
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/F4B9363CD97C11F0998DA3C49DD3641D.roa
File: F4B9363CD97C11F0998DA3C49DD3641D.roa (raw, json)
Hash identifier: VfJC1uL3SDtxI0jb1ThMloxDt/b6TXqC47eyeyvo+WI=
Subject key identifier: A7:52:D5:61:CD:22:12:9F:AB:5B:68:8F:01:7B:1E:5B:F6:EA:4E:44
Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Certificate serial: 22E7
Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/F4B9363CD97C11F0998DA3C49DD3641D.roa
Signing time: Sun 01 Mar 2026 18:45:59 +0000
ROA not before: Mon 15 Dec 2025 06:11:55 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 135402
IP address blocks: 220.158.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:41:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8935 (0x22e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Validity
Not Before: Dec 15 06:11:55 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a48967-d567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bf:89:24:ed:e9:79:cf:30:fc:7d:80:c0:a5:
05:aa:43:01:94:95:e2:b9:34:82:c2:e5:cc:9c:24:
b8:a7:78:3f:65:56:31:30:76:b3:9e:01:81:d9:f3:
24:86:d4:d3:6f:47:a2:75:95:7c:b1:ab:18:25:5e:
8c:a6:da:f0:32:f5:37:d1:c7:9e:c4:82:71:93:be:
f4:a5:30:ad:39:bd:5b:f5:76:d4:ec:5e:d0:ee:56:
6a:d2:69:cf:4e:6a:b3:32:50:ca:42:34:e1:03:35:
ce:0c:70:b5:79:aa:9b:97:cb:98:3b:a3:e8:10:ff:
7d:34:01:c7:d7:39:01:ad:36:a5:1a:23:9e:2f:3b:
e0:f6:7d:44:33:42:38:90:35:96:79:54:78:78:5e:
c4:44:fd:25:ab:a0:3a:7a:57:6b:c1:12:77:c2:29:
67:e9:44:08:fe:24:a9:63:07:fe:0d:79:af:cc:40:
75:cf:b2:d4:3e:34:6d:19:a9:b0:59:7f:19:bb:fb:
7c:d8:47:41:0c:78:fe:4b:8a:6f:e5:3f:ca:f6:40:
95:7d:b2:c6:fe:5a:e9:7c:03:16:c9:17:b2:70:b5:
aa:1c:69:9a:39:7f:a5:8c:54:b4:4e:e2:26:18:20:
ea:56:22:93:e3:38:c0:b0:35:d3:66:65:54:e3:57:
03:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:52:D5:61:CD:22:12:9F:AB:5B:68:8F:01:7B:1E:5B:F6:EA:4E:44
X509v3 Authority Key Identifier:
keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/F4B9363CD97C11F0998DA3C49DD3641D.roa
sbgp-ipAddrBlock: critical
IPv4:
220.158.205.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:8f:fb:cf:36:41:9c:06:7d:ae:70:9e:b3:cc:a7:43:8d:65:
d3:40:a6:96:fa:31:4c:9f:84:d1:2a:8f:c3:b2:9f:75:57:ae:
a9:24:2c:6a:33:9f:48:4b:5c:84:ed:60:ba:3e:fa:16:99:06:
8d:d6:56:70:62:5d:06:5a:6d:60:ee:d2:94:bd:49:bb:f1:97:
7f:a4:ef:2f:1f:0d:3e:f0:b2:44:90:59:c3:3e:b6:a3:2e:24:
41:8c:4e:22:2c:d5:b5:d4:ce:e3:c5:01:2f:b5:cb:e8:ac:31:
df:fe:3f:36:cb:c7:1b:31:47:11:7f:08:5a:86:0d:64:bc:89:
fc:af:25:b6:27:63:36:f7:b2:3a:ca:09:66:35:60:02:f6:15:
9c:79:8b:e7:10:58:37:5b:1e:05:bd:cc:2f:40:c6:eb:da:d3:
15:74:8e:81:dc:6a:0d:28:d5:f0:85:ad:eb:2f:2d:9a:dd:b8:
79:62:03:ab:45:c9:44:34:cf:2c:5a:cb:8a:07:c8:05:26:d3:
a6:bc:d2:fa:cb:b4:61:4b:b2:c4:f2:55:d7:24:88:bb:f8:72:
de:44:f4:de:f3:58:d7:02:cd:3a:5c:16:f5:7b:cc:34:de:6d:
68:6b:14:35:f1:e3:c0:3f:01:cd:ec:86:ae:c9:07:d5:3c:31:
93:16:ee:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:37 2026 by rpki-client