
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/31DEDB2CDAAE11E9A0D2D77BC4F9AE02.roa
File: 31DEDB2CDAAE11E9A0D2D77BC4F9AE02.roa (raw, json)
Hash identifier: hoLS1gV18m+O3GqsO6stfQ7iSMrUj2IEPQoamxZ9gzQ=
Subject key identifier: A9:16:48:EC:6B:C1:35:C2:9C:9F:29:9A:6D:71:89:69:F4:35:69:FF
Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial: 19D8
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/31DEDB2CDAAE11E9A0D2D77BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:50:51 +0000
ROA not before: Fri 20 Feb 2026 17:14:58 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 45881
IP address blocks: 202.80.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6616 (0x19d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Validity
Not Before: Feb 20 17:14:58 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a48a8b-594d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:eb:b7:6e:82:a1:1e:d7:39:00:fc:94:98:1b:
a8:30:c2:0b:2e:44:19:9c:96:ea:e8:68:ce:59:36:
a8:13:29:41:9f:0e:fa:69:9e:74:50:c4:e3:16:53:
bd:65:9e:a5:84:e0:10:2e:47:0f:9f:6c:0f:e5:79:
48:9f:ac:22:af:90:7a:f3:0b:e9:c6:f4:72:fb:ac:
a2:25:42:fd:58:50:e1:5f:ee:0d:2a:6f:c0:70:c0:
f2:8b:91:8c:7d:c3:eb:66:c6:61:ac:28:06:42:a8:
30:a3:c1:09:81:87:f8:fc:78:5f:c8:e0:57:3f:04:
dc:ad:6c:00:af:c9:df:47:9a:2a:a3:e0:f6:91:a4:
4a:fd:7f:54:f7:e3:c9:b9:53:cc:f1:0f:65:43:8e:
4b:38:33:62:81:22:a2:a9:cb:84:5c:8c:35:40:21:
20:05:8c:90:cc:ff:34:8f:13:11:63:6f:cb:61:0c:
42:f7:3a:cb:7d:2f:65:cf:b5:c9:3e:59:e8:b2:ec:
04:9b:93:9b:6b:e3:07:c1:46:00:78:66:47:30:90:
7c:99:45:b9:7d:46:a2:99:0e:0c:8e:76:8c:de:9f:
c1:2a:d9:c7:c7:d0:75:2f:29:24:9f:a3:27:d1:7c:
c5:2b:16:68:fe:13:0a:9d:fd:73:99:7b:7a:d3:6a:
2c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:16:48:EC:6B:C1:35:C2:9C:9F:29:9A:6D:71:89:69:F4:35:69:FF
X509v3 Authority Key Identifier:
keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/31DEDB2CDAAE11E9A0D2D77BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.80.186.0/24
Signature Algorithm: sha256WithRSAEncryption
76:a4:cb:65:c4:ad:97:a2:9e:d9:e3:88:4c:6f:28:c8:b2:26:
14:00:78:85:e9:93:2d:7c:d5:41:24:7c:f4:96:c6:d7:fd:4e:
a4:24:6a:cc:a3:b9:2b:bb:79:45:f9:64:85:37:5b:f2:da:c5:
ac:85:22:8e:35:d0:a0:8a:1b:0a:4a:fb:b0:3a:60:6c:a7:4f:
25:ea:2a:9b:b9:34:dd:6b:41:99:83:6a:5b:5b:d2:c3:de:37:
fc:1e:40:4b:11:f0:b3:c8:48:41:46:f9:0b:f7:bc:3c:45:69:
71:16:a9:8d:d6:3e:0a:24:d3:10:07:0b:f8:25:19:0a:44:63:
f5:df:21:9e:bc:b2:45:98:d9:f7:21:f7:f4:62:06:f7:aa:71:
08:a3:b5:02:e2:d1:b6:48:55:6c:97:8f:78:34:94:8b:7e:9b:
f3:d7:b9:3a:43:c6:23:92:ba:f5:67:29:35:89:50:3b:34:a2:
34:a5:ba:02:00:a5:78:22:24:78:8e:ca:06:09:b0:f6:7e:21:
fb:65:6c:bf:be:94:40:cc:73:69:39:70:9d:93:7d:60:7f:0e:
56:69:80:12:01:04:82:30:bc:b8:03:32:6c:79:c5:01:69:11:
a6:3f:6d:3d:1e:6e:20:21:69:85:76:90:00:86:40:bf:c6:79:
d0:89:7f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:09:36 2026 by rpki-client