
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/20C6F2EC699D11EAA33EAE83C4F9AE02.roa
File: 20C6F2EC699D11EAA33EAE83C4F9AE02.roa (raw, json)
Hash identifier: pJMsFDa2IiscUlM6zrzKfc9Qr8s1FCM7+jFA2I77lGg=
Subject key identifier: 8B:43:0E:69:F0:CD:91:EA:FB:39:BC:AB:D3:C0:63:C7:55:2D:72:0C
Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
Certificate serial: 1B6F
Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/20C6F2EC699D11EAA33EAE83C4F9AE02.roa
Signing time: Sun 01 Mar 2026 21:12:49 +0000
ROA not before: Mon 24 Mar 2025 14:50:31 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 12008
IP address blocks: 116.51.28.192/26 maxlen: 26
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl
rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:53:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7023 (0x1b6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6D5D, serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
Validity
Not Before: Mar 24 14:50:31 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a4abd1-d8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fd:49:e9:33:ee:c4:0d:47:7a:bf:6f:09:55:
7c:84:f7:bb:15:ef:8e:26:d1:01:9b:b3:65:f6:3f:
e3:86:9d:97:c0:6b:c4:64:3e:7f:3a:b1:6b:44:0e:
ab:5d:9a:30:9d:10:84:37:04:ee:75:21:96:47:8b:
b1:1b:60:b5:19:7b:19:12:54:7d:62:c5:3b:6a:c9:
82:c5:41:90:0e:bc:7f:33:6c:88:19:8b:37:55:2e:
7a:97:df:25:83:e5:fa:cf:c3:45:1c:eb:eb:c7:47:
d7:c4:46:6b:59:36:36:3b:48:03:ca:1a:8e:72:49:
33:fa:7f:19:3a:e2:c0:4c:08:ce:af:fd:f3:ee:43:
7c:20:74:42:c4:cc:4d:85:32:1e:f8:22:bf:86:c8:
cb:d1:9f:61:50:ab:12:a7:14:4f:93:18:e5:a9:6a:
f6:dc:04:5c:86:4e:d3:25:2c:2e:d8:bf:37:b3:35:
a5:11:f1:35:15:bb:a7:06:1c:00:a2:f2:d4:cf:eb:
0d:34:38:c1:dc:0b:5b:43:8c:69:f5:93:73:c2:28:
bf:6f:37:f1:43:12:31:aa:c6:f4:73:73:90:cb:b9:
ce:76:cc:1e:10:3d:41:b2:f9:0e:a0:4e:45:db:f5:
1d:f0:ea:3e:32:29:27:1b:f5:d4:43:90:14:6d:6b:
61:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:43:0E:69:F0:CD:91:EA:FB:39:BC:AB:D3:C0:63:C7:55:2D:72:0C
X509v3 Authority Key Identifier:
keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/20C6F2EC699D11EAA33EAE83C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.51.28.192/26
Signature Algorithm: sha256WithRSAEncryption
31:52:45:6e:b0:e4:58:b6:37:71:2d:66:23:af:a2:9b:77:01:
e5:09:e9:a3:b2:1a:0b:f4:b4:2e:73:d1:cb:d5:63:b6:0f:ed:
43:53:05:85:49:49:d2:cc:93:92:ae:1a:00:e3:4d:c9:dc:f3:
17:89:d6:ee:ef:e4:04:e8:00:da:8f:90:0b:c0:8e:ab:ca:d8:
25:fa:f5:92:47:c0:19:30:c2:72:2b:8b:62:d2:f3:b4:5b:25:
96:d5:b9:5c:62:f1:42:54:9a:c0:da:a9:54:3b:d4:4f:d9:2b:
c3:fd:6a:7f:ab:52:01:cd:3c:ec:d3:94:d0:5a:82:21:e9:a1:
3b:a2:c4:f9:0b:5a:d9:26:d2:f5:e1:44:2d:ae:fc:4c:17:8c:
3e:13:d3:96:7f:8b:0b:e3:62:4b:92:d3:96:79:4b:49:a8:c1:
80:41:76:6d:71:e3:67:a1:87:ed:a9:bf:c8:a7:2f:46:12:65:
f3:80:f1:fd:0b:b0:d6:2a:40:69:c6:cf:62:5f:3e:cf:9f:5c:
ba:8c:ae:62:77:07:2d:bc:dc:1a:3b:83:ce:ba:90:a5:bd:f6:
44:77:f6:46:f3:2c:4c:a0:84:51:e3:c6:13:92:53:a4:10:74:
58:5f:cf:f8:34:50:77:b2:44:2d:de:69:64:7d:f5:e8:b0:50:
54:a9:ae:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:40:45 2026 by rpki-client