
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/6D6DED2830BE11EC9401610CC4F9AE02.roa
File: 6D6DED2830BE11EC9401610CC4F9AE02.roa (raw, json)
Hash identifier: 4bbcXUAySLXOzdFL1tioIfucTJOOmIVK2SW9Cfab4LY=
Subject key identifier: 23:16:19:AC:45:42:05:C0:B6:78:EA:BD:57:BD:BE:15:90:BC:A2:5C
Certificate issuer: /CN=A91E87B4/serialNumber=1044997BC63A813DA04C1B91897374B68B04BA61
Certificate serial: 0EEA
Authority key identifier: 10:44:99:7B:C6:3A:81:3D:A0:4C:1B:91:89:73:74:B6:8B:04:BA:61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/6D6DED2830BE11EC9401610CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:49:11 +0000
ROA not before: Thu 20 Nov 2025 17:37:09 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 38235
IP address blocks: 202.178.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.crl
rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3818 (0xeea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E87B4, serialNumber=1044997BC63A813DA04C1B91897374B68B04BA61
Validity
Not Before: Nov 20 17:37:09 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a443d7-6995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f6:c3:f3:49:bb:87:15:86:ac:e9:aa:ce:85:
17:50:0a:4d:5f:58:3f:48:2f:6e:54:1e:09:23:d6:
b5:a9:29:88:07:b3:13:41:2e:d4:5a:6e:9e:b6:81:
55:4f:f2:2b:43:d3:4b:c8:75:01:71:a4:2d:64:2f:
6f:2d:3a:26:58:29:16:c1:22:0a:1a:5c:6a:33:4c:
51:ec:0d:a1:f1:5b:ae:d3:4f:a4:0b:de:68:2f:b2:
77:ef:d4:13:22:ab:d3:7b:23:5d:9b:fd:e6:3d:17:
2e:3f:7f:a0:98:b4:c0:01:da:33:16:16:00:0b:41:
d8:1e:02:49:42:1d:28:dd:16:8d:3b:b4:69:5d:1f:
c0:fb:eb:e0:36:0f:ae:bb:aa:60:ff:b4:1d:f4:f8:
f9:e9:84:95:40:6f:13:87:7f:7c:83:3b:9e:15:f3:
17:c9:5f:25:fe:f7:11:b1:d4:3e:d7:05:0a:4c:61:
6f:9a:cd:2b:f0:aa:9c:67:14:81:a6:70:07:a5:29:
19:36:5b:bb:f2:05:fd:2f:b3:24:b2:60:f1:61:de:
2f:72:b5:6d:58:1a:2d:ec:f0:55:64:cb:7b:3e:b1:
a5:58:27:6f:1b:0d:bc:ef:0c:95:06:12:a8:7f:b3:
95:52:e9:0d:cd:17:65:e0:5e:c6:4b:e7:31:52:ef:
86:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:16:19:AC:45:42:05:C0:B6:78:EA:BD:57:BD:BE:15:90:BC:A2:5C
X509v3 Authority Key Identifier:
keyid:10:44:99:7B:C6:3A:81:3D:A0:4C:1B:91:89:73:74:B6:8B:04:BA:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/6D6DED2830BE11EC9401610CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.178.112.0/20
Signature Algorithm: sha256WithRSAEncryption
77:d5:bb:12:dc:fa:29:96:13:82:af:3c:cd:61:f6:2a:d9:5b:
c8:c0:dc:72:ce:8b:66:f8:a4:8c:10:c5:41:b0:64:a4:57:f4:
27:4c:be:bf:1f:21:6d:e2:25:f6:ca:a0:c1:65:1d:38:9a:1e:
81:ec:f6:05:e0:9c:ba:94:8a:51:39:a9:86:2c:a5:37:77:70:
61:e9:2f:3e:9f:ce:27:5e:c0:6c:c6:6a:43:c4:91:0d:13:2f:
d3:49:66:5c:db:d9:17:1c:e0:56:a4:9b:f4:49:fc:e9:a0:bc:
a7:ad:12:32:83:25:98:35:20:23:88:c2:b6:82:9b:88:69:38:
03:a7:79:0c:fb:a6:e6:56:5a:e3:97:2b:e3:89:8f:f4:d3:b4:
90:76:9e:df:34:49:53:9b:04:58:30:14:31:c6:92:b5:11:40:
8d:27:44:dc:24:0c:da:49:72:22:ce:06:ad:40:28:b9:3a:3c:
64:50:75:8e:91:ed:10:21:d0:15:71:4e:ac:86:bb:3c:e4:7a:
65:02:60:c9:71:25:5a:bf:b0:ab:c8:ba:82:73:49:a1:41:de:
bd:17:9c:0a:78:84:73:1d:e8:3e:90:c7:88:28:7c:d5:b7:7e:
18:b6:79:50:21:9c:65:83:29:82:c0:c9:6e:3a:72:01:27:3f:
83:b7:b1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:25:22 2026 by rpki-client