
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/F2DC6FDA590111EE965F2E48C4F9AE02.roa
File: F2DC6FDA590111EE965F2E48C4F9AE02.roa (raw, json)
Hash identifier: ycOq0IsrhA+YmUYWAhAsrdeYN4eebRnWEnTPZHVK1yQ=
Subject key identifier: 04:67:F4:C7:00:1B:2E:B0:5B:12:1F:D6:07:1B:31:89:9B:C2:0A:8F
Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial: 19DF
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/F2DC6FDA590111EE965F2E48C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:50:57 +0000
ROA not before: Fri 20 Feb 2026 17:15:05 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 9787
IP address blocks: 218.100.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6623 (0x19df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Validity
Not Before: Feb 20 17:15:05 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a48a91-2401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5a:a5:39:85:a4:9d:48:6e:24:0d:a2:94:b6:
6c:61:01:47:5d:0b:06:1b:fe:92:eb:eb:73:a8:6b:
43:99:d9:9e:87:7b:34:75:45:72:54:66:50:c6:b4:
30:e6:3f:24:41:42:9d:12:3d:0e:06:15:34:16:fd:
86:f5:4b:9c:c4:20:4a:fa:4a:2e:4e:08:a1:07:88:
8a:03:a5:32:3d:ab:e2:48:de:34:72:2a:9a:03:ad:
53:32:c7:45:6c:f7:1d:83:5e:51:33:dc:fc:76:c8:
41:ac:2a:53:92:84:07:99:57:7d:dc:89:df:39:2e:
00:5d:66:c7:bb:10:0e:d3:5c:48:93:58:d6:ca:cb:
9c:e0:15:e8:16:46:c4:0a:4d:02:4e:0f:6f:96:59:
a1:db:cf:9f:28:d8:c9:a6:cb:29:32:78:81:0c:f9:
f2:0f:f8:87:43:28:c9:e1:65:5a:f4:65:44:61:d5:
7a:cb:29:04:dc:1a:76:82:a0:d4:8c:22:b7:af:10:
c5:a4:aa:29:fc:a5:2f:f6:84:e3:7c:fd:cd:e5:24:
09:1b:5a:f9:b5:f4:eb:3f:10:92:95:c5:74:38:1b:
df:3c:fd:27:50:5b:5f:6a:aa:3f:3e:83:ee:47:db:
95:31:77:2c:90:8c:f2:57:c6:48:6c:3d:c1:96:88:
66:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:67:F4:C7:00:1B:2E:B0:5B:12:1F:D6:07:1B:31:89:9B:C2:0A:8F
X509v3 Authority Key Identifier:
keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/F2DC6FDA590111EE965F2E48C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
218.100.80.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:5f:b0:3d:41:94:c7:c0:98:e5:bc:c5:56:ff:46:64:b7:ba:
1b:27:65:71:be:09:4f:17:f3:7c:89:6c:31:89:c7:6a:e6:e2:
ac:71:0d:ea:be:21:b4:96:d2:75:19:93:b9:02:b1:0d:0a:15:
11:09:43:eb:7f:cd:a8:80:40:c0:1b:d7:f7:5c:a7:67:a5:47:
37:17:7a:af:ad:66:a6:9f:72:6e:ed:a8:db:a4:c0:d9:6b:40:
f6:dd:d2:b1:c0:2d:50:4d:00:ad:51:5f:9c:89:78:c2:b6:e4:
8c:44:d6:e0:1d:b5:78:46:d8:d7:9d:14:5d:f6:96:85:6a:4d:
b5:45:a1:58:15:31:ad:54:a1:8f:de:c2:d6:5e:ab:f1:c5:13:
db:f9:e5:89:d4:db:a4:a0:e8:5e:5e:7a:a2:67:a5:58:4f:aa:
fc:c7:f1:31:eb:15:c2:43:48:9f:90:12:53:bc:ef:6a:79:a7:
02:ef:5f:04:26:62:3c:91:38:f6:94:64:7f:bb:3c:9e:69:c0:
e3:30:a2:67:21:ba:d1:52:b6:28:fc:05:08:fc:53:5b:7f:de:
20:c8:03:7b:81:01:4b:5d:76:62:ad:81:95:5f:98:56:fc:41:
bb:d1:00:06:03:df:2e:47:4c:5a:b7:64:f0:ec:cb:f1:15:6a:
72:ba:ea:82
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICGd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFFM0QxMTAvBgNVBAUTKEM3MjY5QjEyNEM0MjBDNTVFMjlGQjUxRDNDMUIwRDlE
NDc2Q0JEMDAwHhcNMjYwMjIwMTcxNTA1WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGE5MS0yNDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq1qlOYWknUhuJA2ilLZsYQFHXQsGG/6S6+tzqGtDmdmeh3s0dUVyVGZQxrQw
5j8kQUKdEj0OBhU0Fv2G9UucxCBK+kouTgihB4iKA6UyPaviSN40ciqaA61TMsdF
bPcdg15RM9z8dshBrCpTkoQHmVd93InfOS4AXWbHuxAO01xIk1jWysuc4BXoFkbE
Ck0CTg9vllmh28+fKNjJpsspMniBDPnyD/iHQyjJ4WVa9GVEYdV6yykE3Bp2gqDU
jCK3rxDFpKop/KUv9oTjfP3N5SQJG1r5tfTrPxCSlcV0OBvfPP0nUFtfaqo/PoPu
R9uVMXcskIzyV8ZIbD3BlohmiwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFARn9McA
Gy6wWxIf1gcbMYmbwgqPMB8GA1UdIwQYMBaAFMcmmxJMQgxV4p+1HTwbDZ1HbL0A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC85N0I2RTBDRTc1
REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RGWGluN1VkUEJzTm5VZHN2
UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3h5YWJFa3hDREZYaW43VWRQQnNOblVkc3ZRQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUFFM0QvOTdCNkUwQ0U3NURFMTFFOEI3MDRBMjQ2QzRGOUFFMDIvRjJEQzZGREE1
OTAxMTFFRTk2NUYyRTQ4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQA2mRQMA0GCSqGSIb3DQEBCwUAA4IBAQArX7A9QZTHwJjlvMVW/0Zk
t7obJ2VxvglPF/N8iWwxicdq5uKscQ3qviG0ltJ1GZO5ArENChURCUPrf82ogEDA
G9f3XKdnpUc3F3qvrWamn3Ju7ajbpMDZa0D23dKxwC1QTQCtUV+ciXjCtuSMRNbg
HbV4RtjXnRRd9paFak21RaFYFTGtVKGP3sLWXqvxxRPb+eWJ1NukoOheXnqiZ6VY
T6r8x/Ex6xXCQ0ifkBJTvO9qeacC718EJmI8kTj2lGR/uzyeacDjMKJnIbrRUrYo
/AUI/FNbf94gyAN7gQFLXXZirYGVX5hW/EG70QAGA98uR0xat2Tw7MvxFWpyuuqC
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:26:06 2026 by rpki-client