
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/9E314E3A275211F09DB11A29C4F9AE02.roa
File: 9E314E3A275211F09DB11A29C4F9AE02.roa (raw, json)
Hash identifier: ouIXTA7nbMIsAmF3ndS+L28s40QPvKUpIo7ArtiHIu0=
Subject key identifier: 35:17:41:9B:AE:7B:7A:39:DB:72:D3:37:17:2C:B9:1C:5C:84:AC:E1
Certificate issuer: /CN=A91E7A75/serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5
Certificate serial: DD
Authority key identifier: 97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/9E314E3A275211F09DB11A29C4F9AE02.roa
Signing time: Mon 25 May 2026 07:39:29 +0000
ROA not before: Mon 25 May 2026 07:39:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140982
IP address blocks: 203.123.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl
rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 09:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7A75, serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5
Validity
Not Before: May 25 07:39:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a13fcb1-2d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7b:68:fb:74:46:f5:7d:cd:2a:0d:7c:03:07:
e3:27:73:15:ee:b4:30:1e:91:ed:26:11:7b:3b:18:
0d:d8:97:7e:dc:a4:ba:8a:1d:29:a4:82:77:7c:45:
21:65:3a:65:b0:71:0e:18:4e:91:74:98:6c:50:0d:
62:e0:b5:56:f2:0f:4e:2c:c1:59:41:41:89:e3:2e:
dc:82:81:b0:a3:7b:da:d7:06:07:1e:11:83:d2:ef:
f1:96:aa:37:3c:ac:94:c4:40:6f:91:b1:0d:7c:0a:
b6:19:a9:cb:a7:0f:f2:b4:15:54:f6:48:aa:b1:12:
6c:f8:94:67:38:db:ec:40:ea:f1:04:00:52:c9:8b:
8a:c8:fc:9c:b3:fb:e8:94:ae:bb:00:a1:db:20:12:
fa:f4:73:67:22:de:c6:22:f3:b6:75:b9:e5:8e:6c:
f2:c4:50:4c:a0:56:9c:59:6c:01:4e:3f:36:d0:b4:
3c:dc:c4:dd:b8:28:1f:d3:f8:2f:46:4a:59:dd:a2:
a9:12:56:d8:80:21:28:09:2d:66:0b:b6:1d:d9:5d:
e9:25:f0:87:04:b0:f5:14:9c:92:09:ed:8a:b1:c9:
57:09:eb:55:44:59:cf:e7:cb:f5:e9:f2:5f:32:19:
d4:55:7c:72:fe:b4:56:cf:88:0c:72:7e:ea:e3:df:
19:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:17:41:9B:AE:7B:7A:39:DB:72:D3:37:17:2C:B9:1C:5C:84:AC:E1
X509v3 Authority Key Identifier:
keyid:97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/9E314E3A275211F09DB11A29C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.123.54.0/24
Signature Algorithm: sha256WithRSAEncryption
58:fe:50:23:ce:17:7c:cc:b9:fd:16:8a:28:39:da:39:7e:e4:
65:d7:7e:41:f4:85:0e:04:ab:84:8d:53:0d:2f:ad:c3:16:63:
71:70:98:cd:d0:c7:72:38:86:08:ea:89:51:46:e5:43:41:8a:
3f:84:88:3f:8a:bb:43:b0:fa:46:d6:cf:3c:50:df:93:d5:8b:
ed:b7:a1:9b:22:dd:6a:cd:33:07:c2:a4:ad:4d:76:31:28:27:
97:55:e4:a5:9f:91:9f:1e:57:45:58:d9:4d:18:9c:15:29:6c:
6f:06:f6:ad:21:d1:43:e0:db:d4:15:8a:7a:28:e7:24:68:52:
37:1a:51:1e:42:36:8b:f0:4c:ee:42:5c:46:34:08:c1:03:de:
f9:6f:fa:38:32:81:d1:b8:e3:24:17:71:7b:9c:b5:16:90:e1:
f9:f0:c8:33:4c:1c:27:55:5c:67:43:61:7d:bb:a8:cf:0f:70:
64:74:0b:cc:b7:8a:67:b6:4a:f0:fb:40:09:5f:60:11:39:10:
1b:be:c3:2f:ea:d0:c5:be:31:e9:ef:da:78:a1:ad:29:83:b1:
78:e9:2f:f4:b9:7e:73:c9:b5:74:0a:38:6e:fc:b4:8f:2a:78:
0b:e4:06:1d:85:31:fc:9d:cd:ec:36:33:21:bc:e3:c2:9d:e8:
c1:6d:b0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:21:24 2026 by rpki-client