
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9BB3/79379276E24411F0B953D896716F56BC/DB206508E24411F0BBC3E4F5716F56BC.roa
File: DB206508E24411F0BBC3E4F5716F56BC.roa (raw, json)
Hash identifier: wu90pAYchiWG+3QsrJ+YtF29NZQI1h2PzPmNs4nG9hY=
Subject key identifier: B0:9B:F6:1E:06:7F:C0:3F:B7:2E:C6:41:A0:7F:26:72:3A:9C:38:C7
Certificate issuer: /CN=A91F9BB3/serialNumber=48A610BF1E8101A8424F9F24182B967E7A03A1EE
Certificate serial: 31
Authority key identifier: 48:A6:10:BF:1E:81:01:A8:42:4F:9F:24:18:2B:96:7E:7A:03:A1:EE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SKYQvx6BAahCT58kGCuWfnoDoe4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9BB3/79379276E24411F0B953D896716F56BC/DB206508E24411F0BBC3E4F5716F56BC.roa
Signing time: Mon 02 Mar 2026 15:15:36 +0000
ROA not before: Fri 26 Dec 2025 10:23:01 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 154424
IP address blocks: 144.79.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9BB3/79379276E24411F0B953D896716F56BC/SKYQvx6BAahCT58kGCuWfnoDoe4.crl
rsync://rpki.apnic.net/member_repository/A91F9BB3/79379276E24411F0B953D896716F56BC/SKYQvx6BAahCT58kGCuWfnoDoe4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SKYQvx6BAahCT58kGCuWfnoDoe4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:15:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9BB3, serialNumber=48A610BF1E8101A8424F9F24182B967E7A03A1EE
Validity
Not Before: Dec 26 10:23:01 2025 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a5a998-489d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:26:a1:36:04:ad:1f:81:24:c2:4b:19:6e:98:
68:c5:59:f8:3f:ae:b8:72:42:31:57:06:00:78:31:
c1:0a:46:6a:cf:08:03:ae:18:5e:da:2b:43:fa:cc:
39:6e:3b:21:bd:bb:46:4a:c4:dd:53:68:6b:13:ba:
32:1b:12:0d:e4:41:b6:1e:b8:5a:53:c9:98:35:c7:
52:da:d9:05:13:7c:e3:27:fd:02:67:a8:71:d0:67:
6c:30:ae:28:19:9c:67:51:b2:69:1b:3e:2c:c1:fb:
f6:b8:97:39:3a:91:83:85:c0:8f:92:eb:a6:41:29:
2c:61:7a:a7:30:7d:2c:d3:9c:5d:ab:5d:a5:6e:71:
26:5e:51:39:9e:e3:1e:12:d1:1a:d2:36:3e:c5:ac:
7c:d6:ad:f4:4e:da:04:df:bb:6f:b0:0c:2c:3e:29:
72:b0:8f:9e:f8:ee:36:10:41:c4:dd:79:a0:b3:5d:
fb:2f:9d:4d:24:61:11:54:cc:80:12:5c:e3:7e:9b:
f9:ad:ab:ff:a9:19:c3:70:0b:c1:db:16:da:2e:70:
bf:df:ae:13:40:0b:b0:15:aa:bf:b6:4a:2f:38:8b:
b0:2f:06:79:9a:4f:21:7e:b2:da:b3:d8:14:1a:62:
93:9b:b5:da:38:b6:8a:2e:34:87:1e:51:4a:d4:9a:
22:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9B:F6:1E:06:7F:C0:3F:B7:2E:C6:41:A0:7F:26:72:3A:9C:38:C7
X509v3 Authority Key Identifier:
keyid:48:A6:10:BF:1E:81:01:A8:42:4F:9F:24:18:2B:96:7E:7A:03:A1:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9BB3/79379276E24411F0B953D896716F56BC/SKYQvx6BAahCT58kGCuWfnoDoe4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SKYQvx6BAahCT58kGCuWfnoDoe4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9BB3/79379276E24411F0B953D896716F56BC/DB206508E24411F0BBC3E4F5716F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
144.79.116.0/23
Signature Algorithm: sha256WithRSAEncryption
27:96:8b:77:23:50:67:91:68:6c:f4:23:3b:b8:bc:65:43:d9:
da:23:c9:2c:be:95:bd:89:ac:01:da:80:c9:31:16:1f:54:98:
58:48:f7:df:21:a0:82:7e:bf:08:61:10:3d:8d:08:ee:a1:7d:
a4:88:79:85:61:91:9a:0c:7f:83:af:5d:fa:de:c0:83:df:08:
8c:dd:37:d6:56:d0:a9:38:21:52:09:75:6c:95:32:37:95:69:
a8:17:67:62:22:35:14:a2:7f:47:d3:74:24:16:d9:1a:0f:31:
9c:a8:0c:4a:cb:07:ab:c0:c8:9c:1d:1b:91:06:61:32:4d:69:
8c:0e:bd:67:80:01:51:70:b5:26:a8:42:93:5a:fc:d0:b7:19:
ef:b5:8b:3f:60:c3:cc:84:59:eb:f9:25:40:f3:60:88:37:4b:
a0:05:05:e8:98:d5:96:53:c5:76:a7:df:d5:7e:b8:02:2d:3a:
57:09:30:68:8c:d4:72:cc:58:55:46:93:34:1b:75:1d:d6:34:
5f:b7:1d:86:49:62:ad:44:ec:bb:e5:b4:2b:a2:58:76:0c:72:
e9:d0:7d:99:8c:12:32:d4:e5:bb:b7:b4:70:ae:5d:aa:84:6c:
40:57:44:0f:e1:74:1c:55:25:5c:43:a0:c8:e6:47:b0:2c:6d:
99:4b:e5:4e
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
OUJCMzExMC8GA1UEBRMoNDhBNjEwQkYxRTgxMDFBODQyNEY5RjI0MTgyQjk2N0U3
QTAzQTFFRTAeFw0yNTEyMjYxMDIzMDFaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTVhOTk4LTQ4OWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCMJqE2BK0fgSTCSxlumGjFWfg/rrhyQjFXBgB4McEKRmrPCAOuGF7aK0P6zDlu
OyG9u0ZKxN1TaGsTujIbEg3kQbYeuFpTyZg1x1La2QUTfOMn/QJnqHHQZ2wwrigZ
nGdRsmkbPizB+/a4lzk6kYOFwI+S66ZBKSxheqcwfSzTnF2rXaVucSZeUTme4x4S
0RrSNj7FrHzWrfRO2gTfu2+wDCw+KXKwj5747jYQQcTdeaCzXfsvnU0kYRFUzIAS
XON+m/mtq/+pGcNwC8HbFtoucL/frhNAC7AVqr+2Si84i7AvBnmaTyF+stqz2BQa
YpObtdo4toouNIceUUrUmiL1AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUsJv2HgZ/
wD+3LsZBoH8mcjqcOMcwHwYDVR0jBBgwFoAUSKYQvx6BAahCT58kGCuWfnoDoe4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5QkIzLzc5Mzc5Mjc2RTI0
NDExRjBCOTUzRDg5NjcxNkY1NkJDL1NLWVF2eDZCQWFoQ1Q1OGtHQ3VXZm5vRG9l
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvU0tZUXZ4NkJBYWhDVDU4a0dDdVdmbm9Eb2U0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OUJCMy83OTM3OTI3NkUyNDQxMUYwQjk1M0Q4OTY3MTZGNTZCQy9EQjIwNjUwOEUy
NDQxMUYwQkJDM0U0RjU3MTZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGQT3QwDQYJKoZIhvcNAQELBQADggEBACeWi3cjUGeRaGz0Izu4vGVD
2dojySy+lb2JrAHagMkxFh9UmFhI998hoIJ+vwhhED2NCO6hfaSIeYVhkZoMf4Ov
XfrewIPfCIzdN9ZW0Kk4IVIJdWyVMjeVaagXZ2IiNRSif0fTdCQW2RoPMZyoDErL
B6vAyJwdG5EGYTJNaYwOvWeAAVFwtSaoQpNa/NC3Ge+1iz9gw8yEWev5JUDzYIg3
S6AFBeiY1ZZTxXan39V+uAItOlcJMGiM1HLMWFVGkzQbdR3WNF+3HYZJYq1E7Lvl
tCuiWHYMcunQfZmMEjLU5bu3tHCuXaqEbEBXRA/hdBxVJVxDoMjmR7AsbZlL5U4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:46:09 2026 by rpki-client