
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/939530627B6311F0BF7B4936C4F9AE02.roa
File: 939530627B6311F0BF7B4936C4F9AE02.roa (raw, json)
Hash identifier: ZFhHCFeUOh6APH456On8FdyIkUmcfvvz5IW62S7F69c=
Subject key identifier: 55:B2:19:0F:57:0B:7E:3B:27:5B:23:21:71:75:67:AA:4B:41:5F:90
Certificate issuer: /CN=A91D1623/serialNumber=A6150780E0BA11EA0ADC434AED383C8B82A8961D
Certificate serial: 0207
Authority key identifier: A6:15:07:80:E0:BA:11:EA:0A:DC:43:4A:ED:38:3C:8B:82:A8:96:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/939530627B6311F0BF7B4936C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:37:06 +0000
ROA not before: Sun 17 Aug 2025 12:13:26 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 17828
IP address blocks: 202.1.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl
rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:15:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 519 (0x207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1623, serialNumber=A6150780E0BA11EA0ADC434AED383C8B82A8961D
Validity
Not Before: Aug 17 12:13:26 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a3de92-7ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:de:5e:d5:89:f9:3d:e5:07:23:cd:9c:72:7b:
b7:d7:9e:7f:69:ee:ae:0a:ca:4d:60:78:91:07:f7:
3f:2a:1d:26:d5:5f:cb:e5:23:1a:ba:5e:42:ee:ea:
48:36:05:bb:6b:d1:af:72:36:ad:59:ad:8e:31:e2:
c8:39:54:31:9b:63:b1:87:a0:68:22:28:04:8a:50:
ea:da:52:bb:5d:01:88:e2:9b:1c:6b:c7:bf:12:40:
3d:0e:4a:d0:67:65:31:12:09:c5:4f:e7:ba:56:ef:
4f:5d:77:ed:05:cc:d2:79:22:7a:5b:d3:7b:26:12:
16:99:f7:0e:db:19:7f:ac:59:08:f5:b2:a8:69:30:
fd:de:bd:6c:8f:82:fa:d8:ad:8f:42:6f:62:38:47:
8d:95:66:72:16:e4:f7:1f:71:a0:dc:b4:26:8a:f9:
03:12:7f:fd:1c:c3:b9:20:c2:82:c0:d9:9d:f4:8e:
f9:1f:05:65:fe:fd:39:3c:e1:7c:fb:cf:39:4d:27:
66:e0:34:99:96:54:43:86:41:55:ff:d8:c7:10:c1:
ac:65:59:b7:fe:e6:44:ac:5c:88:07:1c:69:cc:c9:
fc:a3:61:53:38:80:40:01:6f:56:c4:ed:e7:bd:2d:
fc:8b:e7:47:8a:23:14:49:6c:13:b3:4b:25:1c:74:
b3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B2:19:0F:57:0B:7E:3B:27:5B:23:21:71:75:67:AA:4B:41:5F:90
X509v3 Authority Key Identifier:
keyid:A6:15:07:80:E0:BA:11:EA:0A:DC:43:4A:ED:38:3C:8B:82:A8:96:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/939530627B6311F0BF7B4936C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.1.32.0/20
Signature Algorithm: sha256WithRSAEncryption
af:51:74:bd:13:de:65:4e:c6:1f:df:ae:1b:bc:a3:68:8f:51:
6e:1b:52:95:04:6b:af:c5:1b:50:74:ab:3e:17:b7:51:43:21:
94:35:90:b2:e7:68:f0:1d:b6:0f:60:72:5a:00:3f:8c:9b:bf:
37:c4:5f:5f:6c:27:34:8e:2a:83:bd:13:a5:99:fa:c6:5d:0a:
41:22:1c:c8:a1:f9:fd:09:9b:b0:fd:a3:fe:06:df:51:7c:32:
5d:65:f6:f9:e9:0b:2e:ce:32:ab:87:2d:63:d2:32:ba:22:f4:
44:c5:04:0f:04:8e:d7:57:ae:0c:52:da:4a:6e:ae:f4:9e:0f:
fa:3c:3d:73:e5:54:69:e4:1e:d9:0c:33:fc:ed:d2:bc:5d:70:
fc:5a:4c:6a:ec:1e:09:7a:2f:d1:60:67:d3:72:a6:fe:e6:16:
d1:74:e6:6f:b3:f0:e7:e1:c5:77:f5:cc:92:47:d5:c5:54:07:
2c:e0:60:9a:08:14:b2:e8:cc:7a:8b:75:a0:14:0b:f1:d3:75:
83:d3:02:b4:82:06:df:25:85:43:6a:c6:ab:03:86:9c:13:80:
a3:a2:88:4b:09:e9:87:0e:03:8f:eb:62:79:6c:25:64:87:a1:
9a:44:bb:8c:cd:6a:6c:54:92:e2:c7:1f:d1:6e:4e:0b:e4:04:
53:f7:1b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:39:49 2026 by rpki-client