
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/AE9742429B5711EB8E3BEB19C4F9AE02.roa
File: AE9742429B5711EB8E3BEB19C4F9AE02.roa (raw, json)
Hash identifier: VlH0/M10psNcoKdtlUVIV48oyOy9vP9GgGbLgRdGLG4=
Subject key identifier: 3D:44:0A:C6:C6:A1:7E:36:10:DD:9C:8F:13:34:19:6A:E2:51:D2:6B
Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Certificate serial: 0FFE
Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/AE9742429B5711EB8E3BEB19C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:47:05 +0000
ROA not before: Wed 14 Jan 2026 18:15:07 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 2706
IP address blocks: 202.64.63.0/24 maxlen: 24
202.64.111.0/24 maxlen: 24
202.64.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:56:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4094 (0xffe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Validity
Not Before: Jan 14 18:15:07 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a489a9-476d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:91:43:3c:75:ef:47:40:3e:70:13:2e:47:dd:
ae:c9:50:18:ff:80:cb:53:7a:bb:d3:30:fd:b1:ed:
d7:0c:91:48:e4:3b:68:79:fd:6a:45:cd:51:13:f5:
f4:8c:03:8d:4f:f9:ed:9b:e3:cf:c8:29:af:70:5c:
23:7b:f8:d2:c2:4d:61:b3:85:aa:63:cd:8f:e0:6a:
4b:2d:2e:56:5d:6f:51:36:d1:38:80:3c:1e:6e:8f:
e2:f8:5b:40:cc:fd:41:93:80:69:b9:2f:fc:d7:8f:
bd:f7:07:1c:14:ac:44:df:75:5e:74:5c:01:84:47:
38:3d:27:e8:20:9e:c0:80:e6:9c:71:bc:45:4b:55:
09:f5:35:bf:2d:75:f2:02:18:14:d6:10:1a:a4:2c:
9c:0f:eb:b2:44:dd:4a:30:86:12:84:bb:da:b0:64:
e3:83:2f:7e:99:f3:66:4b:ec:e7:f1:2a:3c:8f:d1:
3c:00:33:64:19:4a:43:0d:50:22:eb:f7:06:96:c5:
a8:68:aa:00:74:a9:5b:f7:bc:33:49:fb:60:89:68:
ad:3b:9c:0f:8d:ed:e0:1b:9c:9a:93:ff:e5:38:16:
be:af:fa:57:eb:f3:75:df:66:36:bf:ac:dc:eb:84:
02:cb:b7:f2:1a:a6:94:78:14:cc:8e:ad:35:0b:49:
9f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:44:0A:C6:C6:A1:7E:36:10:DD:9C:8F:13:34:19:6A:E2:51:D2:6B
X509v3 Authority Key Identifier:
keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/AE9742429B5711EB8E3BEB19C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.64.63.0/24
202.64.111.0/24
202.64.131.0/24
Signature Algorithm: sha256WithRSAEncryption
37:55:aa:89:90:cf:e9:78:a9:86:47:11:66:b4:e9:87:78:68:
8d:4a:7d:b3:7f:b1:85:86:48:b2:a4:3c:24:27:5b:36:33:9f:
e9:66:e6:31:b3:89:df:95:0c:10:a8:50:18:3d:33:c8:75:5b:
d4:f3:6e:7e:2d:5e:36:00:26:be:06:43:cf:8f:93:57:ef:ae:
c4:98:24:87:eb:05:28:9b:f8:f8:59:e8:d9:22:c5:97:16:af:
da:3f:7f:58:4d:47:4e:0e:e3:8c:96:50:b6:22:c7:5c:ca:b9:
af:06:95:48:28:2f:d8:85:11:e5:72:01:71:9d:ac:20:57:98:
38:65:fd:6f:0e:d6:95:db:d9:0f:93:6f:4a:2e:5b:b8:98:db:
67:d7:e4:6a:71:90:b5:7d:fa:3c:a0:68:ab:82:bb:55:bf:1f:
90:b9:f7:a3:a3:a0:e5:5f:23:19:6e:8d:b7:d3:20:df:66:e2:
f5:00:43:60:7d:c8:98:c7:74:be:75:a0:69:81:3a:5b:2b:ff:
0a:5a:22:c8:34:8e:8e:b3:03:1c:8f:0d:ae:f3:83:ac:0f:53:
91:ea:f6:30:04:20:ea:d8:6a:c1:ab:a7:dd:04:35:38:a4:97:
8d:e9:5a:05:c2:45:f8:61:fe:d9:0f:0d:df:76:94:c3:21:3d:
c4:9a:49:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:21:47 2026 by rpki-client