:c1:29:6e:74:
ce:07:6c:fa:24:b4:35:3b:89:dd:bc:ed:92:f1:de:00:3c:1a:
6f:1d:ae:50:c7:2c:69:62:7e:4e:38:8b:68:f9:7c:7f:6b:cf:
1e:94:d2:a7:e8:1e:b3:37:b8:ac:94:aa:28:43:b6:5f:63:06:
28:31:b4:fd:0a:3a:fd:f9:b8:e8:06:95:1d:0c:4e:da:9e:ba:
ab:62:45:a6:56:18:c2:eb:48:46:43:fe:ff:75:80:bf:d0:e3:
a2:ce:de:1f:80:f3:be:d1:10:98:5f:0c:89:04:27:9c:36:88:
58:e8:f0:44:96:c4:92:b1:24:f3:9a:bb:c3:63:ac:a6:33:7d:
6e:40:6a:31:4b:5d:ef:21:07:15:c2:12:aa:c6:4c:ff:e1:22:
8a:33:5e:bc:41:e1:34:32:51:a4:8f:b4:47:1d:be:80:28:b6:
d8:f9:83:09:88:99:b0:1c:1d:2b:dc:d9:b4:b2:c5:a4:38:b8:
d9:37:dc:7a:fa:4a:b1:a7:39:17:2c:ab:b4:60:2a:95:61:c3:
ee:c5:57:6d:2e:b8:9a:e1:a9:ce:9b:51:a4:3c:ec:4e:86:85:
47:c6:3c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:39:35 2026 by rpki-client