
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/9A1D8B2E867D11ED856A8E54C4F9AE02.roa
File: 9A1D8B2E867D11ED856A8E54C4F9AE02.roa (raw, json)
Hash identifier: fdYZt6jklY3bJQYs/J5vrVMo+1h7F5ICSVyf7ebtNOQ=
Subject key identifier: B6:E0:20:CC:95:E3:DC:9B:B6:4A:BB:D1:8B:9F:F7:2C:B8:EB:C2:A3
Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial: 070C
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/9A1D8B2E867D11ED856A8E54C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:19:12 +0000
ROA not before: Mon 10 Nov 2025 22:45:39 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 65001
IP address blocks: 42.104.91.0/24 maxlen: 24
123.63.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:38:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1804 (0x70c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Validity
Not Before: Nov 10 22:45:39 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4912f-f219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:43:6d:a9:74:7e:9d:fe:43:3b:4e:6a:43:bc:
36:59:fa:cb:00:4a:c6:24:36:d7:d2:be:59:10:31:
4a:ba:79:91:ce:5d:1d:4b:76:69:49:d2:f4:27:7b:
73:ff:71:f3:3b:d0:3d:74:7f:14:f2:ab:8d:eb:36:
a3:8e:60:21:d9:29:5e:fa:9d:0c:6a:c5:59:c6:2b:
c5:6f:cc:5b:9e:88:62:19:6a:39:7f:40:78:0a:3a:
3e:53:4b:fe:d4:c7:ca:97:b6:09:d0:e4:4c:3e:7a:
d2:91:0b:57:54:83:dd:2e:77:39:14:03:eb:9c:c7:
1e:02:28:8c:8a:df:d7:3d:b3:30:99:e2:05:5a:63:
87:00:7f:4e:e5:1d:7d:7b:73:40:fb:a0:76:8e:50:
30:86:c3:e7:f5:15:5e:f2:92:6f:c1:6a:2a:5b:8c:
eb:3d:a4:41:4f:cc:16:be:cc:97:96:b6:13:6c:30:
0f:be:47:30:9e:dc:ea:6b:a6:e8:3e:59:0c:16:d8:
94:8e:65:9d:a9:6d:4a:39:2f:2d:82:64:5c:d7:66:
de:7b:c7:06:7f:bc:a4:20:57:c9:d1:3e:30:10:b1:
e0:0a:6d:cd:cc:8c:30:e0:1b:da:a5:1d:8d:7f:32:
72:6f:00:a3:d1:d4:7a:c2:33:ae:b0:7e:65:ca:46:
f2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E0:20:CC:95:E3:DC:9B:B6:4A:BB:D1:8B:9F:F7:2C:B8:EB:C2:A3
X509v3 Authority Key Identifier:
keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/9A1D8B2E867D11ED856A8E54C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
42.104.91.0/24
123.63.162.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:fb:fa:9a:09:f5:a7:35:69:fe:44:a4:99:80:41:41:73:3f:
f9:43:f0:c5:06:c3:de:1e:ba:ea:43:22:da:40:37:1d:f1:b2:
6a:d9:66:5c:5b:a3:45:f1:81:6a:57:1e:83:29:c2:cc:e2:9f:
53:0b:89:e7:18:de:29:c2:53:f5:4d:2f:37:59:b3:29:5e:3b:
2a:be:a0:6e:df:d1:13:cb:16:a8:97:27:4d:99:27:99:1e:d6:
8a:6c:a0:82:04:93:3d:63:21:1f:7a:a7:51:ff:f2:a8:54:65:
4f:1b:72:18:5e:cb:45:98:24:fc:32:56:ae:2e:c4:c3:8d:f1:
be:b0:d5:5a:13:45:8e:5e:c2:48:e5:31:da:68:94:a4:a2:bd:
64:3b:55:25:5b:5e:b9:d1:15:cd:a5:0b:79:2f:bb:01:ed:13:
b1:1f:1a:72:de:09:b3:a3:e5:67:f3:9f:aa:21:85:f6:1f:3a:
e0:4c:60:c0:65:0b:66:49:8a:da:77:6c:0a:57:6e:c3:22:3d:
4a:d3:45:fb:b8:85:35:55:53:14:df:0a:9d:55:97:3b:43:69:
92:ec:45:5a:26:20:9f:0a:50:97:d1:02:3e:0b:17:32:d6:43:
eb:41:b4:b9:fb:bb:5b:23:b0:f1:49:d0:e6:7d:c5:49:a9:f8:
ec:84:70:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:50 2026 by rpki-client