
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/07258E36F3C611EE807A6F3EC4F9AE02.roa
File: 07258E36F3C611EE807A6F3EC4F9AE02.roa (raw, json)
Hash identifier: xj8NN+s9x7JUXPAPcowaNa0lG/ImYDGhQLE7d7PuyeI=
Subject key identifier: F1:A5:66:D4:DA:43:6A:1B:51:BA:A4:A2:F9:5D:84:B3:50:5E:17:F6
Certificate issuer: /CN=A91DEF41/serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98
Certificate serial: 01AB
Authority key identifier: 33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/07258E36F3C611EE807A6F3EC4F9AE02.roa
Signing time: Fri 29 May 2026 04:35:53 +0000
ROA not before: Fri 29 May 2026 04:35:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 203.170.90.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl
rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEF41, serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98
Validity
Not Before: May 29 04:35:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a1917a9-e050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0c:c1:b4:ac:a0:73:24:87:46:e6:2f:2f:5f:
fc:a0:fa:55:01:75:08:99:28:b8:26:89:ed:91:99:
3c:ca:33:9b:b0:76:6d:17:d1:d8:f8:3c:19:d0:e3:
97:00:10:b9:3a:c5:8e:6d:6c:ae:6a:9a:44:38:bb:
25:38:4c:7b:f8:72:dd:5a:f7:e6:7b:b4:62:bc:5f:
d0:2c:cb:b2:ce:d0:93:3d:f4:2a:ea:c9:56:53:92:
61:22:60:32:b0:7e:7f:c3:92:c4:f8:88:56:61:67:
f9:f7:e8:0d:ec:9a:f6:ae:84:25:e4:f7:e8:56:3b:
4e:62:fe:cf:6f:d8:9f:5a:f8:ca:51:80:e2:f6:b9:
4a:27:77:17:51:e3:83:a3:13:a1:f2:e6:5d:69:52:
52:02:cc:65:4e:43:67:9d:bd:5c:85:09:0d:8c:b0:
5b:cb:ad:1b:08:a0:de:90:f4:35:c3:75:1c:b0:05:
a3:6d:7f:84:e2:a5:87:6a:bd:e4:55:87:d6:3c:a6:
94:15:07:f0:d0:b1:63:54:87:66:72:f9:43:53:2b:
01:78:0f:0d:82:89:38:91:ec:e5:72:0d:72:c6:f9:
94:97:5a:cd:6a:49:8f:c2:b1:7e:4a:5f:b3:ad:4b:
53:bd:e5:fb:a1:e9:0a:67:75:2e:fc:18:37:36:d8:
7a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A5:66:D4:DA:43:6A:1B:51:BA:A4:A2:F9:5D:84:B3:50:5E:17:F6
X509v3 Authority Key Identifier:
keyid:33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/07258E36F3C611EE807A6F3EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.170.90.0/23
Signature Algorithm: sha256WithRSAEncryption
27:7c:f0:de:b3:37:ce:5a:f3:ac:a2:d1:c8:e9:87:d3:7b:1a:
57:1b:6f:4b:bb:85:3c:86:a8:59:92:f7:74:a9:16:d5:8b:74:
b6:73:11:22:26:41:fa:c9:cb:d0:ff:31:8b:9c:09:d6:f6:1d:
88:3f:c6:6c:77:cf:03:b0:82:15:e5:c7:29:d8:dd:8a:e3:9a:
36:96:5f:81:8b:b9:bd:93:c0:59:91:bb:26:18:c3:66:ad:99:
1e:71:4b:d6:7a:8a:e8:43:f1:b9:25:a3:7a:b8:96:6f:86:d8:
7c:8f:e9:36:89:77:e2:30:cc:ef:ab:7a:75:39:c9:55:a8:b4:
ca:8b:e3:40:6f:35:f2:33:c7:ee:2d:a2:01:6d:78:8a:f8:4a:
fa:12:f8:00:bd:7f:60:50:19:e1:02:c6:35:d2:ec:1d:4c:a7:
69:73:3f:a9:e7:8b:55:e8:54:4e:80:c7:a1:66:5b:e8:b5:81:
c1:69:d9:a7:bf:1d:a9:78:34:99:5c:5e:34:dc:24:f5:b9:b5:
0f:9f:ef:d3:fc:27:ae:48:7f:f2:76:73:27:1f:b5:50:e8:0d:
b0:d3:52:58:41:c7:94:d1:59:64:b8:7d:97:d1:00:f8:cc:55:
0a:58:f6:66:a7:de:47:27:8d:bd:69:e3:cd:99:ea:34:ea:b9:
11:89:ee:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:20:38 2026 by rpki-client