
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/AB2FDD4CA56911EA8F159D7BC4F9AE02.roa
File: AB2FDD4CA56911EA8F159D7BC4F9AE02.roa (raw, json)
Hash identifier: kghpmYNXyuOKorvN1DMiDeZtpzpyQy6xHLKDlrlnfWQ=
Subject key identifier: AB:01:0C:CB:95:15:C7:4E:06:8E:96:FE:5B:EF:0C:23:86:33:5B:4A
Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Certificate serial: 0FFF
Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/AB2FDD4CA56911EA8F159D7BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:47:06 +0000
ROA not before: Wed 14 Jan 2026 18:15:08 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 27822
IP address blocks: 210.57.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4095 (0xfff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Validity
Not Before: Jan 14 18:15:08 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a489aa-b873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c1:88:a8:48:88:a6:4d:6e:79:87:9a:77:be:
2f:c4:5b:a7:49:97:e5:e3:e8:0a:76:0a:33:c7:87:
48:b8:ab:12:20:63:72:07:72:45:96:88:ce:85:f2:
fc:4c:6f:05:0a:14:91:4b:58:1a:99:cb:59:93:09:
53:1f:ce:2e:17:48:e7:8c:2a:c0:ce:c9:6f:d2:1a:
fb:9c:8f:79:4a:13:4e:ee:cb:cf:7e:eb:92:6e:e3:
33:3b:cb:4f:aa:40:e5:de:ea:d2:0f:8a:89:16:e7:
d0:8d:cd:e4:ad:01:1a:c8:0f:9c:99:21:b3:9e:49:
5e:b2:ef:64:5a:5b:77:40:9a:34:28:5a:11:2a:0d:
c1:5d:47:df:ba:b3:ae:6f:96:72:1d:b8:84:cf:10:
a4:f3:94:e7:61:8a:20:31:fa:ff:60:d3:b4:4f:54:
15:bf:2c:20:5b:b0:df:db:f0:2e:f5:bb:61:26:0f:
2f:d1:df:4e:68:dd:db:fa:b3:0d:0e:b1:e3:6b:bf:
3d:12:14:c1:69:c6:2a:98:e6:ac:19:88:ac:55:43:
73:b7:9e:05:a1:9e:9d:04:86:a2:a6:ef:5a:80:04:
3d:a7:6f:de:08:15:ed:cd:2b:3d:52:91:7e:77:4f:
cc:91:32:8d:aa:6e:1e:07:36:ec:3f:8f:d6:29:67:
d6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:01:0C:CB:95:15:C7:4E:06:8E:96:FE:5B:EF:0C:23:86:33:5B:4A
X509v3 Authority Key Identifier:
keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/AB2FDD4CA56911EA8F159D7BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.57.82.0/24
Signature Algorithm: sha256WithRSAEncryption
58:a2:3c:02:00:51:b3:66:ae:a0:88:99:66:af:4a:8b:73:a1:
67:2b:ed:79:9c:40:44:82:d0:c4:52:29:67:7b:86:cd:8a:d0:
98:d9:f6:f3:8b:aa:d9:dc:83:70:7b:6c:d9:c2:53:27:31:b0:
6e:86:d8:aa:3f:ed:5d:ca:26:d8:d7:ca:f5:b7:4d:74:3b:ab:
e5:d7:9f:82:30:d8:5d:9d:3c:09:a8:ee:0a:51:a1:61:f9:ee:
db:48:3a:49:f1:f1:c4:41:db:25:9c:25:55:8b:af:23:f6:f8:
8c:f7:77:e6:b4:91:32:be:30:c4:ab:2d:4b:9a:1d:1d:b6:04:
61:5f:7a:69:ae:47:89:b2:fe:3e:4e:38:8a:39:5e:c1:ef:cd:
33:ed:e8:3b:b6:78:42:c9:ec:28:aa:0c:fa:c2:6c:d4:77:01:
eb:1f:ff:82:0f:2d:8f:58:1a:29:b8:ca:41:df:47:10:30:9c:
db:a6:c3:3f:19:4d:dd:72:68:af:86:cf:8f:5f:e6:f3:9c:fc:
23:db:3d:85:97:2e:e0:38:0c:00:a1:d4:81:32:46:41:39:27:
34:f2:9a:65:29:d8:4e:10:5f:3a:1a:5e:96:68:02:10:05:9d:
7b:e8:f3:cb:a0:2d:a2:76:b1:b0:98:03:3f:9e:cb:12:cc:33:
df:fe:17:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:47 2026 by rpki-client