
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/826A614C16D911F183D175C0323D8C67.roa
File: 826A614C16D911F183D175C0323D8C67.roa (raw, json)
Hash identifier: vzlm2lNsNkYyqc9HraEI88fz4qcYmcDAB/JqH0Rt1J4=
Subject key identifier: 8E:37:01:20:D4:AF:24:8F:75:E9:1B:E0:25:27:33:1C:EA:2A:15:7A
Certificate issuer: /CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
Certificate serial: 0390
Authority key identifier: B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/826A614C16D911F183D175C0323D8C67.roa
Signing time: Sat 29 Aug 2026 01:50:42 +0000
ROA not before: Sat 29 Aug 2026 01:50:42 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 834
IP address blocks: 203.33.238.0/24 maxlen: 24
203.33.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl
rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912 (0x390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D366A, serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
Validity
Not Before: Aug 29 01:50:42 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a923af1-fc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1a:41:01:7f:63:f2:9c:7e:08:36:b3:c5:99:
a5:e5:2d:5f:8a:19:ab:15:2e:60:64:d7:f9:ce:84:
3d:f8:09:90:73:f8:7f:3f:fb:fe:d5:8d:15:de:cc:
ba:eb:b8:62:fc:84:9b:cd:85:f4:f4:22:41:ad:38:
91:fc:e5:bd:49:44:79:2b:f9:1e:f3:41:bd:20:73:
dd:7d:b7:a2:3f:81:49:a8:67:8a:cf:b9:bd:66:2a:
eb:25:92:c9:21:1b:a8:17:94:27:74:27:f4:ad:bd:
4e:eb:7b:59:ae:45:7e:36:bc:ae:ac:9c:7b:39:6b:
57:a3:87:cc:f8:c8:8b:1d:0e:b7:5c:7c:a0:db:af:
eb:28:1d:bd:2c:c2:1c:84:1c:d3:21:59:f1:37:5a:
4c:ee:cf:9a:dd:b4:ad:65:40:b5:ae:ef:bd:e3:df:
85:4a:c6:90:fb:bd:f4:6c:2b:05:3b:58:5a:ab:44:
42:00:91:bb:ef:c0:5f:27:06:6e:3c:33:16:32:8d:
8a:0f:59:8a:a7:c6:1a:42:6c:2f:d7:fb:00:41:6a:
45:bd:b0:f0:b2:f1:0f:62:dc:56:3c:27:9f:21:3a:
c7:c7:10:5b:b5:57:3d:31:e9:82:d4:ad:31:ef:7c:
c8:0f:65:dd:cb:b2:45:9c:c0:7c:3a:45:41:44:4f:
cb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:37:01:20:D4:AF:24:8F:75:E9:1B:E0:25:27:33:1C:EA:2A:15:7A
X509v3 Authority Key Identifier:
keyid:B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/826A614C16D911F183D175C0323D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
203.33.238.0/23
Signature Algorithm: sha256WithRSAEncryption
05:b3:39:37:f0:df:52:ff:73:18:df:6b:57:1a:33:e7:76:fc:
5e:fa:19:1b:8b:42:0d:12:6f:fb:ca:36:eb:36:d4:a7:77:bd:
66:87:90:df:c9:ec:60:29:d3:e8:0b:ad:8a:80:3c:56:96:f0:
5b:86:29:a6:39:14:c1:ce:2e:6d:12:6c:80:8a:2c:a3:40:b7:
1a:7e:ba:c7:1d:86:1b:c3:7f:9c:00:0b:c5:86:6a:90:f2:09:
0c:ba:0c:af:b1:2d:22:aa:ed:fe:57:3c:88:f9:f2:a0:30:18:
2f:1d:2f:97:08:49:e5:d7:67:ac:e4:6a:cc:a5:43:61:4c:5f:
12:ac:5b:c8:8f:d6:dd:66:1a:2b:1f:ab:5b:7f:a2:18:1c:17:
e5:ca:15:0c:7e:13:7f:c2:c7:6a:bf:26:1f:02:0f:4f:17:41:
57:eb:25:aa:1a:62:c3:47:05:14:30:74:e7:6f:b2:ca:f0:94:
4a:3f:8f:c9:4a:7c:b3:77:93:f9:f1:f0:89:6f:23:65:6e:a5:
17:29:0b:fd:9c:43:c0:ab:fa:92:3b:39:32:58:c2:fb:ec:12:
c9:53:7c:88:b6:33:bb:26:ee:3b:e9:89:d9:ce:8c:56:51:fb:
b3:b7:22:91:7f:67:be:1c:9c:d3:ca:e2:10:b3:7a:6d:4b:86:
84:c6:55:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:20:53 2026 by rpki-client