
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/445D02B0A73411F19BABC22E6911F970.roa
File: 445D02B0A73411F19BABC22E6911F970.roa (raw, json)
Hash identifier: z0XTVBK6TnyZ4VFjy6iCp+Zyyn3nLxXQofEIRASpibU=
Subject key identifier: 3B:C2:A5:78:63:CC:A7:55:FC:DC:9A:85:5F:C8:50:95:31:81:A0:21
Certificate issuer: /CN=A91EA449/serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661
Certificate serial: 01D1
Authority key identifier: 6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/445D02B0A73411F19BABC22E6911F970.roa
Signing time: Thu 03 Sep 2026 09:42:16 +0000
ROA not before: Thu 03 Sep 2026 09:42:16 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 203.21.95.0/24 maxlen: 24
203.27.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl
rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:51:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465 (0x1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA449, serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661
Validity
Not Before: Sep 3 09:42:16 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a9940f8-6452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f1:3e:3d:78:3b:0f:cb:ed:13:87:21:0a:47:
6e:d1:05:3c:85:d8:00:d5:3a:01:77:09:90:81:e5:
c4:65:78:61:3e:a2:fc:b2:7b:53:b4:2a:4f:34:83:
5f:5c:c2:11:c7:12:df:70:4a:46:44:08:cf:19:e4:
4a:80:9c:ab:ef:42:19:f2:70:e2:82:19:76:d0:f6:
00:23:18:91:8c:1f:4a:b1:44:34:d4:ca:b0:34:7e:
c7:c4:1e:48:bf:05:e8:4f:2e:2f:42:37:4b:db:19:
dd:d4:96:20:f9:08:a8:28:c7:de:3a:5f:9c:ec:62:
39:64:11:f5:9a:c1:f3:5d:ad:e8:29:7a:41:fa:b0:
fc:81:6e:a2:31:e8:4c:75:52:8f:02:5a:99:db:ed:
e3:e8:07:26:e2:c4:ff:08:4b:c1:30:d8:06:29:45:
c0:32:27:60:93:12:4a:38:05:e0:b8:e4:27:a1:e3:
91:8f:fc:4a:9c:6f:fb:ae:5e:8c:6e:24:19:6a:10:
57:fc:67:66:71:11:d5:19:82:d9:24:ec:4e:7f:55:
cc:07:a9:1e:b4:1f:6c:b1:e1:58:d7:fd:3e:7d:9d:
f8:dc:05:73:31:20:15:69:ee:30:42:62:27:57:b4:
e8:90:b9:a2:83:c2:86:07:f5:49:84:5f:c4:57:d1:
a0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C2:A5:78:63:CC:A7:55:FC:DC:9A:85:5F:C8:50:95:31:81:A0:21
X509v3 Authority Key Identifier:
keyid:6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/445D02B0A73411F19BABC22E6911F970.roa
sbgp-ipAddrBlock: critical
IPv4:
203.21.95.0/24
203.27.70.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:55:22:65:18:22:9b:ed:23:7a:6b:1b:0f:39:b5:aa:df:6a:
70:f6:a5:31:c9:86:f8:1e:94:af:e3:69:15:33:db:d6:74:ef:
99:5d:ff:42:20:2b:bb:72:b0:86:d6:7f:e9:27:fc:fe:3f:62:
d2:16:10:ce:42:64:ca:98:a6:03:ff:1e:89:ee:15:37:bf:d1:
f2:9c:80:f1:00:01:21:48:26:be:63:45:c9:4d:7f:67:d7:d0:
2b:0c:b9:de:e6:a5:85:a7:59:e9:cf:6e:be:aa:e0:14:2a:2b:
cf:ef:fe:1a:9f:74:f5:b2:34:44:75:48:f0:dd:1a:69:5f:c6:
89:60:53:37:62:01:a3:5d:5d:f9:87:d4:a0:29:69:c3:b7:54:
b4:39:89:f5:bd:eb:22:c1:1e:5e:28:55:f7:86:e0:31:17:db:
5e:15:e1:39:a3:eb:83:92:3f:0d:02:9c:d2:97:4d:ca:5e:81:
81:d3:cc:bb:79:e7:06:21:4c:43:be:cb:2b:bf:4b:dc:b6:6f:
22:0c:23:57:79:db:27:83:57:2c:82:76:ae:50:41:24:ea:0c:
3f:de:48:31:18:ef:6e:a1:a0:2b:b0:3e:b9:df:55:7b:cb:27:
2b:4e:8f:3c:7d:14:9b:bf:de:34:b2:db:bf:a7:c3:4e:9d:55:
c4:64:28:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:06:36 2026 by rpki-client