
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/3F981D2E9BC611F1BF28F2DA5711F970.roa
File: 3F981D2E9BC611F1BF28F2DA5711F970.roa (raw, json)
Hash identifier: sKVxProcEOHvrgAV+/slNwjk7EfvxI0MK4OVX+Z8sEw=
Subject key identifier: 99:BD:8D:24:CF:48:68:18:3D:2D:EF:90:A2:1E:26:25:F3:BE:39:0D
Certificate issuer: /CN=A91448CB/serialNumber=B19C324C4679D2E456834389AFFB7504EDF0971E
Certificate serial: 02
Authority key identifier: B1:9C:32:4C:46:79:D2:E4:56:83:43:89:AF:FB:75:04:ED:F0:97:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZwyTEZ50uRWg0OJr_t1BO3wlx4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/3F981D2E9BC611F1BF28F2DA5711F970.roa
Signing time: Wed 19 Aug 2026 12:05:20 +0000
ROA not before: Wed 19 Aug 2026 12:05:20 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 14742
IP address blocks: 202.9.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/sZwyTEZ50uRWg0OJr_t1BO3wlx4.crl
rsync://rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/sZwyTEZ50uRWg0OJr_t1BO3wlx4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZwyTEZ50uRWg0OJr_t1BO3wlx4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 09:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91448CB, serialNumber=B19C324C4679D2E456834389AFFB7504EDF0971E
Validity
Not Before: Aug 19 12:05:20 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a859c00-90c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:64:cd:80:9b:a1:04:fc:a4:ed:52:b9:7a:ef:
8d:b7:53:68:3e:86:00:5a:75:7c:3e:02:7f:35:97:
ca:5e:ca:97:8b:8f:4d:00:45:a6:8e:a3:6c:d8:a1:
cb:c0:a7:60:85:0f:0f:78:67:6c:81:06:a5:c5:fd:
67:4f:81:b0:ed:cb:ea:bc:08:bf:37:fb:95:4b:cd:
e0:e6:90:3b:7f:3d:07:ae:fd:bc:62:43:35:21:4b:
f9:7c:7b:c9:fd:f9:1e:4f:a5:cf:ce:e7:5e:db:59:
7e:7f:90:b6:54:59:9a:35:03:d8:2a:a1:3b:0e:41:
87:6a:9b:4d:c8:ac:fe:55:b3:64:61:4a:28:63:fb:
cb:9c:4a:09:27:ad:c8:e8:43:11:fd:e5:a4:26:52:
a8:8e:3c:ca:f2:76:b8:76:49:51:79:98:da:d4:4e:
4b:dd:a2:2f:6c:09:1a:e8:91:0b:51:8d:b2:c5:71:
c9:d5:c3:aa:6d:fc:f5:96:67:d3:3e:fa:1c:cf:8f:
aa:fe:9c:c4:86:d9:ab:41:0a:44:56:d4:a5:4d:b1:
17:c9:7d:44:3d:fc:3e:3b:cc:d8:20:f5:26:f6:d4:
4f:06:e4:95:ba:48:4a:aa:44:29:f2:ab:45:fc:d5:
2a:27:c6:37:e0:37:35:19:7d:0f:3f:31:6e:ff:83:
5a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BD:8D:24:CF:48:68:18:3D:2D:EF:90:A2:1E:26:25:F3:BE:39:0D
X509v3 Authority Key Identifier:
keyid:B1:9C:32:4C:46:79:D2:E4:56:83:43:89:AF:FB:75:04:ED:F0:97:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/sZwyTEZ50uRWg0OJr_t1BO3wlx4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZwyTEZ50uRWg0OJr_t1BO3wlx4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/3F981D2E9BC611F1BF28F2DA5711F970.roa
sbgp-ipAddrBlock: critical
IPv4:
202.9.50.0/24
Signature Algorithm: sha256WithRSAEncryption
76:fc:83:b8:6c:08:09:6a:72:a8:ce:1e:d6:3f:ea:a8:80:4d:
1e:b6:c4:2c:5b:82:cc:41:8d:c1:bd:94:73:82:e7:58:7e:41:
db:17:6c:20:08:1d:64:03:35:82:7e:c4:09:6d:12:6a:2a:c1:
a2:66:bd:b2:b5:05:20:d9:0f:d2:c3:46:11:c6:1c:c9:89:57:
dc:2c:d5:1c:c4:0d:87:01:9f:52:d9:52:c5:6d:db:35:7a:06:
e3:cb:d7:fa:b5:1d:39:9d:68:80:fb:10:1d:c5:2f:9d:ae:79:
8f:89:a1:fc:09:6b:4c:1b:64:5d:cc:62:56:c9:8e:fd:5e:06:
33:16:bb:b7:76:10:00:b0:52:76:c8:59:21:a1:38:e1:d3:57:
6a:12:36:4f:7f:02:98:01:3a:67:16:65:7a:a1:8d:2d:96:18:
d3:19:3e:3d:bf:4f:06:6c:d2:46:e5:5d:90:fd:1c:7b:4c:d1:
f3:d7:54:a5:4f:e4:a8:19:b4:b9:ee:3d:19:d4:cf:82:96:67:
af:7c:63:1c:0d:9f:91:3e:4b:13:ad:d5:b5:48:20:b5:78:5a:
a8:2b:b9:46:4a:7e:96:ba:ac:90:09:60:07:87:ba:0c:00:b9:
76:46:41:e3:6c:e6:14:18:db:7b:fc:dd:d5:ce:cc:88:43:a4:
1f:ea:76:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:46:16 2026 by rpki-client