
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/BC75F7EEB69511EEA0196A79C4F9AE02.roa
File: BC75F7EEB69511EEA0196A79C4F9AE02.roa (raw, json)
Hash identifier: bfp6bo8ATe+EqH3TONo5XSEIqGJNdy2N6Sy+IZlhTU8=
Subject key identifier: A0:4D:A4:48:86:99:5F:6E:D8:D2:D3:1B:58:92:55:27:35:50:E7:A6
Certificate issuer: /CN=A91DFFB0/serialNumber=17A66E6EFDED105E812190990536A5DF603BA80E
Certificate serial: 0190
Authority key identifier: 17:A6:6E:6E:FD:ED:10:5E:81:21:90:99:05:36:A5:DF:60:3B:A8:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6Zubv3tEF6BIZCZBTal32A7qA4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/BC75F7EEB69511EEA0196A79C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:42:36 +0000
ROA not before: Fri 07 Mar 2025 04:51:29 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 17667
IP address blocks: 110.238.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.crl
rsync://rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6Zubv3tEF6BIZCZBTal32A7qA4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:42:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFFB0, serialNumber=17A66E6EFDED105E812190990536A5DF603BA80E
Validity
Not Before: Mar 7 04:51:29 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a3edec-7c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:46:7b:27:1d:7f:64:6c:73:f5:ed:3b:df:11:
b3:f8:2f:f2:14:66:67:01:12:68:ca:38:e6:c0:de:
a7:83:67:49:ae:8a:01:1a:62:30:87:97:40:7f:00:
f1:67:f3:c3:4b:7a:27:cf:61:e8:eb:0a:fc:7b:51:
06:7d:49:34:b9:75:de:34:7d:bb:6f:fd:49:da:60:
1a:0f:be:59:49:be:ae:30:0d:22:3b:67:a5:42:d4:
49:d4:d1:c4:92:64:51:27:67:e0:fc:7e:ec:7c:69:
4e:00:9f:c9:02:cf:94:1a:0b:7c:c1:70:a8:9d:de:
33:1f:11:37:0b:25:d2:0b:56:4d:7e:bb:18:b5:0e:
9f:e1:47:98:2c:02:5f:4e:46:d0:48:9c:a4:db:fd:
1d:2b:12:a7:fa:df:e3:e8:a9:38:f1:00:06:2a:9c:
4f:b8:ad:0e:28:f7:62:72:a1:fa:01:4f:68:3a:3d:
78:55:bc:0a:1c:2d:cb:3f:e0:1b:bf:56:22:1d:7c:
4b:c3:78:34:ef:d0:87:b2:3d:73:4d:3c:6c:09:64:
6e:bd:2e:27:55:85:0c:b6:b0:47:8b:43:5c:7a:5e:
19:0a:c8:5b:a9:0f:6f:15:95:ab:b3:d1:d3:dd:5c:
0c:19:fb:d3:02:d5:a3:81:23:8b:62:4c:5a:6f:e6:
9b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4D:A4:48:86:99:5F:6E:D8:D2:D3:1B:58:92:55:27:35:50:E7:A6
X509v3 Authority Key Identifier:
keyid:17:A6:6E:6E:FD:ED:10:5E:81:21:90:99:05:36:A5:DF:60:3B:A8:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6Zubv3tEF6BIZCZBTal32A7qA4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/BC75F7EEB69511EEA0196A79C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
110.238.0.0/23
Signature Algorithm: sha256WithRSAEncryption
99:41:fb:9f:66:bb:32:d8:39:34:91:fd:12:e9:e7:8f:d8:d2:
07:d7:f6:ec:01:67:6d:c8:91:a8:58:09:50:1d:c8:20:a1:c3:
cd:eb:fe:1c:2e:28:c1:04:f1:19:1e:a1:e4:35:57:a0:54:fa:
c6:9c:f8:33:75:0a:55:21:5e:d0:33:d3:89:db:ee:07:47:94:
36:ce:a8:d5:16:d6:2f:79:ac:c4:91:6d:6e:c9:d4:02:dc:60:
dc:98:b6:01:d5:35:3d:fd:05:68:12:1b:93:54:0a:df:e3:fb:
06:e7:05:6f:3b:6c:e0:eb:fb:78:a9:76:03:12:07:9b:38:91:
f0:09:f2:67:09:23:90:98:5d:e0:72:0f:59:ea:98:10:a8:db:
68:25:9e:9d:67:38:4c:17:27:ac:7d:99:cf:35:67:5c:87:bb:
49:28:e7:00:77:9a:0f:29:07:ff:1e:8f:f5:43:d4:b7:3b:36:
ed:20:e4:7f:2f:f8:7b:c1:f6:16:09:b5:2a:36:44:fc:22:2d:
1a:b3:51:2d:78:f6:11:57:f6:8c:5d:7d:c0:ad:df:48:74:16:
4a:0b:f1:fd:cb:70:cc:7c:cb:9a:65:9b:e6:90:c9:f1:ca:81:
23:7f:12:97:ff:1d:4a:b6:08:ac:70:66:2c:77:c6:a7:12:fe:
5a:c9:c8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:16 2026 by rpki-client