
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/2917F838011D11F19AF518A8476F56BC.roa
File: 2917F838011D11F19AF518A8476F56BC.roa (raw, json)
Hash identifier: xQKQ+0AuXiAWWbs12R2fQm6csAgAyzHZKauTuhqFqCk=
Subject key identifier: 1E:AC:CB:4F:2F:4A:9E:59:EE:74:33:08:94:45:84:7B:D6:44:38:1B
Certificate issuer: /CN=A91FD59F/serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF
Certificate serial: 94
Authority key identifier: 2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/2917F838011D11F19AF518A8476F56BC.roa
Signing time: Sun 01 Mar 2026 08:28:06 +0000
ROA not before: Tue 03 Feb 2026 16:26:58 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 153771
IP address blocks: 163.227.44.0/23 maxlen: 23
163.227.45.0/24 maxlen: 24
2401:fd20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl
rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:44:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148 (0x94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD59F, serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF
Validity
Not Before: Feb 3 16:26:58 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3f895-b2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e3:45:64:12:a1:e3:00:41:57:0d:ac:e2:48:
e8:ec:05:de:61:1d:9b:38:9f:f9:f1:e7:a4:f9:24:
c7:3f:1c:9e:7f:88:fa:d1:c5:dd:a7:74:c5:31:e8:
bc:2b:80:09:39:75:8b:e5:ed:a3:64:32:16:5e:cf:
ba:04:5e:ee:60:3e:d9:e0:52:10:c3:19:d4:67:88:
a8:24:f8:b1:49:dd:e9:00:6f:1f:80:c4:3f:7f:a6:
51:f5:0e:15:59:ce:a9:12:a8:d2:58:1d:29:42:e9:
b5:57:36:41:8e:3c:cd:eb:79:dc:36:30:52:a1:94:
44:bc:86:a2:b3:60:79:38:ba:65:af:50:1e:b7:28:
17:9c:0d:f1:fd:3e:3b:9a:c0:61:a5:2d:1f:7b:ba:
c6:bc:fa:24:97:b5:0f:22:63:e7:d8:ce:88:8a:06:
e5:56:0b:ca:85:72:12:1a:72:c4:e7:7f:11:e9:f3:
cb:eb:8b:e2:b4:c3:e0:e5:f4:7a:24:e0:a7:0b:b2:
89:c5:95:bb:36:7a:0f:cd:29:75:e5:50:4a:ab:90:
72:5b:66:2c:03:59:84:d3:c4:5f:7d:b4:fe:c4:23:
2c:cd:58:f9:55:fd:41:e2:df:3b:f1:30:73:cd:56:
1f:79:62:40:6a:ca:63:0c:ff:1d:1a:fd:a0:51:34:
1c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AC:CB:4F:2F:4A:9E:59:EE:74:33:08:94:45:84:7B:D6:44:38:1B
X509v3 Authority Key Identifier:
keyid:2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/2917F838011D11F19AF518A8476F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
163.227.44.0/23
IPv6:
2401:fd20::/32
Signature Algorithm: sha256WithRSAEncryption
4b:2d:dd:cb:2a:c5:7e:26:44:d8:87:4f:5a:ba:5f:b2:f4:7d:
90:41:29:86:14:38:62:e5:fb:0a:f3:05:87:c2:1d:e3:75:7e:
fa:4b:1b:92:13:65:0f:3c:1f:bd:70:5c:e3:57:ea:9f:26:ac:
28:9c:34:c5:32:15:cb:79:f2:7e:94:39:f3:95:76:5b:63:06:
18:d3:af:08:f0:b4:7c:6a:06:6b:54:b7:f5:e0:ff:cb:ad:a4:
95:31:2c:56:ca:77:35:cd:43:4a:e5:fd:7d:2e:f3:f9:50:2b:
c8:48:40:52:83:58:65:e8:42:92:88:78:60:bd:91:fd:e0:84:
b0:69:34:cd:de:7d:43:de:de:a5:b7:d1:e3:63:ca:5f:00:b0:
fc:a0:7a:d9:d1:01:dd:0b:44:4c:f4:f9:41:73:45:20:7d:b1:
8b:77:c0:f6:92:4f:33:6f:0e:0f:44:3e:fa:60:06:6e:f7:e0:
cb:f0:ed:af:ce:94:ee:09:23:06:af:0b:a9:ad:bb:9d:48:76:
e2:93:01:3f:f2:db:d3:23:4f:a1:c3:ac:fc:15:a9:cb:b4:1f:
09:0d:a7:0f:9b:3e:dd:67:91:09:2d:5c:9a:d5:a9:05:bc:74:
8b:ac:39:7a:3b:00:31:87:79:2a:a0:dc:8e:1f:77:77:85:e7:
2a:51:09:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:23:38 2026 by rpki-client