
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/964EB3D49A5F11EC9124627BC4F9AE02.roa
File: 964EB3D49A5F11EC9124627BC4F9AE02.roa (raw, json)
Hash identifier: 7IlaGTjLJWbx6PnU7BddxHIB93LX+4J3qLIjVMAHpm4=
Subject key identifier: 46:7C:9E:FC:AD:DD:AB:33:78:F4:41:B6:A0:77:3D:BA:60:4C:9F:D8
Certificate issuer: /CN=A91D1C02/serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B
Certificate serial: 0437
Authority key identifier: 7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/964EB3D49A5F11EC9124627BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:01:41 +0000
ROA not before: Sat 23 Aug 2025 01:05:35 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 4049
IP address blocks: 202.37.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl
rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1079 (0x437)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1C02, serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B
Validity
Not Before: Aug 23 01:05:35 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a40e85-4057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:15:cd:a1:b6:05:53:26:6b:56:9a:e5:5a:cd:
b3:c8:e1:c3:0d:a1:f6:29:9c:8d:9a:ea:2d:3f:6a:
28:42:f1:60:ea:2c:5b:fe:a0:d8:39:fd:4d:13:f4:
1e:90:e7:2d:3d:ad:db:4a:37:85:9d:09:3d:86:93:
c0:2a:17:7d:df:86:82:56:8a:d3:9b:69:f9:ee:65:
d0:d5:4c:74:5e:ad:76:70:d8:8f:0b:6c:05:2b:2d:
88:e9:e5:6f:4d:9b:79:47:5b:25:50:f9:28:6c:c4:
a6:c3:55:25:ff:56:de:cc:e5:dd:69:34:8d:1a:84:
90:cf:58:71:dc:1f:54:f7:91:8b:9f:e5:83:49:0b:
fa:92:98:7a:16:70:90:7a:37:93:5a:93:e3:c5:b1:
af:71:6d:f0:7b:0f:b8:a1:01:95:c1:96:9a:1d:9b:
b1:4e:26:fd:dd:2c:24:43:e1:b8:f2:32:30:b2:4a:
0b:5f:8a:ac:7b:eb:a2:6b:95:be:48:c4:7d:8f:32:
0b:e9:ad:60:24:cf:db:9e:d4:24:86:7e:4c:2c:67:
a3:15:82:68:e5:3b:36:60:bb:a9:0f:e8:20:23:fd:
c6:f0:49:25:4a:28:76:a1:e0:26:58:1c:2f:eb:29:
99:b5:d8:0d:ec:4c:68:6c:a4:85:cd:82:c9:9a:8c:
6e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7C:9E:FC:AD:DD:AB:33:78:F4:41:B6:A0:77:3D:BA:60:4C:9F:D8
X509v3 Authority Key Identifier:
keyid:7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/964EB3D49A5F11EC9124627BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.37.54.0/24
Signature Algorithm: sha256WithRSAEncryption
77:30:f4:3a:5c:e4:28:d4:89:ac:64:fa:51:cd:39:0e:db:6f:
88:02:1d:92:46:5c:a7:c2:80:bc:a5:88:74:67:f0:2e:ee:9f:
2e:ad:1a:cc:6c:93:b4:58:e6:0d:92:76:79:fb:44:be:53:15:
c7:c3:e6:ce:ad:2c:05:35:9d:a2:c0:45:f4:74:05:82:ad:b8:
5a:05:85:4c:d6:06:67:cc:fe:9a:35:70:56:6b:2c:ba:41:57:
e5:4b:96:60:30:15:13:fb:8f:a9:83:06:e7:b8:cb:75:a8:17:
49:66:f6:46:7e:1b:44:43:6c:34:25:8b:da:d9:06:af:fd:15:
45:ab:c8:6d:e0:a5:47:af:bd:ed:a1:6c:95:d3:05:1e:9c:fc:
ed:e5:2d:e4:00:3f:c9:dd:88:23:87:08:2d:0f:79:04:10:68:
18:36:c4:a5:df:3e:2b:13:b3:05:ec:f5:49:ad:e9:de:c0:25:
b6:91:22:e7:78:3e:cd:92:b1:93:c9:1e:7e:eb:4c:7f:76:f1:
6a:41:75:ea:eb:0d:d8:1f:97:73:e9:ce:7d:64:2d:0e:d3:a6:
eb:84:c4:b3:17:f1:62:ee:13:60:0e:bf:62:44:29:fd:b5:89:
1f:1b:6c:09:82:23:1f:e6:e6:20:09:91:57:99:27:fb:af:8e:
4a:95:81:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:50:43 2026 by rpki-client