
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/330CB090A69A11F1B62FFE123411F970.roa
File: 330CB090A69A11F1B62FFE123411F970.roa (raw, json)
Hash identifier: MdN5x9COPAkOWErVD4b+gG1Gk95Xd26pJgYkE2yZ/Uo=
Subject key identifier: 19:1F:9E:6F:A0:FF:CA:65:A2:6E:2B:64:6D:9A:0F:76:E1:36:79:C0
Certificate issuer: /CN=A91DC5BE/serialNumber=ADA8AED32B15B87E611252D29D1E1D5BDE581646
Certificate serial: 367F
Authority key identifier: AD:A8:AE:D3:2B:15:B8:7E:61:12:52:D2:9D:1E:1D:5B:DE:58:16:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/330CB090A69A11F1B62FFE123411F970.roa
Signing time: Wed 02 Sep 2026 06:47:44 +0000
ROA not before: Wed 02 Sep 2026 06:47:44 +0000
ROA not after: Mon 31 Mar 2031 00:00:00 +0000
asID: 24555
IP address blocks: 220.247.144.0/20 maxlen: 22
2001:df9::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.crl
rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13951 (0x367f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC5BE, serialNumber=ADA8AED32B15B87E611252D29D1E1D5BDE581646
Validity
Not Before: Sep 2 06:47:44 2026 GMT
Not After : Mar 31 00:00:00 2031 GMT
Subject: CN=6a97c690-55c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a5:50:b7:a3:b6:f6:3c:7b:a5:66:8c:a1:03:
ab:66:02:7f:55:14:c3:5f:b9:6a:71:eb:22:c4:68:
fa:e8:fb:e8:84:f1:f5:c9:f4:91:8d:36:ea:82:a7:
a3:0e:b3:b5:67:52:74:0e:57:03:65:dc:99:6f:d4:
63:32:71:db:f2:35:3c:ac:c5:e4:9f:25:fe:ea:9f:
da:56:da:76:d4:df:63:d3:57:53:6d:b1:49:f8:fc:
3f:90:05:b0:a5:56:e9:94:4e:19:74:00:01:46:72:
6b:dd:6a:ea:7c:87:1d:2c:e9:61:26:ad:25:4e:0a:
b3:1c:34:fc:01:ac:db:ee:8b:6a:55:4f:ad:dd:18:
19:42:c3:0e:8e:d2:a3:06:dd:3c:a0:72:17:d3:88:
c0:38:02:2b:29:4c:2f:34:fc:97:b3:50:4c:b8:dc:
be:04:04:2b:ef:01:b5:97:19:6c:0c:0b:55:97:a2:
53:2a:61:7a:ce:70:a3:91:12:60:a9:12:0b:f6:0f:
2a:70:d4:f0:1e:42:52:ce:54:10:0a:9a:7e:24:3a:
b3:6f:dd:96:af:ed:97:0f:d4:b0:60:37:af:fa:27:
3a:fe:14:a2:c7:77:e8:f5:c3:ed:43:ee:36:d7:28:
44:bf:7b:32:d6:a0:cc:ac:4d:be:75:8d:7d:f5:cc:
26:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1F:9E:6F:A0:FF:CA:65:A2:6E:2B:64:6D:9A:0F:76:E1:36:79:C0
X509v3 Authority Key Identifier:
keyid:AD:A8:AE:D3:2B:15:B8:7E:61:12:52:D2:9D:1E:1D:5B:DE:58:16:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/330CB090A69A11F1B62FFE123411F970.roa
sbgp-ipAddrBlock: critical
IPv4:
220.247.144.0/20
IPv6:
2001:df9::/32
Signature Algorithm: sha256WithRSAEncryption
b8:2e:eb:1b:0c:34:24:5e:44:0b:ea:d0:f2:02:41:eb:f2:91:
03:64:2f:1f:32:95:67:62:63:34:77:68:34:04:4a:d6:5a:2b:
88:7a:b5:02:5a:a1:c3:82:27:f0:9f:af:33:ca:0a:6c:86:d0:
c4:41:a8:46:0f:47:48:cf:ff:b6:04:e4:b7:0c:a5:51:22:d9:
0a:0a:6e:3b:d8:c3:cd:14:40:4e:f7:9f:e4:0b:f4:f3:47:fc:
e2:84:10:5f:66:d6:6b:cf:c4:c6:0b:41:64:1c:9d:ff:f9:b5:
49:7d:41:76:dc:ad:a8:a5:7e:53:d4:23:2d:4d:6b:46:99:8e:
89:a3:cc:6d:e3:69:b2:b0:4e:1d:44:d1:85:24:15:5e:d8:be:
14:3f:59:fe:54:26:e6:49:91:bb:84:e3:f0:36:6b:67:ef:50:
21:11:7e:a1:bd:77:9d:a9:e2:cc:9a:72:1e:18:8c:bd:4e:f5:
fa:f1:3a:d4:28:06:dd:ed:20:e6:90:e6:55:c5:d7:78:c2:49:
38:00:e5:08:a1:42:34:96:1d:e7:15:ab:92:ae:ac:76:63:10:
41:24:9c:e8:7c:21:42:b8:31:a9:a9:81:0d:d9:37:5a:3f:05:
71:eb:3f:62:d1:01:7a:19:26:95:f9:07:37:ee:28:df:1a:1e:
b2:2b:12:0f
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICNn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REM1QkUxMTAvBgNVBAUTKEFEQThBRUQzMkIxNUI4N0U2MTEyNTJEMjlEMUUxRDVC
REU1ODE2NDYwHhcNMjYwOTAyMDY0NzQ0WhcNMzEwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk3YzY5MC01NWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs6VQt6O29jx7pWaMoQOrZgJ/VRTDX7lqcesixGj66PvohPH1yfSRjTbqgqej
DrO1Z1J0DlcDZdyZb9RjMnHb8jU8rMXknyX+6p/aVtp21N9j01dTbbFJ+Pw/kAWw
pVbplE4ZdAABRnJr3WrqfIcdLOlhJq0lTgqzHDT8Aazb7otqVU+t3RgZQsMOjtKj
Bt08oHIX04jAOAIrKUwvNPyXs1BMuNy+BAQr7wG1lxlsDAtVl6JTKmF6znCjkRJg
qRIL9g8qcNTwHkJSzlQQCpp+JDqzb92Wr+2XD9SwYDev+ic6/hSix3fo9cPtQ+42
1yhEv3sy1qDMrE2+dY199cwm/QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFBkfnm+g
/8plom4rZG2aD3bhNnnAMB8GA1UdIwQYMBaAFK2ortMrFbh+YRJS0p0eHVveWBZG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzVCRS9ENDAxNjE5QTFE
NjkxMUUyQUZCNjRFQTcwOEIwMkNEMi9yYWl1MHlzVnVINWhFbExTblI0ZFc5NVlG
a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JhaXUweXNWdUg1aEVsTFNuUjRkVzk1WUZrWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REM1QkUvRDQwMTYxOUExRDY5MTFFMkFGQjY0RUE3MDhCMDJDRDIvMzMwQ0IwOTBB
NjlBMTFGMUI2MkZGRTEyMzQxMUY5NzAucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQE3PeQMA0EAgACMAcDBQAgAQ35MA0GCSqGSIb3DQEBCwUAA4IBAQC4
LusbDDQkXkQL6tDyAkHr8pEDZC8fMpVnYmM0d2g0BErWWiuIerUCWqHDgifwn68z
ygpshtDEQahGD0dIz/+2BOS3DKVRItkKCm472MPNFEBO95/kC/TzR/zihBBfZtZr
z8TGC0FkHJ3/+bVJfUF23K2opX5T1CMtTWtGmY6Jo8xt42mysE4dRNGFJBVe2L4U
P1n+VCbmSZG7hOPwNmtn71AhEX6hvXedqeLMmnIeGIy9TvX68TrUKAbd7SDmkOZV
xdd4wkk4AOUIoUI0lh3nFauSrqx2YxBBJJzofCFCuDGpqYEN2TdaPwVx6z9i0QF6
GSaV+Qc37ijfGh6yKxIP
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:06:47 2026 by rpki-client