
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/436F1AE2ECF411EA822E8D28C4F9AE02.roa
File: 436F1AE2ECF411EA822E8D28C4F9AE02.roa (raw, json)
Hash identifier: 427mvzJFSdYUKAL3X0UPysO+w/VRSMcKPmDmCw4wPXE=
Subject key identifier: 0C:66:D3:CA:2E:4F:49:FD:B9:74:2B:3B:51:32:B1:33:86:53:D6:B9
Certificate issuer: /CN=A91EA786/serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E
Certificate serial: 0C26
Authority key identifier: 91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/436F1AE2ECF411EA822E8D28C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:25:04 +0000
ROA not before: Tue 10 Jun 2025 19:23:43 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 10081
IP address blocks: 116.197.0.0/17 maxlen: 17
203.92.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl
rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:11:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3110 (0xc26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA786, serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E
Validity
Not Before: Jun 10 19:23:43 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a48480-13cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:02:a0:01:11:6b:7c:c6:e8:58:9e:46:d9:76:
5a:ef:89:11:e3:3e:ae:62:5a:6f:c9:f4:53:00:13:
df:7f:fa:8e:a6:04:f5:1c:3b:12:6c:92:f6:c3:ce:
c7:ea:ab:13:ca:47:f1:30:4c:9e:6c:1e:ca:81:94:
10:b0:9d:40:28:3a:04:63:be:55:f9:92:9f:a7:86:
88:9b:cf:f0:1c:54:6c:7d:5c:60:fb:85:9e:4f:5f:
74:49:a5:36:f5:28:66:9e:df:dc:22:30:75:22:28:
20:89:a9:ce:66:b6:34:e9:7d:eb:54:11:96:e3:32:
8e:42:d2:4f:e0:ea:9a:ac:c0:af:d0:d9:cf:b9:7e:
61:6b:45:69:4d:23:bc:e5:4c:7d:25:06:b7:d6:e7:
63:1c:b1:cd:0c:77:31:d8:5b:2b:e7:8d:68:e7:a2:
3e:a3:12:62:4d:c7:6e:28:d0:de:cb:32:cf:f3:83:
19:39:fe:ea:2e:07:c7:80:80:02:fe:fa:f8:4e:af:
70:8c:f5:2c:d0:67:45:9b:b1:ef:92:ee:5d:99:92:
03:a1:6c:10:44:7e:3d:46:9c:4e:7d:0c:67:14:ca:
8a:83:f6:38:fb:71:19:02:41:9b:95:ec:cf:17:b3:
88:a7:4c:9e:30:93:00:92:dc:0f:dd:a6:3a:12:d0:
46:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:66:D3:CA:2E:4F:49:FD:B9:74:2B:3B:51:32:B1:33:86:53:D6:B9
X509v3 Authority Key Identifier:
keyid:91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/436F1AE2ECF411EA822E8D28C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.197.0.0/17
203.92.128.0/19
Signature Algorithm: sha256WithRSAEncryption
09:4e:3f:53:a9:f3:25:2b:c3:41:22:1e:57:58:0f:84:8f:af:
3b:c6:1c:e1:04:8a:a3:a7:96:88:7f:3a:60:82:54:26:91:6a:
9e:cd:4c:d8:e4:c2:31:0e:6f:88:c9:97:53:62:88:fa:5a:3e:
83:e2:81:b8:de:41:fa:9a:ff:fe:77:91:02:90:74:99:40:07:
10:84:a9:e1:08:49:92:97:47:ca:b8:3d:7e:0c:56:91:5c:32:
1e:78:9a:75:e0:fb:a1:40:6b:1b:36:f4:16:36:8b:11:c5:3f:
5b:84:5e:3b:ed:b7:b4:0e:59:b8:0e:49:4c:e5:a1:34:65:2b:
81:34:2e:34:a6:65:66:70:1f:76:b6:a4:be:f2:92:cb:44:e6:
d2:d4:d9:dc:98:a1:75:d4:a7:8d:43:aa:0c:27:e1:04:04:db:
ac:a6:83:bd:1f:4d:8d:6b:9c:65:35:54:d9:96:25:e1:e7:4c:
50:b7:e1:5e:6f:4a:00:db:0b:6b:f6:c3:f8:fa:2b:82:4f:a8:
65:16:44:b2:4d:1b:6e:56:ad:81:83:f4:2f:79:07:a4:10:6f:
12:6b:9e:3e:b0:bd:7a:a0:06:fc:10:95:8c:0e:71:f5:6b:1e:
5e:40:3c:dd:a3:11:3b:e1:59:48:0f:13:32:24:73:00:cb:50:
6f:03:5d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:53 2026 by rpki-client