
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/6549AD3EAC1011ED8592693FC4F9AE02.roa
File: 6549AD3EAC1011ED8592693FC4F9AE02.roa (raw, json)
Hash identifier: ZK4LGz9IH3YYiFptoI1UZ2KXhSWEWUkXq5JqqcwZNko=
Subject key identifier: 7D:E8:0A:31:10:43:AD:41:49:BF:80:78:48:7C:11:3B:CA:DE:89:E7
Certificate issuer: /CN=A91F8E9B/serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9
Certificate serial: 0262
Authority key identifier: 44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/6549AD3EAC1011ED8592693FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:57:31 +0000
ROA not before: Fri 05 Sep 2025 03:08:54 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 24324
IP address blocks: 202.160.48.0/21 maxlen: 21
202.160.56.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl
rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:23:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 610 (0x262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8E9B, serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9
Validity
Not Before: Sep 5 03:08:54 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a437ba-ebbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:44:e4:8d:e7:b5:cb:19:7a:ce:96:fe:fe:12:
e6:7b:b2:c7:d4:b6:99:68:da:83:0e:b6:4c:ce:e4:
96:6e:fe:43:ad:80:f2:b0:01:f2:e7:83:b8:1a:aa:
3b:b8:c3:30:f1:44:50:3e:7c:8d:57:4b:26:4c:e0:
24:6c:ed:d6:b8:60:ec:ba:dd:cb:a1:e4:25:2f:a6:
9e:97:a4:a2:79:69:6e:54:66:4e:74:2b:8b:ef:0a:
33:8e:7a:af:5d:da:da:a1:5c:46:98:b2:e7:33:07:
eb:0b:37:e1:37:d0:62:4d:b6:f0:b2:1c:9f:fb:bb:
ab:a8:68:48:56:16:0f:7a:0c:be:1e:bf:8e:43:fc:
97:15:5a:4d:b7:c9:8b:94:c2:fb:82:25:a8:0a:f3:
ab:8b:a3:ff:02:ee:01:7c:03:19:95:98:1f:ec:06:
ce:7c:24:35:27:a6:b5:24:ee:9f:d6:fd:d6:a8:91:
13:c7:4e:61:9f:98:74:7d:6e:c1:4b:2a:00:bb:9f:
d4:69:a7:9c:dd:94:0b:83:ef:cb:92:4a:27:63:46:
72:57:c9:c1:b7:b5:c8:e4:2c:de:18:7a:13:0c:da:
37:60:b0:e7:b6:00:5f:28:a7:0d:2c:57:06:90:7a:
c3:31:9d:b6:ec:fc:2b:9c:97:ea:ea:ed:2e:af:aa:
34:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E8:0A:31:10:43:AD:41:49:BF:80:78:48:7C:11:3B:CA:DE:89:E7
X509v3 Authority Key Identifier:
keyid:44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/6549AD3EAC1011ED8592693FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.160.48.0/20
Signature Algorithm: sha256WithRSAEncryption
14:dc:5a:c6:5f:2e:cb:01:42:d5:e8:11:55:2a:9d:cb:56:42:
67:72:8c:3c:fd:95:e2:aa:9b:72:40:70:1e:82:3c:7b:32:20:
b0:01:4b:c0:c1:9e:20:92:f7:a5:b3:6b:c0:98:3f:cd:8a:92:
a2:f4:f9:38:c5:30:ec:0a:5f:c0:8c:92:75:d2:fa:0b:9d:51:
d8:82:db:09:50:a4:30:cd:c1:25:cc:e7:35:f2:cb:dd:1d:43:
89:d5:37:d2:fa:c9:11:93:b7:7c:16:33:49:73:08:2f:8e:0b:
5f:3d:00:60:63:ab:df:e8:08:e7:4a:ff:38:5f:75:37:48:7d:
80:3b:f3:a4:89:50:3e:5a:f3:c3:7f:ed:a6:62:ce:24:18:2d:
e8:42:a3:9e:2b:98:f7:c1:6e:3b:1f:dc:c7:66:7c:08:9b:23:
9f:a9:20:08:11:09:05:c9:8a:6c:51:e4:fa:20:fd:96:3c:2d:
53:3e:73:fa:7a:4b:62:81:f4:58:c8:b2:98:1a:eb:23:0d:7a:
56:5d:8c:b3:de:f2:2b:0a:26:13:0f:c2:d4:cb:b7:36:2f:36:
9f:fa:0d:f2:9b:43:64:27:fe:1b:e9:4f:13:e3:52:99:c4:7e:
57:d8:63:27:2c:5c:6a:af:94:92:31:02:a1:94:3f:e2:92:6e:
d3:83:ac:a3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjhFOUIxMTAvBgNVBAUTKDQ0Njc5MjQzOTI1ODE4MkE3QTFFNERBNEIyQzA2RkFE
MkFBRUU0QjkwHhcNMjUwOTA1MDMwODU0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzdiYS1lYmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6UTkjee1yxl6zpb+/hLme7LH1LaZaNqDDrZMzuSWbv5DrYDysAHy54O4Gqo7
uMMw8URQPnyNV0smTOAkbO3WuGDsut3LoeQlL6ael6SieWluVGZOdCuL7wozjnqv
XdraoVxGmLLnMwfrCzfhN9BiTbbwshyf+7urqGhIVhYPegy+Hr+OQ/yXFVpNt8mL
lML7giWoCvOri6P/Au4BfAMZlZgf7AbOfCQ1J6a1JO6f1v3WqJETx05hn5h0fW7B
SyoAu5/Uaaec3ZQLg+/LkkonY0ZyV8nBt7XI5CzeGHoTDNo3YLDntgBfKKcNLFcG
kHrDMZ227PwrnJfq6u0ur6o0qwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFH3oCjEQ
Q61BSb+AeEh8ETvK3onnMB8GA1UdIwQYMBaAFERnkkOSWBgqeh5NpLLAb60qruS5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEU5Qi82OUVCNDJDMDk2
MEUxMUVEOUE0Q0VBNjVDNEY5QUUwMi9SR2VTUTVKWUdDcDZIazJrc3NCdnJTcXU1
TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JHZVNRNUpZR0NwNkhrMmtzc0J2clNxdTVMay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjhFOUIvNjlFQjQyQzA5NjBFMTFFRDlBNENFQTY1QzRGOUFFMDIvNjU0OUFEM0VB
QzEwMTFFRDg1OTI2OTNGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQEyqAwMA0GCSqGSIb3DQEBCwUAA4IBAQAU3FrGXy7LAULV6BFVKp3L
VkJncow8/ZXiqptyQHAegjx7MiCwAUvAwZ4gkvels2vAmD/NipKi9Pk4xTDsCl/A
jJJ10voLnVHYgtsJUKQwzcElzOc18svdHUOJ1TfS+skRk7d8FjNJcwgvjgtfPQBg
Y6vf6AjnSv84X3U3SH2AO/OkiVA+WvPDf+2mYs4kGC3oQqOeK5j3wW47H9zHZnwI
myOfqSAIEQkFyYpsUeT6IP2WPC1TPnP6ektigfRYyLKYGusjDXpWXYyz3vIrCiYT
D8LUy7c2Lzaf+g3ym0NkJ/4b6U8T41KZxH5X2GMnLFxqr5SSMQKhlD/ikm7Tg6yj
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:41 2026 by rpki-client