
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F47B5B188C5611E792848B4AC4F9AE02.roa
File: F47B5B188C5611E792848B4AC4F9AE02.roa (raw, json)
Hash identifier: 9rwvDynWMk6qsy3E/KYOqtc0csn9No217jDY1XnUZzc=
Subject key identifier: 71:F0:21:6B:AF:0A:FB:EF:B3:FD:23:E1:D5:1F:69:68:C2:27:D6:75
Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial: 28A8
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F47B5B188C5611E792848B4AC4F9AE02.roa
Signing time: Tue 31 Mar 2026 16:20:13 +0000
ROA not before: Tue 31 Mar 2026 16:20:13 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 24456
IP address blocks: 58.71.67.0/24 maxlen: 24
210.1.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10408 (0x28a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Validity
Not Before: Mar 31 16:20:13 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cbf43c-3b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4b:9e:aa:85:c8:e2:cb:f1:d0:c8:7b:d2:12:
ce:6b:45:52:ca:90:3d:6f:a1:06:39:fb:b9:4f:4e:
3c:d9:d5:5b:f3:2f:c1:09:e4:e0:71:00:bb:27:14:
a8:58:55:ac:ed:74:00:76:0f:ca:22:87:33:6b:3f:
60:50:07:ce:84:73:91:4b:c6:d3:6a:b1:29:0c:ca:
d0:9b:a0:62:5c:3e:62:44:61:61:6c:ee:bd:ea:38:
09:51:98:43:93:94:35:e5:47:ea:f1:92:7f:84:89:
b1:84:ac:14:3c:33:93:cc:8f:64:cf:d2:4e:43:b9:
02:db:9a:f9:7f:f7:8d:cf:81:97:61:13:f9:39:7d:
53:9a:8e:39:99:8f:bd:46:00:33:a8:3c:fd:2f:2c:
46:09:9a:0d:cf:7c:e0:82:d4:5a:12:98:e4:1d:1c:
86:06:27:29:f7:b3:a6:dd:e6:80:d0:81:6b:5e:c0:
76:bb:30:08:b7:6a:45:09:a0:a4:d2:c7:25:32:f2:
03:c4:92:25:f8:df:75:4a:cc:06:ed:6a:c0:ec:cb:
96:9e:f8:f3:e0:c3:16:6a:d6:4d:33:ad:a7:0a:6a:
0e:dc:b6:52:86:d6:f5:02:b9:2b:eb:18:0b:ec:43:
81:f4:30:33:5c:3a:83:ec:d2:9a:11:e7:2a:81:ff:
d6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F0:21:6B:AF:0A:FB:EF:B3:FD:23:E1:D5:1F:69:68:C2:27:D6:75
X509v3 Authority Key Identifier:
keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F47B5B188C5611E792848B4AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
58.71.67.0/24
210.1.77.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:3d:05:75:6a:c6:99:4f:98:47:b8:f1:25:73:34:ec:c0:83:
3c:cc:cc:ae:94:e3:ea:9e:5d:25:83:db:18:7e:81:4f:a5:aa:
97:32:f5:98:e6:55:35:42:7b:0b:5b:4e:84:6a:57:3b:44:58:
dd:9d:ce:0f:77:14:8b:5b:93:f6:24:5a:0c:c7:97:3c:16:ca:
63:59:03:0f:13:0b:05:b5:d8:26:e8:00:3b:ef:5f:60:96:be:
be:da:59:57:92:b3:50:3a:82:97:93:bb:f1:9e:3c:4d:b3:67:
8e:e1:44:be:d8:53:ca:9d:fd:2e:04:b5:ba:5f:9c:42:62:e5:
23:0f:6f:83:63:3f:16:55:e9:44:fb:8e:a3:35:c6:07:26:2a:
3a:02:7b:f2:58:73:2d:1f:b0:17:a8:e3:31:61:80:72:55:e5:
bc:40:d0:1a:a0:27:8b:eb:29:23:d5:97:eb:53:31:6b:01:90:
59:96:a6:be:f2:08:a1:2c:34:27:d3:b4:25:03:50:fd:7d:a9:
a1:99:80:19:4b:34:9e:ca:0c:66:99:ce:b7:5a:cc:04:aa:66:
ea:88:cc:18:b4:3a:29:ef:c5:ea:ef:0f:81:b7:d5:bd:b1:20:
13:b9:7e:76:14:6a:d6:d2:23:ad:4e:72:be:b2:08:0f:67:28:
ad:69:21:8d
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICKKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw
NDU5MjhBQjgwHhcNMjYwMzMxMTYyMDEzWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNiZjQzYy0zYjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwUueqoXI4svx0Mh70hLOa0VSypA9b6EGOfu5T0482dVb8y/BCeTgcQC7JxSo
WFWs7XQAdg/KIoczaz9gUAfOhHORS8bTarEpDMrQm6BiXD5iRGFhbO696jgJUZhD
k5Q15Ufq8ZJ/hImxhKwUPDOTzI9kz9JOQ7kC25r5f/eNz4GXYRP5OX1Tmo45mY+9
RgAzqDz9LyxGCZoNz3zggtRaEpjkHRyGBicp97Om3eaA0IFrXsB2uzAIt2pFCaCk
0sclMvIDxJIl+N91SswG7WrA7MuWnvjz4MMWatZNM62nCmoO3LZShtb1Arkr6xgL
7EOB9DAzXDqD7NKaEecqgf/WZQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFHHwIWuv
Cvvvs/0j4dUfaWjCJ9Z1MB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz
OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np
cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REZCNzAvMjk4MzY0N0M4MzhGMTFFNTg2RkM1ODEyQzRGOUFFMDIvRjQ3QjVCMTg4
QzU2MTFFNzkyODQ4QjRBQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAOkdDAwQA0gFNMA0GCSqGSIb3DQEBCwUAA4IBAQCNPQV1asaZT5hH
uPElczTswIM8zMyulOPqnl0lg9sYfoFPpaqXMvWY5lU1QnsLW06Ealc7RFjdnc4P
dxSLW5P2JFoMx5c8FspjWQMPEwsFtdgm6AA7719glr6+2llXkrNQOoKXk7vxnjxN
s2eO4US+2FPKnf0uBLW6X5xCYuUjD2+DYz8WVelE+46jNcYHJio6AnvyWHMtH7AX
qOMxYYByVeW8QNAaoCeL6ykj1ZfrUzFrAZBZlqa+8gihLDQn07QlA1D9famhmYAZ
SzSeygxmmc63WswEqmbqiMwYtDop78Xq7w+Bt9W9sSATuX52FGrW0iOtTnK+sggP
ZyitaSGN
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:08:57 2026 by rpki-client