
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/F9F81E3480FA11ED9B35954DC4F9AE02.roa
File: F9F81E3480FA11ED9B35954DC4F9AE02.roa (raw, json)
Hash identifier: SmCcrYNqeKG5FmNmRQX49vG44EHgCjMy7QNh7dAmm5E=
Subject key identifier: 5C:85:C3:82:8F:90:B3:51:68:B4:34:37:8A:B7:53:40:D4:0F:8F:E7
Certificate issuer: /CN=A91F81AD/serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC
Certificate serial: 02BF
Authority key identifier: A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/F9F81E3480FA11ED9B35954DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:28:41 +0000
ROA not before: Sat 27 Sep 2025 02:30:36 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 58611
IP address blocks: 203.28.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl
rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 703 (0x2bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F81AD, serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC
Validity
Not Before: Sep 27 02:30:36 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a44d19-c66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:f6:a7:01:b9:58:d1:99:ce:b6:2e:80:91:
a4:7e:5d:30:43:d0:e3:5d:64:f2:19:9b:0a:61:aa:
0b:0b:b2:db:5f:ba:28:31:4b:ba:a4:28:71:d2:87:
ef:15:fb:44:67:72:e4:a8:a6:fc:8c:45:7d:c0:9b:
54:00:a6:06:75:0c:1d:4d:fc:c7:f1:88:68:9b:59:
1a:89:91:64:61:5b:68:00:58:7c:c9:99:8a:90:40:
35:a4:fd:bd:4b:dc:fb:f6:c0:7f:f3:52:89:96:c5:
b3:b6:d6:64:58:88:ae:2f:4f:06:26:b0:51:be:27:
ea:5f:48:15:1e:42:41:ba:49:28:f4:65:df:fd:ea:
94:94:97:44:ef:50:f8:51:a9:34:2a:29:4e:93:78:
3c:06:11:28:90:05:97:be:f1:3b:f0:43:f7:19:40:
b1:c3:7c:8d:2a:ca:c7:ca:7d:7c:2d:07:b7:33:86:
ae:73:11:f0:66:94:56:d6:f3:34:57:59:06:80:ed:
8d:38:3a:8b:5e:c5:76:6b:ad:32:c0:e0:8f:31:d0:
7b:e9:b3:d5:3f:1d:08:68:7d:14:b0:8f:30:c4:d0:
3f:dc:a0:89:6e:34:b9:61:05:51:7f:12:8f:46:3e:
d1:90:cf:7a:48:a3:f6:02:bc:ac:3c:fd:c4:b9:4d:
33:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:85:C3:82:8F:90:B3:51:68:B4:34:37:8A:B7:53:40:D4:0F:8F:E7
X509v3 Authority Key Identifier:
keyid:A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/F9F81E3480FA11ED9B35954DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.28.79.0/24
Signature Algorithm: sha256WithRSAEncryption
11:37:c6:49:94:e1:84:b2:2d:0e:3b:ad:fd:89:75:14:dd:17:
ab:23:0a:92:d7:cd:84:1c:54:67:4b:80:e2:fe:fd:3a:53:db:
d5:88:01:ae:ed:f8:4f:df:f4:5b:2c:cc:e6:b0:4b:57:e0:b4:
37:07:21:58:c0:10:e9:e3:e4:9a:51:5e:bf:5b:ab:e3:57:27:
c8:1f:e1:cc:23:ae:5d:6d:2b:32:2c:c9:d2:8e:46:9a:5c:51:
56:d7:ce:87:d7:a3:9b:8e:20:3f:2b:fc:61:14:30:e3:1e:b2:
8d:8b:43:54:70:70:f5:59:6b:b1:15:91:e5:49:7f:ae:d7:28:
c3:e6:b8:d7:cc:3f:d5:ec:be:9d:9b:6c:bf:3c:76:1d:3f:6f:
26:b4:ba:5b:25:1e:4b:c8:41:3c:99:a3:24:d2:b5:94:2c:88:
1f:16:8b:0e:32:22:02:84:78:b9:e5:84:00:1c:1f:cb:c8:81:
ea:51:8e:da:d5:46:d3:58:7e:bc:3b:16:ae:98:c3:f1:7d:43:
c2:9a:0c:72:52:ac:70:4f:71:0a:26:96:00:91:f1:f8:f8:10:
0d:82:d3:02:0a:88:75:8b:f7:e1:cf:8d:8d:dd:95:ec:5f:20:
0f:6e:47:d9:68:07:17:4d:ff:f3:a7:85:12:81:6f:d1:af:3e:
5b:f5:50:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:51 2026 by rpki-client