
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/EC56413A5B4B11EE9A031C81C4F9AE02.roa
File: EC56413A5B4B11EE9A031C81C4F9AE02.roa (raw, json)
Hash identifier: JZoZOHjhkyr5rz4uHhJA9OG57kt5JcA7v4fP2oMs0KA=
Subject key identifier: 82:22:C3:AE:D2:BB:BF:94:55:91:D3:AF:F9:74:55:E0:6E:44:AF:46
Certificate issuer: /CN=A91CE5A6/serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833
Certificate serial: 01F4
Authority key identifier: 00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/EC56413A5B4B11EE9A031C81C4F9AE02.roa
Signing time: Tue 14 Apr 2026 00:25:13 +0000
ROA not before: Tue 14 Apr 2026 00:25:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1851
IP address blocks: 43.241.200.0/22 maxlen: 22
45.121.132.0/22 maxlen: 22
103.37.128.0/22 maxlen: 22
203.26.136.0/24 maxlen: 24
2403:7900::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl
rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:09:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 500 (0x1f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE5A6, serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833
Validity
Not Before: Apr 14 00:25:13 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69dd8969-3d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:40:ba:61:ce:bb:d3:83:2d:7f:1c:c6:9a:d5:
27:a8:77:86:80:0f:f2:94:8c:8b:4f:4e:77:9e:ac:
5e:b7:74:c9:e1:86:3b:14:58:4c:81:5e:72:1c:21:
eb:03:75:cb:ab:8e:98:8c:b3:95:70:dc:ab:85:4f:
3e:d7:89:10:d0:2b:b5:d4:93:96:d5:48:cb:11:d5:
5e:df:b7:fc:da:38:15:40:8b:9a:0a:9d:19:c5:d1:
6b:0d:25:ed:5e:ba:65:be:a0:52:9b:f9:bd:4d:3b:
7f:ed:4e:4d:e8:f9:c1:20:16:07:2d:4f:82:68:62:
04:60:40:ce:db:a1:23:15:9d:16:6f:fe:b2:05:ad:
b7:6c:5c:76:52:de:87:5f:d0:aa:36:61:98:67:06:
5c:b6:9e:9b:16:2d:d2:fa:4a:0f:f0:94:06:3c:51:
f1:57:b3:94:ee:dc:b7:84:c3:1d:9d:6b:32:9e:09:
a1:d0:8d:6e:26:cb:68:3b:f2:27:c4:5e:22:c7:a9:
39:db:4a:59:00:83:58:04:f1:25:af:db:02:1e:cf:
31:8e:b8:ea:7e:6e:e0:3e:dd:8a:23:70:76:58:29:
37:12:62:ef:ef:48:c9:d5:52:16:1f:2e:7f:52:24:
f6:19:cd:39:08:7c:2c:15:84:da:6a:a3:e3:c1:50:
b5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:22:C3:AE:D2:BB:BF:94:55:91:D3:AF:F9:74:55:E0:6E:44:AF:46
X509v3 Authority Key Identifier:
keyid:00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/EC56413A5B4B11EE9A031C81C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.241.200.0/22
45.121.132.0/22
103.37.128.0/22
203.26.136.0/24
IPv6:
2403:7900::/32
Signature Algorithm: sha256WithRSAEncryption
62:2e:78:ba:cd:63:58:a8:a0:d7:72:f0:83:43:8c:9e:7a:66:
67:32:71:9b:b9:06:f6:f4:4c:a3:4f:4c:57:de:56:5b:c3:29:
01:44:e3:da:7b:3b:35:c4:37:24:bb:69:f2:4c:61:60:34:33:
ed:d9:e1:c0:bd:af:7e:c6:86:3e:0c:5a:70:29:13:5e:8f:24:
08:07:00:29:55:c3:4c:3d:d5:62:54:c8:83:ea:55:63:24:1c:
73:cb:8c:e7:90:f2:23:37:d3:74:28:47:8a:47:3e:66:83:1c:
86:90:bc:00:6f:22:46:49:bb:96:4e:48:7d:15:9c:43:27:35:
17:9f:57:c2:c3:4d:bc:aa:5d:88:38:69:b5:98:56:e5:03:90:
22:71:fe:b8:42:23:a3:d8:3c:15:6f:82:47:9d:e4:6d:00:2d:
cd:d3:85:48:44:5d:1c:47:de:bc:36:00:1f:68:e9:aa:a8:db:
f7:8c:96:33:17:26:40:92:17:08:1a:56:e1:f3:98:70:d4:62:
c6:c6:ee:34:02:4e:46:d6:e2:72:3e:48:be:5b:ef:32:f4:70:
6d:fa:05:4b:c2:e4:91:5c:67:1a:1a:c6:6a:5f:fe:83:82:c5:
a7:06:15:0d:85:6b:a4:2f:64:6a:71:7c:30:d7:67:7d:df:95:
4b:64:0c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:31:57 2026 by rpki-client