
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/B390F78E5CB611EE97D70B78C4F9AE02.roa
File: B390F78E5CB611EE97D70B78C4F9AE02.roa (raw, json)
Hash identifier: 2Pvyl2Pg+rvxhHMBAknVnfhicVn7ercKKujcqDRSopc=
Subject key identifier: 00:0F:1D:08:1B:15:5C:E0:F2:02:B8:F3:53:B2:B0:1C:E5:20:8B:5A
Certificate issuer: /CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454
Certificate serial: 01D6
Authority key identifier: 36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/B390F78E5CB611EE97D70B78C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:21:04 +0000
ROA not before: Sat 05 Jul 2025 04:40:28 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 58421
IP address blocks: 202.49.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl
rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:04:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 470 (0x1d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFC1C, serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454
Validity
Not Before: Jul 5 04:40:28 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a41310-e044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:14:12:5b:57:c6:61:69:06:4d:4a:b8:17:50:
99:ab:48:91:7b:fb:ea:82:cb:b7:38:d7:92:cf:ca:
96:55:4f:4c:b8:5d:32:7f:aa:3f:32:b3:4e:39:70:
23:f8:6b:a0:47:7f:60:4f:23:47:e4:5f:a7:0a:ab:
f0:a6:e2:b6:54:67:fa:f4:b1:df:0e:9a:cc:4a:00:
31:dd:c0:be:6b:67:ab:1f:88:2c:70:ed:d7:fb:2c:
ed:55:c7:a2:44:8b:2b:bf:8a:35:e5:30:88:6c:ce:
76:d4:91:47:d3:25:cf:53:81:68:04:37:28:eb:6f:
25:ac:6f:8a:3c:79:29:a6:8e:ad:8f:10:8b:71:48:
c2:21:69:17:fa:bd:d8:68:92:b7:f5:59:53:87:00:
eb:ef:f4:70:55:f6:75:cc:8b:9d:53:5f:fc:bf:06:
1f:4d:9c:10:f6:81:02:f7:42:79:aa:03:c2:b4:66:
80:34:a1:07:23:d2:fd:62:14:e5:6a:44:0d:08:05:
d9:b8:91:c3:29:7a:34:78:c1:70:1f:c5:92:68:b6:
3a:2a:d7:8b:65:5b:f4:20:07:05:1e:81:d1:c5:5b:
5d:48:e0:24:d8:07:17:a8:bf:16:3b:3b:be:70:9d:
3c:0b:28:74:82:78:98:14:f5:d7:e5:2a:32:38:5c:
f0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0F:1D:08:1B:15:5C:E0:F2:02:B8:F3:53:B2:B0:1C:E5:20:8B:5A
X509v3 Authority Key Identifier:
keyid:36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/B390F78E5CB611EE97D70B78C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.49.208.0/21
Signature Algorithm: sha256WithRSAEncryption
28:27:bd:36:70:e9:e9:49:4d:33:58:6a:d6:60:3c:d9:2f:8f:
02:76:25:ef:df:5c:9f:d9:14:8f:51:92:0f:79:5e:8c:e7:29:
5b:a1:72:74:cc:b5:c4:21:4b:29:ec:0a:b1:c8:cc:69:8c:e6:
52:0e:2f:cf:e0:61:14:29:49:70:49:ff:57:a8:9a:9e:3b:e4:
44:1d:22:4a:58:21:0b:f1:f8:65:4b:bf:25:ab:91:d8:7e:60:
3f:75:62:53:38:ce:98:78:af:f7:d9:08:92:39:f9:78:5c:b5:
65:eb:ac:cf:2a:1e:78:2c:97:13:57:08:90:f6:56:8c:17:e1:
2f:9c:e0:4a:aa:f7:6f:cc:75:f4:74:1b:7f:0e:7e:17:39:0c:
09:01:e7:1b:87:44:1a:4a:3b:b1:0b:2f:35:3d:31:97:5a:99:
5c:ed:41:dd:a4:50:0c:70:18:e0:51:66:0e:07:fa:5c:55:4b:
5f:49:99:22:c0:ac:83:dc:00:07:1d:18:af:85:26:28:38:99:
43:cc:a2:e7:0f:bb:56:e8:79:a0:27:04:79:87:c0:3f:4b:e3:
2b:f0:f7:29:f4:3a:fd:23:f5:24:04:e0:b6:9d:75:30:34:54:
96:a2:2b:b4:cb:70:68:af:09:33:ce:b7:ee:d0:36:3f:86:da:
45:e5:40:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:57:48 2026 by rpki-client