
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/74B37F24275211F0A14FD328C4F9AE02.roa
File: 74B37F24275211F0A14FD328C4F9AE02.roa (raw, json)
Hash identifier: F55zjQnFvkTNeRw59Rc/nAQUDsOUxPNiEUce26KcKVc=
Subject key identifier: F9:12:F2:9A:2F:89:A4:2A:98:0D:46:CA:39:FC:AA:42:39:F8:C6:D6
Certificate issuer: /CN=A91E7A75/serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5
Certificate serial: DF
Authority key identifier: 97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/74B37F24275211F0A14FD328C4F9AE02.roa
Signing time: Mon 25 May 2026 07:39:33 +0000
ROA not before: Mon 25 May 2026 07:39:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 37989
IP address blocks: 203.123.48.0/21 maxlen: 21
203.123.48.0/22 maxlen: 22
2405:fc00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl
rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 09:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7A75, serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5
Validity
Not Before: May 25 07:39:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a13fcb5-9e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7d:b3:e0:35:49:10:77:4b:85:ca:7b:21:34:
b3:b6:a5:b7:02:dd:e0:0b:ef:14:c2:2b:30:9c:ef:
d9:4d:37:ee:5a:93:d4:e4:4a:ef:30:5e:e9:65:6b:
f1:dd:3a:2f:c2:a2:77:38:d8:93:85:b0:16:bb:6d:
d5:40:a1:63:98:58:a3:01:94:c0:2b:57:e3:a4:ff:
24:50:f9:6a:65:9d:0d:39:88:82:a2:11:18:a3:6f:
57:69:65:de:3f:5a:76:e6:a8:fd:ef:27:64:ef:b2:
c1:2b:37:3e:7d:a7:03:73:00:4b:ce:98:bc:66:fe:
29:12:26:38:bf:2a:81:ff:27:95:3b:c5:a2:12:04:
43:96:64:72:36:fe:7a:5b:7f:fa:fa:aa:9a:4c:77:
f0:19:11:ed:2c:50:ab:92:e2:4a:31:97:ad:69:59:
bf:ac:77:4d:c7:67:f7:e8:0b:45:e7:26:cb:67:c1:
ab:a3:55:2f:af:b4:02:c7:15:b5:c1:b7:95:50:94:
2c:08:9d:4c:d0:e3:26:dc:22:c1:1a:f5:51:d8:df:
84:a2:cf:d7:3c:2c:5d:48:7e:24:04:d1:f1:ce:af:
64:59:da:2a:b4:e9:be:52:b1:44:27:09:b1:6a:7d:
3f:d5:a6:49:bd:57:1a:59:d0:33:e2:fd:f9:07:0b:
2e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:12:F2:9A:2F:89:A4:2A:98:0D:46:CA:39:FC:AA:42:39:F8:C6:D6
X509v3 Authority Key Identifier:
keyid:97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/74B37F24275211F0A14FD328C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.123.48.0/21
IPv6:
2405:fc00::/32
Signature Algorithm: sha256WithRSAEncryption
2e:7a:90:65:9e:dc:6e:1b:2b:d6:a3:a2:85:e9:3a:f9:79:5b:
77:be:09:a8:de:0d:ff:19:d1:2d:ce:ce:21:f5:f3:38:00:d1:
47:e6:03:ca:60:08:e7:4f:e2:92:f0:4e:f2:56:0d:93:d2:17:
c7:f3:1b:8e:09:35:7a:a3:19:41:1e:3e:26:b6:1a:81:3f:64:
60:4d:a9:4f:c5:23:02:19:71:da:14:7b:d4:83:fd:5d:3e:7b:
97:eb:97:50:fe:fc:4e:b4:4a:d0:b0:ab:1d:cb:79:42:4f:16:
37:ca:b9:4e:5e:46:98:89:9c:1c:a1:b9:28:f4:58:c9:c5:7a:
9a:e7:2b:a3:2d:aa:d8:96:95:02:a2:0f:56:6e:23:ff:bb:7d:
db:bd:5e:96:ed:f8:a2:b9:ed:63:5b:eb:81:ae:40:4d:f1:e8:
29:e0:96:5f:3f:bd:64:67:40:ed:e7:04:3c:88:9f:1b:ac:7e:
fa:5a:c0:a7:81:c7:a4:f2:a7:85:08:49:80:cc:d3:21:34:13:
ba:98:91:55:bc:b2:66:09:e6:f5:f5:2c:fb:0e:71:63:8f:3e:
fc:e7:ab:91:66:c8:79:73:23:68:ce:db:fe:dd:99:07:3b:bd:
27:35:0d:da:a5:fa:f9:b4:ea:96:0e:a9:af:a2:a4:81:43:43:
3f:73:ca:81
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTdBNzUxMTAvBgNVBAUTKDk3QUNEREUyOTExQTA5RjM5MzVGMTg2MERCMDU3RDRD
RkY0NkIyQzUwHhcNMjYwNTI1MDczOTMzWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTEzZmNiNS05ZThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArn2z4DVJEHdLhcp7ITSztqW3At3gC+8UwiswnO/ZTTfuWpPU5ErvMF7pZWvx
3TovwqJ3ONiThbAWu23VQKFjmFijAZTAK1fjpP8kUPlqZZ0NOYiCohEYo29XaWXe
P1p25qj97ydk77LBKzc+facDcwBLzpi8Zv4pEiY4vyqB/yeVO8WiEgRDlmRyNv56
W3/6+qqaTHfwGRHtLFCrkuJKMZetaVm/rHdNx2f36AtF5ybLZ8Gro1Uvr7QCxxW1
wbeVUJQsCJ1M0OMm3CLBGvVR2N+Eos/XPCxdSH4kBNHxzq9kWdoqtOm+UrFEJwmx
an0/1aZJvVcaWdAz4v35Bwsu+QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFPkS8pov
iaQqmA1Gyjn8qkI5+MbWMB8GA1UdIwQYMBaAFJes3eKRGgnzk18YYNsFfUz/RrLF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0E3NS9FNkY0QjZEQTI3
NTExMUYwQUNGMEFGMjRDNEY5QUUwMi9sNnpkNHBFYUNmT1RYeGhnMndWOVRQOUdz
c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2w2emQ0cEVhQ2ZPVFh4aGcyd1Y5VFA5R3NzVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTdBNzUvRTZGNEI2REEyNzUxMTFGMEFDRjBBRjI0QzRGOUFFMDIvNzRCMzdGMjQy
NzUyMTFGMEExNEZEMzI4QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQDy3swMA0EAgACMAcDBQAkBfwAMA0GCSqGSIb3DQEBCwUAA4IBAQAu
epBlntxuGyvWo6KF6Tr5eVt3vgmo3g3/GdEtzs4h9fM4ANFH5gPKYAjnT+KS8E7y
Vg2T0hfH8xuOCTV6oxlBHj4mthqBP2RgTalPxSMCGXHaFHvUg/1dPnuX65dQ/vxO
tErQsKsdy3lCTxY3yrlOXkaYiZwcobko9FjJxXqa5yujLarYlpUCog9WbiP/u33b
vV6W7fiiue1jW+uBrkBN8egp4JZfP71kZ0Dt5wQ8iJ8brH76WsCngcek8qeFCEmA
zNMhNBO6mJFVvLJmCeb19Sz7DnFjjz7856uRZsh5cyNoztv+3ZkHO70nNQ3apfr5
tOqWDqmvoqSBQ0M/c8qB
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:21:23 2026 by rpki-client