
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/436F1AE2ECF411EA822E8D28C4F9AE02.roa
File: 436F1AE2ECF411EA822E8D28C4F9AE02.roa (raw, json)
Hash identifier: j5PopsmOwZFXKKisotFRY1R3qhxNhXf+mgbfOulCpEE=
Subject key identifier: 3E:EA:0A:3A:36:7E:4D:C2:5F:15:0F:03:B5:9C:EE:BC:4C:AD:94:C7
Certificate issuer: /CN=A91EA786/serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E
Certificate serial: 0C65
Authority key identifier: 91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/436F1AE2ECF411EA822E8D28C4F9AE02.roa
Signing time: Fri 12 Jun 2026 19:22:15 +0000
ROA not before: Fri 12 Jun 2026 19:22:15 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 10081
IP address blocks: 116.197.0.0/17 maxlen: 17
203.92.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl
rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:22:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3173 (0xc65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA786, serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E
Validity
Not Before: Jun 12 19:22:15 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a2c5c67-daf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fa:63:50:19:f9:b7:19:2c:ba:49:52:e4:47:
e0:38:72:d7:ea:10:02:74:64:11:8d:b0:5f:f6:3f:
82:d3:e6:b8:7a:d0:25:8d:f5:d2:5c:42:0a:0c:c7:
17:58:33:da:40:af:3e:e5:17:ab:76:5a:f8:32:bd:
f2:7f:60:ed:9e:1c:b9:3f:b3:31:18:d9:20:4d:4d:
6d:ea:13:95:60:a2:75:4c:7f:e7:b6:16:82:a7:e4:
57:8d:25:4b:61:75:73:47:93:5f:b0:a0:23:76:a4:
13:26:fe:3a:8d:a9:98:a9:df:57:1d:a4:39:ba:51:
90:f9:0e:ec:52:34:f5:09:f3:77:21:27:11:14:f7:
6f:ed:7a:f5:26:60:f7:a4:73:15:f3:bd:11:1b:74:
9b:9c:c7:59:5e:60:1e:15:e5:e0:28:ec:0d:b0:c8:
ac:72:70:39:69:fc:38:36:28:0e:7d:2d:e8:6b:de:
d9:9f:a4:d6:2a:62:c5:3c:d7:18:37:ef:85:e8:b9:
7d:ca:df:16:47:15:7e:0e:12:29:88:fd:e3:1a:4f:
30:70:51:38:4e:71:6d:6e:44:e1:dd:a9:c6:3c:5f:
ea:02:3d:3d:b6:d2:d5:ec:b1:76:3f:d4:e5:44:d2:
3b:9c:dd:c0:b4:cf:fc:32:f1:5d:05:8a:3c:43:01:
3b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EA:0A:3A:36:7E:4D:C2:5F:15:0F:03:B5:9C:EE:BC:4C:AD:94:C7
X509v3 Authority Key Identifier:
keyid:91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/436F1AE2ECF411EA822E8D28C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.197.0.0/17
203.92.128.0/19
Signature Algorithm: sha256WithRSAEncryption
7d:20:47:22:a0:91:0f:f7:e2:e1:54:f6:d9:0b:94:1c:de:5e:
e7:74:fc:b1:3f:09:18:93:f1:30:ab:52:5c:7d:d1:59:3f:3e:
49:23:59:7f:68:3f:d4:6e:ba:29:8b:0d:d7:cc:61:e4:e6:d5:
e9:3d:68:f0:77:71:9c:7c:7f:72:ae:b7:a7:3c:5f:d3:99:11:
1b:72:3f:df:df:a4:e9:ca:b8:5b:7d:12:87:44:64:4c:95:5d:
3f:9e:1a:85:70:81:5a:f8:c9:35:e1:34:56:f4:a0:44:b9:c0:
ad:3a:c5:02:e2:36:5d:11:41:a4:39:09:9c:5a:cc:fc:4f:c8:
1f:b6:fe:2d:91:e7:20:15:c0:34:6f:a9:f5:fe:27:f7:8a:26:
e1:f1:c7:a9:ca:de:52:ab:02:69:cc:24:5f:55:1d:8e:db:79:
2c:0e:14:80:16:77:96:cb:e8:13:a6:02:91:08:fb:70:f0:0d:
e7:b6:ac:58:ec:f2:6f:30:2f:3e:24:ab:8a:a5:95:da:14:47:
05:72:aa:b7:2e:cc:d8:8d:d6:7a:56:d3:95:ee:2c:93:c9:aa:
20:3d:bc:69:a9:94:e7:2c:b1:62:f0:96:ee:79:7d:85:b2:ca:
ec:87:26:56:0f:12:6a:30:e0:05:23:88:fd:68:b2:41:38:f0:
65:23:19:2e
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICDGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE3ODYxMTAvBgNVBAUTKDkxQzNDOTY2Nzc2RjAxMUZDNTM1MDIxRDg1RjVBRTdC
RkJBREE1N0UwHhcNMjYwNjEyMTkyMjE1WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTJjNWM2Ny1kYWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlvpjUBn5txksuklS5EfgOHLX6hACdGQRjbBf9j+C0+a4etAljfXSXEIKDMcX
WDPaQK8+5Rerdlr4Mr3yf2Dtnhy5P7MxGNkgTU1t6hOVYKJ1TH/nthaCp+RXjSVL
YXVzR5NfsKAjdqQTJv46jamYqd9XHaQ5ulGQ+Q7sUjT1CfN3IScRFPdv7Xr1JmD3
pHMV870RG3SbnMdZXmAeFeXgKOwNsMiscnA5afw4NigOfS3oa97Zn6TWKmLFPNcY
N++F6Ll9yt8WRxV+DhIpiP3jGk8wcFE4TnFtbkTh3anGPF/qAj09ttLV7LF2P9Tl
RNI7nN3AtM/8MvFdBYo8QwE7zQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFD7qCjo2
fk3CXxUPA7Wc7rxMrZTHMB8GA1UdIwQYMBaAFJHDyWZ3bwEfxTUCHYX1rnv7raV+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc4Ni9CMEQ3MjNFRTM1
REExMUVBQUI4ODQ4NEFDNEY5QUUwMi9rY1BKWm5kdkFSX0ZOUUlkaGZXdWVfdXRw
WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tjUEpabmR2QVJfRk5RSWRoZld1ZV91dHBYNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUE3ODYvQjBENzIzRUUzNURBMTFFQUFCODg0ODRBQzRGOUFFMDIvNDM2RjFBRTJF
Q0Y0MTFFQTgyMkU4RDI4QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQHdMUAAwQFy1yAMA0GCSqGSIb3DQEBCwUAA4IBAQB9IEcioJEP9+Lh
VPbZC5Qc3l7ndPyxPwkYk/Ewq1JcfdFZPz5JI1l/aD/Ubropiw3XzGHk5tXpPWjw
d3GcfH9yrrenPF/TmREbcj/f36TpyrhbfRKHRGRMlV0/nhqFcIFa+Mk14TRW9KBE
ucCtOsUC4jZdEUGkOQmcWsz8T8gftv4tkecgFcA0b6n1/if3iibh8cepyt5SqwJp
zCRfVR2O23ksDhSAFneWy+gTpgKRCPtw8A3ntqxY7PJvMC8+JKuKpZXaFEcFcqq3
LszYjdZ6VtOV7iyTyaogPbxpqZTnLLFi8JbueX2FssrshyZWDxJqMOAFI4j9aLJB
OPBlIxku
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:00:50 2026 by rpki-client