
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/465DA74CEE4C11EFBBD5275FC4F9AE02.roa
File: 465DA74CEE4C11EFBBD5275FC4F9AE02.roa (raw, json)
Hash identifier: tH5QdrM5BI7YZdCrU5OOkkE/5lDxC/6rAyyrjtobnT8=
Subject key identifier: 29:EC:CB:0E:5B:90:B7:C6:E8:15:3D:83:C7:B2:79:1C:BA:48:0B:91
Certificate issuer: /CN=A91D41AC/serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377
Certificate serial: F5
Authority key identifier: BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/465DA74CEE4C11EFBBD5275FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:14:06 +0000
ROA not before: Tue 18 Feb 2025 23:01:24 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 139077
IP address blocks: 121.200.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl
rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D41AC, serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377
Validity
Not Before: Feb 18 23:01:24 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a481ed-5580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a7:8d:e8:12:e4:5f:be:c5:8b:e7:d4:10:1f:
d8:27:df:a6:4e:6f:cc:10:73:92:b6:3c:44:ab:69:
95:fa:0f:db:62:48:b0:04:73:90:73:90:10:f2:57:
f0:76:3a:0b:b3:2b:46:4f:ed:af:6a:e3:86:ba:b8:
9b:a5:b3:a9:ad:e1:db:1f:c3:b6:f8:9c:e9:8d:c3:
e2:83:1c:36:62:e9:03:59:be:a3:c8:6c:0b:81:fc:
ea:4d:07:a4:91:c9:ee:d3:9a:f7:2b:4c:4e:04:d5:
dd:12:2f:09:bb:d0:d9:a2:60:8b:f0:13:5c:2a:b9:
ae:c1:44:ad:1c:9f:85:81:0c:65:45:6f:61:42:a1:
53:a3:6c:ed:04:7c:07:06:c8:df:28:f5:ac:71:2b:
5e:15:4b:af:8e:dc:57:b8:62:ef:b4:cf:0f:c4:97:
62:79:10:43:9c:5d:12:e3:40:19:8c:e0:b4:4a:48:
7f:ae:53:09:20:46:ba:08:77:9d:b8:46:9a:46:d8:
40:29:7d:18:0b:a9:8f:5e:20:7e:41:2c:8f:ee:cc:
30:22:94:a1:b4:81:90:85:a4:97:af:a6:51:d1:8a:
3b:38:cf:d3:57:11:2d:1f:ef:8c:57:d8:6f:cc:c7:
93:8c:c6:db:b4:b9:4c:07:6a:c0:6e:5c:ee:27:0a:
eb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EC:CB:0E:5B:90:B7:C6:E8:15:3D:83:C7:B2:79:1C:BA:48:0B:91
X509v3 Authority Key Identifier:
keyid:BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/465DA74CEE4C11EFBBD5275FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
121.200.212.0/23
Signature Algorithm: sha256WithRSAEncryption
33:e4:a3:b3:5e:41:af:be:57:88:22:ed:a1:8e:58:50:28:96:
39:bb:08:28:08:c8:1c:cb:74:05:d6:64:36:55:49:ba:61:63:
68:2f:21:ec:aa:d9:d2:34:c0:7a:82:4e:4b:1b:0b:3f:d4:f8:
5b:89:e9:7e:ae:6f:3c:84:af:19:4b:51:d3:58:0e:f2:d7:0d:
fb:dc:06:cc:0e:f1:f0:00:a1:f1:9c:b4:9b:ea:5f:60:c1:a1:
f8:01:f7:6a:e6:a2:1a:fc:50:62:f8:6d:2c:cb:05:fd:9a:1b:
0e:a1:e8:cf:f1:1d:06:a1:01:af:53:41:11:4c:49:39:d1:ef:
72:19:07:00:e5:96:1a:d3:16:4b:00:89:18:29:59:81:f2:74:
c9:67:4c:b1:03:50:90:b6:f9:a2:e9:4d:74:e2:05:fa:01:a6:
d1:e9:69:26:a8:77:ae:8d:1d:0a:f2:3f:3e:cd:22:43:cf:c1:
ae:6e:c7:29:32:00:59:cb:63:d3:5c:f2:08:da:f2:db:d8:a5:
44:b0:c5:aa:1a:0c:86:f9:55:a0:73:3b:f5:72:85:81:c8:84:
0e:60:e4:8f:5c:90:8a:7b:30:5a:d6:b0:f7:72:03:c1:d3:7d:
ae:c8:8a:d2:08:9d:50:3c:49:7b:84:87:32:e6:0f:cb:9c:19:
94:b2:90:c8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQxQUMxMTAvBgNVBAUTKEJGOTg2ODhFOThCMDFFODRENzM2NkY2Nzg2NENFOEYz
RUJCRDQzNzcwHhcNMjUwMjE4MjMwMTI0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODFlZC01NTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx6eN6BLkX77Fi+fUEB/YJ9+mTm/MEHOStjxEq2mV+g/bYkiwBHOQc5AQ8lfw
djoLsytGT+2vauOGuribpbOpreHbH8O2+JzpjcPigxw2YukDWb6jyGwLgfzqTQek
kcnu05r3K0xOBNXdEi8Ju9DZomCL8BNcKrmuwUStHJ+FgQxlRW9hQqFTo2ztBHwH
BsjfKPWscSteFUuvjtxXuGLvtM8PxJdieRBDnF0S40AZjOC0Skh/rlMJIEa6CHed
uEaaRthAKX0YC6mPXiB+QSyP7swwIpShtIGQhaSXr6ZR0Yo7OM/TVxEtH++MV9hv
zMeTjMbbtLlMB2rAblzuJwrrNwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCnsyw5b
kLfG6BU9g8eyeRy6SAuRMB8GA1UdIwQYMBaAFL+YaI6YsB6E1zZvZ4ZM6PPrvUN3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDFBQy8yNDQ1QkNFMkU5
M0YxMUVGOERGMUUwMzVDNEY5QUUwMi92NWhvanBpd0hvVFhObTluaGt6bzgtdTlR
M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Y1aG9qcGl3SG9UWE5tOW5oa3pvOC11OVEzYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDQxQUMvMjQ0NUJDRTJFOTNGMTFFRjhERjFFMDM1QzRGOUFFMDIvNDY1REE3NENF
RTRDMTFFRkJCRDUyNzVGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBecjUMA0GCSqGSIb3DQEBCwUAA4IBAQAz5KOzXkGvvleIIu2hjlhQ
KJY5uwgoCMgcy3QF1mQ2VUm6YWNoLyHsqtnSNMB6gk5LGws/1Phbiel+rm88hK8Z
S1HTWA7y1w373AbMDvHwAKHxnLSb6l9gwaH4Afdq5qIa/FBi+G0sywX9mhsOoejP
8R0GoQGvU0ERTEk50e9yGQcA5ZYa0xZLAIkYKVmB8nTJZ0yxA1CQtvmi6U104gX6
AabR6WkmqHeujR0K8j8+zSJDz8GubscpMgBZy2PTXPII2vLb2KVEsMWqGgyG+VWg
czv1coWByIQOYOSPXJCKezBa1rD3cgPB032uyIrSCJ1QPEl7hIcy5g/LnBmUspDI
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:01:54 2026 by rpki-client