
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/069E7950F3C611EE807A6F3EC4F9AE02.roa
File: 069E7950F3C611EE807A6F3EC4F9AE02.roa (raw, json)
Hash identifier: lyAz6AmqL0FZqwGyCahoG8Ef9FHjsOC+qJXgJmlZ/Zs=
Subject key identifier: 5D:0B:B0:A8:04:B9:DB:A5:59:A2:22:86:FE:11:7D:B6:C0:1D:04:1B
Certificate issuer: /CN=A91DEF41/serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98
Certificate serial: 01A9
Authority key identifier: 33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/069E7950F3C611EE807A6F3EC4F9AE02.roa
Signing time: Fri 29 May 2026 04:35:50 +0000
ROA not before: Fri 29 May 2026 04:35:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 203.170.90.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl
rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425 (0x1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEF41, serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98
Validity
Not Before: May 29 04:35:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a1917a6-2269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:4d:21:92:47:4c:ec:7d:45:ae:79:46:52:01:
47:56:e3:59:0b:0b:07:60:31:36:e7:71:b3:9e:88:
5e:02:d5:05:d1:a1:04:46:11:9f:85:d5:ef:db:05:
5d:9d:00:fe:8d:d7:c5:f9:35:a4:a6:d7:1a:7c:c0:
ac:5f:4b:96:50:c1:48:92:28:7c:ad:43:8d:91:74:
7a:bd:4f:f9:3a:2a:8d:20:d0:d8:1d:2d:90:5c:96:
d9:39:07:3a:37:30:fe:f9:45:57:e9:02:7d:08:35:
c6:bb:38:9f:9e:ce:c9:60:1f:84:a1:33:91:09:37:
cb:80:8a:98:80:f7:ae:13:93:cc:ed:7a:00:73:a2:
90:a3:1c:98:58:47:15:f3:4e:bb:7b:a2:1e:47:f0:
e4:22:54:56:69:f6:a8:23:79:94:99:dd:59:74:f9:
1d:65:48:d5:f3:f2:27:ad:c2:bb:e5:b5:68:bc:20:
12:c1:57:09:b0:7a:7c:d2:6e:a0:41:7a:92:20:0d:
ff:11:ad:61:d1:ba:b3:24:0a:3b:0e:eb:55:82:a7:
ba:d3:69:50:ba:31:ab:0b:18:91:98:fb:72:d9:48:
ad:8c:ce:5f:6d:e0:11:18:c9:37:32:e7:98:42:9e:
8e:0e:61:43:0e:3f:77:b5:71:df:a0:6a:9d:aa:94:
80:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0B:B0:A8:04:B9:DB:A5:59:A2:22:86:FE:11:7D:B6:C0:1D:04:1B
X509v3 Authority Key Identifier:
keyid:33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/069E7950F3C611EE807A6F3EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.170.90.0/23
Signature Algorithm: sha256WithRSAEncryption
94:8d:d6:0d:39:25:a1:79:8f:08:74:3e:e6:93:36:5b:5e:a1:
99:f5:b5:eb:ca:23:45:20:03:af:2a:fd:6f:11:07:a5:38:c9:
d4:ea:6b:5a:90:81:a2:03:b8:9d:25:70:4a:76:62:ae:fc:51:
50:c7:39:51:aa:0b:e0:84:86:48:3a:dc:e9:52:50:d8:c7:db:
ee:91:32:80:d9:4b:c1:39:46:7d:d1:4d:67:29:8a:3e:2a:ed:
f6:65:fe:88:e4:34:57:9b:63:b6:94:08:83:9c:b7:a4:19:65:
a3:bf:c6:2f:8a:c7:19:af:2d:7e:78:b3:c5:eb:d7:18:cc:cb:
c7:3c:f3:76:61:e5:e8:13:21:24:61:70:30:dc:f6:40:dc:8c:
f9:3d:3e:70:ae:45:fe:6d:03:a5:9a:44:47:28:35:b5:b3:5c:
23:58:e8:6a:57:d3:16:4a:49:93:36:d3:f3:de:09:b4:89:c0:
67:53:b4:e0:91:f6:98:84:f9:62:4f:10:10:5a:c5:5a:c8:a8:
72:d0:7b:09:6a:ad:d4:f6:54:e9:d1:a2:04:f1:c6:93:5a:68:
64:9d:5e:d9:80:a8:ab:2d:4b:ee:49:b8:b4:63:8b:af:c6:8b:
30:6c:a0:2a:50:58:91:c6:f3:a6:e1:6a:33:3e:26:be:fd:d3:
40:87:14:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:15:10 2026 by rpki-client