
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/181D46FCEE5611F0B0ABEB00546F56BC.roa
File: 181D46FCEE5611F0B0ABEB00546F56BC.roa (raw, json)
Hash identifier: pyM3aP4ZhZzlOKjl0z6Si9kl1eKBCspLQnkwnIXR3P8=
Subject key identifier: 10:17:53:C2:D2:F2:E2:BD:4C:7B:CB:47:6E:3E:CF:6E:D2:2A:AA:8D
Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial: 389D
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/181D46FCEE5611F0B0ABEB00546F56BC.roa
Signing time: Wed 30 Sep 2026 15:10:41 +0000
ROA not before: Wed 30 Sep 2026 15:10:41 +0000
ROA not after: Sat 30 Jan 2027 00:00:00 +0000
asID: 45192
IP address blocks: 202.125.96.0/23 maxlen: 23
203.30.127.0/24 maxlen: 24
2001:df0:a::/48 maxlen: 48
2001:df2:ee00::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 14:17:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14493 (0x389d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Validity
Not Before: Sep 30 15:10:41 2026 GMT
Not After : Jan 30 00:00:00 2027 GMT
Subject: CN=6abd2670-9cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8f:78:63:47:14:06:d1:b3:74:cd:b0:75:51:
70:b8:16:5a:4c:cf:a3:b8:87:9c:7b:44:be:d5:c1:
c8:fd:66:3d:1e:c8:ec:f3:0e:ba:bc:9f:54:28:c9:
35:64:32:57:0d:10:c4:7a:4b:19:59:45:44:78:45:
b8:55:12:03:91:b3:d1:37:3d:e7:be:71:bc:26:a0:
9b:56:a0:73:c9:cb:df:b8:cf:61:ff:58:0b:cd:bc:
a2:ff:30:4c:89:2e:6e:f4:1a:5e:36:d5:12:31:a9:
9f:17:b7:58:80:7f:ee:82:ba:a0:ba:14:b7:f2:2e:
83:f8:f6:78:52:0c:1d:53:0a:1c:90:ac:11:7f:54:
6e:df:fb:bc:d8:f5:9a:bd:08:96:48:a1:ff:fb:88:
85:91:28:b1:27:36:d3:72:db:31:33:52:47:d6:e4:
18:25:a3:25:fc:4f:5d:0b:41:15:97:24:34:3a:7b:
4c:26:cd:61:b6:df:9d:42:a8:4b:8f:c7:9a:a0:43:
8c:ff:00:2e:ee:c9:a4:1b:45:42:69:6d:10:cc:9a:
66:88:0e:56:79:dc:2b:bc:62:48:d5:d4:9b:43:5b:
01:ea:31:92:3b:4e:84:ab:57:86:ba:a2:c7:0e:41:
e2:df:36:de:81:b6:0c:78:e6:42:81:87:e1:fe:df:
c6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:17:53:C2:D2:F2:E2:BD:4C:7B:CB:47:6E:3E:CF:6E:D2:2A:AA:8D
X509v3 Authority Key Identifier:
keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/181D46FCEE5611F0B0ABEB00546F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
202.125.96.0/23
203.30.127.0/24
IPv6:
2001:df0:a::/48
2001:df2:ee00::/47
Signature Algorithm: sha256WithRSAEncryption
3d:71:de:40:25:15:a5:96:0b:6a:9e:6b:8c:c5:42:4b:d1:24:
26:76:0b:27:fa:d6:04:59:72:4e:0a:39:3d:df:f1:c7:2a:68:
37:2a:8f:5a:e9:86:f1:e1:7f:d4:67:99:df:b3:f5:80:5e:01:
69:b5:00:6e:c7:7f:3e:f0:ab:a1:55:00:aa:4f:f1:63:df:53:
c6:03:7c:c2:76:7f:12:c1:5f:3b:9b:86:97:72:1c:fc:fa:8e:
86:38:91:6f:85:a8:75:26:a3:93:2f:8f:6b:2d:6c:80:23:5e:
b7:35:e4:29:a8:20:c7:20:3e:a5:65:4c:64:96:b7:1e:58:ec:
28:5b:c6:2e:ba:b1:cf:c9:df:8f:10:fa:b1:64:26:7e:c4:a0:
25:45:74:df:e3:ae:ef:b5:c1:60:2c:e4:b5:6a:97:cc:06:fa:
14:0f:7b:e4:8a:4d:64:e3:ba:00:50:1d:20:21:8e:be:40:e9:
96:c1:a3:98:c1:1c:5b:86:50:01:32:3c:32:c0:55:dc:83:a9:
10:46:37:73:0b:88:36:99:a1:9b:22:51:10:7c:34:0b:e8:9d:
6e:b2:df:5e:10:fd:89:98:54:e9:c7:db:1b:fa:3b:ef:34:b5:
b3:d0:a5:27:fa:a9:27:67:76:9a:9b:3f:92:e3:ba:12:2f:20:
95:b4:67:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 10:15:19 2026 by rpki-client