
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/2F734D2E860111EFB49EB20DC4F9AE02.roa
File: 2F734D2E860111EFB49EB20DC4F9AE02.roa (raw, json)
Hash identifier: AXziCFMFYEtBXdtY9dmpKm88jTn6EGy7D69LF+swI3Y=
Subject key identifier: 2C:8C:D2:48:D7:DA:80:2C:C8:5B:9F:48:79:F3:53:1A:98:E9:F0:5A
Certificate issuer: /CN=A91E1F31/serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9
Certificate serial: 019C
Authority key identifier: 69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/2F734D2E860111EFB49EB20DC4F9AE02.roa
Signing time: Sun 29 Mar 2026 04:39:14 +0000
ROA not before: Sun 29 Mar 2026 04:39:14 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 152643
IP address blocks: 202.37.46.0/24 maxlen: 24
2401:fa60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl
rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412 (0x19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1F31, serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9
Validity
Not Before: Mar 29 04:39:14 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69c8acf2-a189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b2:42:61:4c:30:f6:7c:f5:23:01:d0:ca:13:
8b:c9:9a:55:6a:a1:30:3b:c9:80:a3:16:b8:b1:48:
53:df:e5:1c:95:cd:8f:6f:13:96:df:5e:b7:72:93:
32:e5:26:13:62:27:e3:9a:20:8e:4d:55:68:39:b7:
c7:28:87:60:99:f0:fd:86:10:6d:ba:04:7e:b6:bf:
40:24:97:21:79:2e:33:f1:76:95:ed:1c:50:88:2b:
3a:80:f0:bb:e7:36:52:2b:82:60:80:84:64:89:cf:
d5:6d:f4:75:aa:74:ce:15:64:ca:67:3b:ea:29:f4:
7b:63:a9:a8:2a:55:23:cd:af:e7:83:20:a3:30:8c:
3b:71:84:b2:e5:b8:05:45:a2:ff:d3:d9:75:e8:81:
d4:e6:b1:b0:fd:05:b8:fe:59:88:e4:d4:99:38:28:
65:9a:96:21:b7:14:6f:31:dd:74:ee:bf:9e:04:68:
a0:cf:a8:e2:77:7a:28:8f:e9:fe:96:2b:22:11:ba:
12:fa:b6:56:38:ba:82:2c:38:fc:7b:b7:62:3e:4f:
14:d1:c2:2d:ef:4f:c9:7a:0c:dd:6f:a8:d9:e8:d9:
20:c1:2c:46:7b:94:ab:02:5d:d0:1f:4e:a4:83:18:
6d:aa:a2:0b:64:0c:36:67:93:7b:f4:26:71:ac:ce:
10:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8C:D2:48:D7:DA:80:2C:C8:5B:9F:48:79:F3:53:1A:98:E9:F0:5A
X509v3 Authority Key Identifier:
keyid:69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/2F734D2E860111EFB49EB20DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.37.46.0/24
IPv6:
2401:fa60::/32
Signature Algorithm: sha256WithRSAEncryption
12:49:ec:3b:9d:e8:e1:34:b3:05:d7:7d:93:63:45:d3:38:8d:
b6:85:0d:92:9d:8c:8a:40:3f:2e:ea:65:da:6a:ab:b9:25:fc:
a3:61:3e:07:2d:3c:d3:0c:eb:a1:38:b4:ae:99:00:f1:0a:7d:
36:11:62:f7:ac:5f:a5:b9:79:d3:9d:c8:08:14:26:0e:d3:39:
df:ae:de:d8:16:62:a5:88:8b:16:df:98:3f:18:f7:c9:8b:68:
a8:3d:47:a1:d9:cd:b6:8d:0c:ba:96:c5:38:9e:5b:40:fd:3b:
ec:30:9e:dc:9f:4e:65:a8:58:da:f9:7d:a6:3a:0a:7d:c5:d8:
78:5b:1c:82:a7:8d:df:ab:b9:b4:59:b8:f9:e5:91:7b:aa:dc:
76:f7:63:33:23:49:bf:1e:57:f4:86:c2:e9:6c:2b:82:a9:ab:
b3:22:1d:6c:7b:dc:7c:2a:6e:ec:99:ac:8c:66:92:a2:08:a4:
44:e5:1c:17:d6:d9:1d:23:08:3b:f8:42:ed:9a:76:95:f2:5a:
84:55:d9:c6:29:70:6e:64:ba:06:0f:3e:d1:fb:02:fa:01:26:
0a:8e:d7:cb:a2:70:67:ad:a9:7a:e1:e6:07:0d:61:be:b8:b0:
87:a3:ec:e6:8d:d5:97:4f:13:e2:44:bd:e8:dd:77:f6:bc:69:
dc:c8:b7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:01:48 2026 by rpki-client