
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/09C2A1645A3511ED8F0A3087C4F9AE02.roa
File: 09C2A1645A3511ED8F0A3087C4F9AE02.roa (raw, json)
Hash identifier: DkFecwB9znnuUrE2RmF4tqyznqLh8lhTWAuST9cTgro=
Subject key identifier: 91:10:04:0B:07:5D:9C:EC:21:0F:7E:D5:36:8E:F0:84:5E:3B:54:8D
Certificate issuer: /CN=A91E0EF2/serialNumber=4C06312D3A0B1C63F547D4D6457C4CD5AF7143CD
Certificate serial: 04CB
Authority key identifier: 4C:06:31:2D:3A:0B:1C:63:F5:47:D4:D6:45:7C:4C:D5:AF:71:43:CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/09C2A1645A3511ED8F0A3087C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:47:30 +0000
ROA not before: Sun 01 Mar 2026 01:20:41 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 9342
IP address blocks: 202.6.74.0/24 maxlen: 24
203.2.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.crl
rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1227 (0x4cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0EF2, serialNumber=4C06312D3A0B1C63F547D4D6457C4CD5AF7143CD
Validity
Not Before: Mar 1 01:20:41 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a43562-fd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a9:2d:1c:f1:14:8c:e0:e1:1d:7c:8d:b3:f7:
69:23:bf:a9:88:8c:84:72:68:de:20:fb:f6:74:ca:
a8:a7:59:90:14:30:77:b2:4b:6e:83:6c:2c:69:bb:
7c:72:c3:5b:7a:c6:05:73:3e:7d:42:59:77:62:92:
4b:ad:ab:fd:e3:8b:9f:a5:9c:fd:f3:70:0c:50:32:
bb:d5:30:e6:85:26:27:bb:f7:96:d3:0d:e8:7a:01:
de:8d:51:c3:bc:60:ce:8a:a4:15:e3:7f:9c:38:e6:
16:58:48:1d:aa:f1:ec:53:7e:7d:61:fd:4a:99:d1:
fe:27:d2:f5:1d:1f:93:fa:bb:9b:d1:f1:2a:ca:6f:
3c:ab:04:4e:14:46:66:0e:cf:3b:e7:1f:70:47:af:
0b:77:63:bc:68:fa:d4:67:d5:54:d8:97:e4:b6:03:
94:e8:32:ef:4b:26:10:cc:da:5d:42:52:ef:d8:e6:
a1:34:6b:fd:1c:10:6d:38:68:19:c9:50:29:df:48:
a3:9e:eb:54:46:bf:bc:f7:a0:f9:4c:c7:10:fc:97:
cf:b7:c6:cf:65:5b:31:ea:36:17:a3:11:57:3f:87:
b6:0c:49:43:34:ac:0a:5a:2c:7e:e8:69:a8:18:6a:
c9:1a:8e:13:72:59:7a:75:a7:e2:81:92:7d:01:16:
bc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:10:04:0B:07:5D:9C:EC:21:0F:7E:D5:36:8E:F0:84:5E:3B:54:8D
X509v3 Authority Key Identifier:
keyid:4C:06:31:2D:3A:0B:1C:63:F5:47:D4:D6:45:7C:4C:D5:AF:71:43:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/09C2A1645A3511ED8F0A3087C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.6.74.0/24
203.2.218.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:69:f6:a0:28:58:d2:53:89:fe:59:cb:38:0e:d6:b3:57:01:
f9:04:16:0e:7f:39:21:bd:d0:f2:3d:d6:22:65:63:29:d0:6a:
8c:40:b2:d7:28:21:6a:97:67:d7:ac:31:9d:29:be:5f:a2:c2:
b4:43:90:52:bf:31:50:6c:14:31:f2:83:75:27:9a:15:61:2d:
d2:08:9d:01:6d:09:1e:60:00:a4:f2:4f:ea:4d:10:b5:62:3a:
7f:fa:06:e1:5c:d8:e9:d1:8a:21:c8:e3:0b:20:fc:43:23:0c:
e7:3e:2e:ce:2d:fe:b1:61:76:17:c6:50:8e:5e:cf:6a:31:5f:
82:c1:6a:15:44:bc:ef:1a:68:9d:8e:b4:5d:56:9c:ca:7d:93:
e5:33:28:c3:c9:0e:00:43:03:59:00:33:8e:71:fc:3b:b3:c0:
0b:74:63:b4:ad:26:f1:a6:a1:2e:70:02:13:f7:f5:71:cc:8c:
43:c1:13:dc:17:31:3a:4e:7c:91:97:b1:9b:c4:53:5c:e9:16:
4a:2e:18:37:13:67:c5:60:95:5e:8d:63:c2:14:e3:04:78:ee:
8c:b1:65:f3:de:dd:2b:64:46:16:ec:ee:11:f2:80:10:ff:57:
f3:f9:e9:f2:0d:b3:03:0c:5d:c2:90:eb:54:c1:64:c4:5c:a8:
5c:6c:31:cb
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICBMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBFRjIxMTAvBgNVBAUTKDRDMDYzMTJEM0EwQjFDNjNGNTQ3RDRENjQ1N0M0Q0Q1
QUY3MTQzQ0QwHhcNMjYwMzAxMDEyMDQxWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzU2Mi1mZDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoKktHPEUjODhHXyNs/dpI7+piIyEcmjeIPv2dMqop1mQFDB3sktug2wsabt8
csNbesYFcz59Qll3YpJLrav944ufpZz983AMUDK71TDmhSYnu/eW0w3oegHejVHD
vGDOiqQV43+cOOYWWEgdqvHsU359Yf1KmdH+J9L1HR+T+rub0fEqym88qwROFEZm
Ds875x9wR68Ld2O8aPrUZ9VU2JfktgOU6DLvSyYQzNpdQlLv2OahNGv9HBBtOGgZ
yVAp30ijnutURr+896D5TMcQ/JfPt8bPZVsx6jYXoxFXP4e2DElDNKwKWix+6Gmo
GGrJGo4Tcll6dafigZJ9ARa8SQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFJEQBAsH
XZzsIQ9+1TaO8IReO1SNMB8GA1UdIwQYMBaAFEwGMS06Cxxj9UfU1kV8TNWvcUPN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEVGMi9CNTA1NDY1MjVF
RTIxMUVDQUZBNjRCNDRDNEY5QUUwMi9UQVl4TFRvTEhHUDFSOVRXUlh4TTFhOXhR
ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RBWXhMVG9MSEdQMVI5VFdSWHhNMWE5eFE4MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTBFRjIvQjUwNTQ2NTI1RUUyMTFFQ0FGQTY0QjQ0QzRGOUFFMDIvMDlDMkExNjQ1
QTM1MTFFRDhGMEEzMDg3QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAygZKAwQAywLaMA0GCSqGSIb3DQEBCwUAA4IBAQCmafagKFjSU4n+
Wcs4DtazVwH5BBYOfzkhvdDyPdYiZWMp0GqMQLLXKCFql2fXrDGdKb5fosK0Q5BS
vzFQbBQx8oN1J5oVYS3SCJ0BbQkeYACk8k/qTRC1Yjp/+gbhXNjp0YohyOMLIPxD
IwznPi7OLf6xYXYXxlCOXs9qMV+CwWoVRLzvGmidjrRdVpzKfZPlMyjDyQ4AQwNZ
ADOOcfw7s8ALdGO0rSbxpqEucAIT9/VxzIxDwRPcFzE6TnyRl7GbxFNc6RZKLhg3
E2fFYJVejWPCFOMEeO6MsWXz3t0rZEYW7O4R8oAQ/1fz+enyDbMDDF3CkOtUwWTE
XKhcbDHL
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:20:00 2026 by rpki-client