
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/02DB290681BA11F1AFA7F5BA63A30FBC.roa
File: 02DB290681BA11F1AFA7F5BA63A30FBC.roa (raw, json)
Hash identifier: 7w+IdEQsacdAbIj19ntwMYOmg0otF10JGkbSjv2kAec=
Subject key identifier: 61:73:CF:53:45:12:41:AA:95:DD:96:19:1C:0A:DF:6B:10:00:EA:4C
Certificate issuer: /CN=A91D1F47/serialNumber=366DEE6647EA1329D6BF5AB99CA3FEA80282FD44
Certificate serial: 3D
Authority key identifier: 36:6D:EE:66:47:EA:13:29:D6:BF:5A:B9:9C:A3:FE:A8:02:82:FD:44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/02DB290681BA11F1AFA7F5BA63A30FBC.roa
Signing time: Tue 27 Oct 2026 08:56:25 +0000
ROA not before: Tue 27 Oct 2026 08:56:25 +0000
ROA not after: Mon 31 Jan 2028 00:00:00 +0000
asID: 14618
IP address blocks: 203.78.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.crl
rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Nov 2026 09:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1F47, serialNumber=366DEE6647EA1329D6BF5AB99CA3FEA80282FD44
Validity
Not Before: Oct 27 08:56:25 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=6ae06739-14b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:02:91:d8:22:24:3a:3d:8f:16:f0:e3:75:07:
d4:c7:b4:14:20:51:b5:bc:66:ec:62:2f:e4:5c:d4:
1f:4b:72:b7:e4:fa:a9:08:c1:a4:50:05:d0:94:f9:
7d:ff:72:16:3d:f1:4d:55:b6:ec:d2:70:79:27:10:
c2:54:72:40:e3:e2:8b:3c:fd:1e:a0:a8:69:b3:a1:
fe:cd:5e:da:24:90:1e:62:c6:f8:24:7d:e6:f8:7f:
e7:ca:c6:95:e2:fe:2b:f9:d1:db:e9:e8:22:fa:05:
31:87:eb:7a:88:db:76:8c:59:29:6c:c2:25:ca:13:
ce:b2:1f:75:c6:5d:3a:b8:a3:3d:13:2d:fd:d3:2e:
ee:de:ea:10:30:a9:af:c8:63:51:e0:ad:96:33:25:
0c:ef:30:6f:77:1d:ac:62:5f:24:4d:c1:44:a1:e7:
64:54:ec:20:0a:da:7e:9b:fb:4e:cd:47:11:70:4f:
69:f8:d1:18:64:25:02:4c:3c:fe:33:f9:d0:7f:63:
22:c6:39:bf:62:86:46:e6:5c:a6:11:bd:58:f4:8e:
80:48:81:bc:1a:58:39:22:fc:e4:55:44:37:53:30:
5e:0e:0d:77:8e:15:f6:95:b4:a7:34:4b:b7:a5:d7:
4b:6f:52:3d:cc:b9:6e:2f:d3:24:04:8e:63:1b:3c:
41:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:73:CF:53:45:12:41:AA:95:DD:96:19:1C:0A:DF:6B:10:00:EA:4C
X509v3 Authority Key Identifier:
keyid:36:6D:EE:66:47:EA:13:29:D6:BF:5A:B9:9C:A3:FE:A8:02:82:FD:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nm3uZkfqEynWv1q5nKP-qAKC_UQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F47/2A61956881B611F1A450582261A30FBC/02DB290681BA11F1AFA7F5BA63A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
203.78.9.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:b8:16:62:87:72:77:9f:e4:4f:06:a2:dd:26:6f:67:b2:43:
61:22:cd:45:17:e0:2b:e8:6b:dc:a7:77:08:54:37:a8:20:bc:
4a:c2:a0:01:e4:bd:57:cb:f6:70:d2:7e:fc:46:2e:f1:43:72:
c7:99:59:88:56:0f:03:5d:02:e9:06:29:57:ea:87:0d:77:d0:
30:a5:15:a5:02:ae:99:1c:c3:5a:30:22:e9:0f:48:ed:07:b5:
d0:ef:cb:c6:cb:7c:a8:8e:6b:5a:40:86:dc:39:f3:fd:db:d6:
5c:32:c5:41:42:77:c7:40:df:05:79:f7:82:93:f3:19:f7:0e:
b3:2c:1a:13:e6:2b:af:68:21:e7:ff:cd:d9:ff:b5:a1:81:3a:
c1:3f:f3:cf:f9:04:80:7e:b8:7b:22:21:0a:a3:99:11:aa:3f:
e4:91:86:b7:15:fe:4f:15:e7:12:b4:6c:02:6a:1f:36:91:27:
87:af:02:a5:b2:77:1f:9d:4f:f9:71:eb:7d:2a:52:99:c3:6f:
9a:00:22:3c:69:6a:0e:87:65:af:f6:ab:71:4e:48:39:df:fe:
8c:a9:8e:6d:fa:d2:fe:a1:a6:b7:a0:15:7f:82:91:e4:a6:aa:
a5:d2:d8:c1:b1:cf:a6:41:77:82:64:c7:b5:3d:e2:a3:24:92:
c2:75:da:5d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 5 07:51:42 2026 by rpki-client