
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/5A4C001A77CC11EAB764ED34C4F9AE02.roa
File: 5A4C001A77CC11EAB764ED34C4F9AE02.roa (raw, json)
Hash identifier: RZg0gpmdXTOMxiQZM8/sa1zNNrDaJ9Ayd3Yfhg6mOsA=
Subject key identifier: 1D:C9:DB:B8:45:2C:43:D2:E7:F2:9B:AF:E3:CA:B2:F0:01:EF:29:3F
Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Certificate serial: 0FFC
Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/5A4C001A77CC11EAB764ED34C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:47:03 +0000
ROA not before: Wed 14 Jan 2026 18:15:05 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 24456
IP address blocks: 210.57.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4092 (0xffc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Validity
Not Before: Jan 14 18:15:05 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a489a7-d681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e8:38:f8:89:5d:ba:61:a6:ad:30:d7:59:70:
83:b7:6a:d9:93:b3:ee:f5:1d:6e:dd:92:28:0b:71:
2c:c4:90:fd:6a:4e:c7:cc:14:f1:4a:cd:2c:44:61:
1d:23:ed:ea:71:44:d1:ee:07:c6:b9:e5:4b:49:e7:
41:00:cd:5c:fc:2e:7b:bf:95:20:7a:11:68:9b:1f:
86:5d:6f:b5:c1:06:a1:b3:97:a0:0d:85:74:c5:90:
6f:95:ad:aa:5f:47:33:c6:75:55:6c:bc:15:fe:38:
02:ca:8b:59:76:40:62:6e:de:3d:60:a1:8e:1f:07:
a2:74:3c:be:b3:ab:7d:ec:7c:ec:f2:06:74:4d:f5:
16:c5:1c:48:9e:c2:03:d3:b2:5d:09:f8:eb:81:ce:
06:2f:49:91:e0:b3:62:a5:1e:4b:83:30:a4:eb:07:
9c:7a:bb:10:ed:fc:58:00:72:45:e3:aa:fc:f4:ba:
7a:95:4a:34:42:72:06:5e:01:f4:44:9f:e1:63:f6:
9d:8b:5e:0b:4b:aa:bf:4b:3a:96:4c:9c:55:7c:9a:
aa:51:d9:17:d9:33:c5:4d:d7:d5:8f:37:8b:1b:22:
a0:6e:04:ea:78:d4:ae:f1:9a:91:c2:b0:6d:0b:19:
18:b2:8b:ae:12:77:74:18:18:e2:73:88:3e:a7:e1:
e2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C9:DB:B8:45:2C:43:D2:E7:F2:9B:AF:E3:CA:B2:F0:01:EF:29:3F
X509v3 Authority Key Identifier:
keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/5A4C001A77CC11EAB764ED34C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.57.42.0/24
Signature Algorithm: sha256WithRSAEncryption
55:66:fc:b0:b9:ec:d6:f4:fd:c7:e0:3c:39:cb:a7:fa:a5:53:
78:38:e9:61:d7:43:42:63:85:86:ea:19:93:d2:6b:fa:ca:d8:
47:2f:7c:68:67:c1:84:f5:58:75:16:93:9b:fd:78:27:1b:ef:
d8:30:b7:12:6f:6c:d6:09:6c:90:77:32:50:5b:11:91:a8:04:
b9:a6:52:d2:ba:a6:e4:f5:e0:53:43:43:f9:ee:77:c7:dc:8d:
06:5d:76:c5:d8:04:e2:01:39:26:ae:0a:37:2e:6a:f7:e4:3e:
af:53:f7:61:c5:1a:03:78:45:8e:56:23:23:08:00:a1:29:62:
7e:d0:4b:ce:ea:0c:e4:62:2f:2b:56:e0:cd:bd:6e:9b:19:50:
05:36:6f:44:57:d0:6c:ce:3c:b1:49:71:26:01:51:9d:d1:bd:
50:38:e2:bb:6e:05:84:bc:ae:ca:f7:be:bc:45:af:ca:78:fb:
93:35:f9:9b:05:29:0e:f6:4c:b3:8c:88:26:77:05:a2:f7:29:
ea:33:40:07:3c:18:66:6d:67:32:db:5a:8c:b7:e3:f9:9f:b8:
56:46:a4:b3:1f:ae:42:72:61:e6:a8:93:c7:98:d4:76:c7:5d:
f6:cc:b9:c6:ae:27:0a:b3:30:f8:bd:23:91:f6:b2:3a:60:3e:
68:7c:36:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:11 2026 by rpki-client