
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/9ED3F83E133C11F1B30AE476243D8C67.roa
File: 9ED3F83E133C11F1B30AE476243D8C67.roa (raw, json)
Hash identifier: nq220lMUi6BfNypprnd+QWHRMvb9845PiOosPu3Sk3Y=
Subject key identifier: 6D:77:6D:D8:60:CB:98:EF:1D:C2:CC:AC:F9:58:5C:36:AB:64:AF:FF
Certificate issuer: /CN=A91DB39D/serialNumber=B279D34FE308EC4ABF42011119C8D22CB6F61AC4
Certificate serial: 06C5
Authority key identifier: B2:79:D3:4F:E3:08:EC:4A:BF:42:01:11:19:C8:D2:2C:B6:F6:1A:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/9ED3F83E133C11F1B30AE476243D8C67.roa
Signing time: Thu 26 Feb 2026 17:57:31 +0000
ROA not before: Thu 26 Feb 2026 17:57:31 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 55333
IP address blocks: 202.72.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl
rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:47:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1733 (0x6c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB39D, serialNumber=B279D34FE308EC4ABF42011119C8D22CB6F61AC4
Validity
Not Before: Feb 26 17:57:31 2026 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a0898b-ca89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:89:75:d6:97:70:37:b6:2d:c6:60:ce:3f:90:
f4:bf:d2:db:af:46:95:9b:dc:21:66:3b:ff:b5:7b:
77:89:1b:81:88:f0:a9:76:96:b7:c6:91:bd:95:92:
a3:cf:76:b8:f5:f4:b8:89:fb:3b:a7:23:df:d8:56:
20:9d:85:9e:6e:6d:15:ec:00:f8:b1:61:1d:b4:37:
98:c8:06:cc:b3:e1:71:1b:c0:3b:77:f5:5b:7b:1e:
c1:76:fe:a7:ca:76:c9:f7:43:4b:ae:cd:77:64:8f:
1b:48:cf:61:b6:42:a7:39:73:23:39:24:ef:ac:3a:
2d:7c:bc:3f:2f:27:de:e9:9e:5a:88:2b:cb:14:b2:
47:0f:78:2a:19:75:f8:83:b0:ab:80:dd:28:82:fa:
95:5e:34:9a:9a:37:a6:01:80:f6:3f:7c:9b:6a:04:
b1:89:57:3e:82:bc:2b:97:4e:78:f3:fa:3f:ba:9a:
f1:e2:81:b8:cf:ff:bd:4f:29:94:8b:44:3f:69:ad:
57:66:2a:eb:1f:06:0a:d7:2c:5d:6a:48:24:c0:b4:
49:92:ad:06:7d:e0:a5:25:f3:31:50:7a:68:bb:36:
e9:65:5f:f6:0a:fc:6e:b7:fd:e8:bc:18:a6:bc:37:
44:83:90:e3:0f:23:5e:1c:f0:72:0a:9d:65:27:ed:
13:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:77:6D:D8:60:CB:98:EF:1D:C2:CC:AC:F9:58:5C:36:AB:64:AF:FF
X509v3 Authority Key Identifier:
keyid:B2:79:D3:4F:E3:08:EC:4A:BF:42:01:11:19:C8:D2:2C:B6:F6:1A:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/9ED3F83E133C11F1B30AE476243D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
202.72.98.0/24
Signature Algorithm: sha256WithRSAEncryption
34:12:e6:b2:b7:0d:c2:1d:93:07:75:b1:c4:a8:2e:bf:5c:9e:
6b:0f:cd:7d:7a:2f:e6:0c:ac:88:b3:dd:d7:56:9a:59:cd:83:
d2:e4:35:86:8c:93:d2:b5:8a:f7:d5:9f:53:c0:f7:f8:4f:c7:
9a:18:b6:d7:d7:42:47:dd:d0:6d:23:bd:70:78:76:83:8f:77:
df:20:1b:49:cc:0b:da:1c:ff:6c:35:43:b8:85:93:e5:75:9f:
8a:ad:46:46:b1:41:29:d4:05:72:29:a5:cc:d4:42:13:bd:35:
f2:93:81:31:73:f7:df:e1:94:3e:d7:43:44:8c:fe:35:8a:17:
2e:2c:81:9c:52:df:d9:b5:59:cf:41:3a:c7:38:74:e1:c2:86:
a7:27:71:1a:ab:1a:d9:54:57:21:52:e8:eb:f7:33:ce:ba:c7:
0e:9f:bb:e1:2a:fa:a3:61:be:18:80:41:14:25:70:9a:3b:4a:
84:4f:9b:6a:3d:8b:5b:2c:f9:29:d5:cd:f6:ed:e2:76:a7:f8:
65:d5:d3:f0:a6:e8:96:45:e8:de:fb:e1:ac:9b:3e:f5:ea:7b:
4e:1e:dc:69:63:ff:11:de:bf:ff:3d:7e:1a:bf:16:91:06:71:
66:6c:91:f2:aa:3c:f8:02:a5:6a:08:11:2c:19:0c:a2:67:28:
41:0e:b9:92
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REIzOUQxMTAvBgNVBAUTKEIyNzlEMzRGRTMwOEVDNEFCRjQyMDExMTE5QzhEMjJD
QjZGNjFBQzQwHhcNMjYwMjI2MTc1NzMxWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OWEwODk4Yi1jYTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApIl11pdwN7YtxmDOP5D0v9Lbr0aVm9whZjv/tXt3iRuBiPCpdpa3xpG9lZKj
z3a49fS4ifs7pyPf2FYgnYWebm0V7AD4sWEdtDeYyAbMs+FxG8A7d/Vbex7Bdv6n
ynbJ90NLrs13ZI8bSM9htkKnOXMjOSTvrDotfLw/Lyfe6Z5aiCvLFLJHD3gqGXX4
g7CrgN0ogvqVXjSamjemAYD2P3ybagSxiVc+grwrl0548/o/uprx4oG4z/+9TymU
i0Q/aa1XZirrHwYK1yxdakgkwLRJkq0GfeClJfMxUHpouzbpZV/2Cvxut/3ovBim
vDdEg5DjDyNeHPByCp1lJ+0TfQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFG13bdhg
y5jvHcLMrPlYXDarZK//MB8GA1UdIwQYMBaAFLJ500/jCOxKv0IBERnI0iy29hrE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjM5RC80NjdDMDNCMDkz
MUQxMUVCQkQ3OTM0MkRDNEY5QUUwMi9zbm5UVC1NSTdFcV9RZ0VSR2NqU0xMYjJH
c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NublRULU1JN0VxX1FnRVJHY2pTTExiMkdzUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REIzOUQvNDY3QzAzQjA5MzFEMTFFQkJENzkzNDJEQzRGOUFFMDIvOUVEM0Y4M0Ux
MzNDMTFGMUIzMEFFNDc2MjQzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAykhiMA0GCSqGSIb3DQEBCwUAA4IBAQA0Euaytw3CHZMHdbHEqC6/
XJ5rD819ei/mDKyIs93XVppZzYPS5DWGjJPStYr31Z9TwPf4T8eaGLbX10JH3dBt
I71weHaDj3ffIBtJzAvaHP9sNUO4hZPldZ+KrUZGsUEp1AVyKaXM1EITvTXyk4Ex
c/ff4ZQ+10NEjP41ihcuLIGcUt/ZtVnPQTrHOHThwoanJ3EaqxrZVFchUujr9zPO
uscOn7vhKvqjYb4YgEEUJXCaO0qET5tqPYtbLPkp1c327eJ2p/hl1dPwpuiWReje
++Gsmz716ntOHtxpY/8R3r//PX4avxaRBnFmbJHyqjz4AqVqCBEsGQyiZyhBDrmS
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:16:29 2026 by rpki-client