
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/0D06C406887511F094C09643C4F9AE02.roa
File: 0D06C406887511F094C09643C4F9AE02.roa (raw, json)
Hash identifier: fWHn2iDFgqEBh1OqsVAxNpoFUrx8d2vNfDWyJG2ndTU=
Subject key identifier: E3:B5:38:85:8F:6A:E9:E1:5A:A4:F0:C3:CA:E4:C3:3C:5A:74:1B:04
Certificate issuer: /CN=A91CFDD0/serialNumber=92B4C2A692940B548E635044335A985BEE22BDA1
Certificate serial: 5C
Authority key identifier: 92:B4:C2:A6:92:94:0B:54:8E:63:50:44:33:5A:98:5B:EE:22:BD:A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/0D06C406887511F094C09643C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:29:17 +0000
ROA not before: Wed 03 Sep 2025 03:21:16 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 154166
IP address blocks: 203.174.16.0/23 maxlen: 23
2402:2560::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.crl
rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:28:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFDD0, serialNumber=92B4C2A692940B548E635044335A985BEE22BDA1
Validity
Not Before: Sep 3 03:21:16 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a3dcbc-72d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ff:01:e3:7c:20:08:0d:72:3b:e8:5d:38:ed:
88:6f:49:a8:2e:c8:f1:b6:aa:1e:6e:11:a3:47:51:
cc:19:5e:b5:d4:ec:1e:8d:af:ec:dd:04:c0:6b:db:
a4:05:26:bb:b0:98:71:94:1b:90:52:ac:27:ce:4e:
9f:cf:20:ba:10:81:fa:0a:4f:06:4b:e8:7d:35:28:
a1:ea:6d:11:a4:c6:29:47:01:0d:f7:28:0f:ed:13:
33:ec:d4:86:3f:97:e0:e7:9b:3d:53:ee:fe:1e:8d:
d9:d4:94:93:00:95:ad:df:c2:1f:1c:58:78:d5:13:
fe:8e:e2:3f:8d:52:fe:08:94:70:11:ef:d5:52:c9:
45:78:e1:23:35:f6:f2:49:f8:d6:67:ff:51:08:fa:
ef:88:bd:3b:8e:e3:8a:4f:65:4e:27:84:4f:51:a3:
7a:2a:1b:83:a7:3c:63:6f:8c:e3:d8:bf:42:97:eb:
25:bc:33:c1:c3:22:13:e6:c9:35:7a:85:76:d4:bf:
58:28:65:5e:6f:26:d2:f2:e8:c9:36:6d:97:40:43:
d0:53:da:64:ae:02:de:d4:e6:64:37:be:1c:ea:d5:
2f:0f:44:92:ac:32:b3:f5:db:92:87:0e:ed:3d:41:
78:4e:14:c0:fe:0f:16:67:80:0c:06:b6:36:18:32:
08:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B5:38:85:8F:6A:E9:E1:5A:A4:F0:C3:CA:E4:C3:3C:5A:74:1B:04
X509v3 Authority Key Identifier:
keyid:92:B4:C2:A6:92:94:0B:54:8E:63:50:44:33:5A:98:5B:EE:22:BD:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/0D06C406887511F094C09643C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.174.16.0/23
IPv6:
2402:2560::/32
Signature Algorithm: sha256WithRSAEncryption
49:42:15:fd:87:7d:ac:27:5f:84:ff:b0:d4:43:60:4d:1f:b0:
96:2f:58:4b:77:dd:df:7d:36:bb:de:50:f3:86:0b:62:5c:a6:
b6:32:b5:0f:b1:02:bd:19:61:e2:13:19:48:a9:41:32:86:0e:
c2:38:4c:54:91:76:52:72:43:cd:5f:33:49:75:31:28:50:64:
70:d2:f9:ad:56:3e:34:94:24:92:ae:75:b7:29:5f:1f:fb:66:
b6:44:34:23:81:45:ee:49:35:01:3e:46:eb:ee:b8:62:b4:87:
32:3b:33:b8:ad:1d:a9:b6:53:4e:1e:2e:f4:4e:af:80:04:06:
3d:dc:f7:12:92:2d:d5:eb:33:b1:d9:9a:ab:f2:b1:ca:8f:fc:
32:84:45:4f:39:80:92:c8:36:15:18:4a:c1:c5:5d:32:08:36:
a6:40:2c:01:7e:ec:1a:59:4d:f5:cd:87:da:83:13:76:40:f7:
ad:97:f0:63:da:92:04:0d:2e:b7:24:af:44:ad:22:5b:e2:fc:
85:88:8a:ee:52:70:cd:62:8a:ee:12:b3:2a:4c:a2:2c:16:91:
db:64:45:22:08:73:fe:5c:b2:f8:b6:f4:88:49:a8:24:61:d3:
5f:59:0a:d8:78:8d:db:61:b0:dd:78:bb:1a:99:0c:ba:27:e9:
d7:8f:1a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:11 2026 by rpki-client