
$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/DCA7C1ECB0F811E595E0F761C4F9AE02.roa
File: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (raw, json)
Hash identifier: lHpCFsLt7U2o1M0PHQpZCnb+hTvR9R+79jjvxvZZVc8=
Subject key identifier: 01:E6:B8:9D:E7:D5:9F:5D:47:D7:D0:F9:DD:FC:C7:F1:79:11:43:60
Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
Certificate serial: 35AC
Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/DCA7C1ECB0F811E595E0F761C4F9AE02.roa
Signing time: Sat 04 Apr 2026 15:10:17 +0000
ROA not before: Sat 04 Apr 2026 15:10:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6939
IP address blocks: 27.50.32.0/21 maxlen: 21
2400:7a00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl
rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:10:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13740 (0x35ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
Validity
Not Before: Apr 4 15:10:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69d129d8-2a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c4:55:ef:86:79:18:88:55:72:45:62:b9:6b:
6d:49:83:7a:47:82:f8:ec:74:81:c1:01:52:e4:d2:
97:9f:cc:50:5d:36:60:90:b1:03:61:84:72:9c:5a:
f5:ff:33:38:ec:73:df:40:6d:c3:1c:cd:87:a0:f8:
fb:82:32:86:3e:c7:9f:fc:74:7d:5c:ee:9d:dc:ab:
25:ee:64:f2:5c:22:be:eb:3d:c3:73:d8:83:e2:9a:
b1:ff:3b:61:b3:ae:43:45:63:cb:7c:85:46:6a:e8:
50:da:ba:16:e2:f6:bd:0a:b7:ee:c0:93:a2:3e:51:
a4:77:00:1c:36:2c:a4:5c:b2:4d:02:d0:58:11:70:
c5:28:22:62:c1:b9:51:ca:7b:d3:fb:6b:90:66:8b:
1f:6e:dd:2b:70:f4:50:bb:21:14:21:5a:0a:bf:fd:
b2:bd:ea:61:38:79:4c:82:32:95:1a:b4:76:9c:ed:
9f:a0:77:d8:2b:c9:fc:b3:1f:c8:58:74:38:51:7f:
93:d2:29:75:75:15:32:19:4c:36:c7:08:6a:c4:8a:
99:ee:af:12:46:19:60:71:eb:3d:dc:3e:5d:7b:be:
a6:39:fd:22:2c:39:e2:dc:c0:3c:88:15:34:1d:ab:
ec:ba:ce:c2:08:6b:99:bd:f1:00:d3:82:88:2f:97:
02:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E6:B8:9D:E7:D5:9F:5D:47:D7:D0:F9:DD:FC:C7:F1:79:11:43:60
X509v3 Authority Key Identifier:
keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/DCA7C1ECB0F811E595E0F761C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.50.32.0/21
IPv6:
2400:7a00::/32
Signature Algorithm: sha256WithRSAEncryption
58:27:8f:e5:c6:ab:c3:03:14:bc:88:eb:91:4d:38:70:87:4a:
d4:cf:f3:24:d2:e4:61:1d:a2:22:33:10:a9:ec:e0:38:38:6e:
85:bd:7e:4d:80:1f:1d:ff:66:87:37:86:ed:a8:f1:4b:23:25:
c3:e8:28:e0:9b:75:6a:32:91:06:fc:c1:15:21:93:d3:f9:ef:
36:a4:b2:2f:0b:d5:af:33:08:e5:fe:66:63:df:77:0b:ad:19:
26:9c:62:9a:7d:de:65:6b:ce:1b:e9:77:76:a2:90:0e:bc:c6:
31:c3:30:fc:30:7f:8a:73:50:c4:43:35:c9:f4:86:a9:98:be:
70:03:69:58:9e:78:59:f8:ce:1a:06:53:88:cc:36:fa:03:56:
ae:40:0e:c6:c0:08:6b:4b:4b:80:b4:2c:10:f7:de:86:ce:35:
f8:e7:22:47:5e:c9:7f:94:33:19:cc:6f:8a:11:2b:2a:ae:87:
b6:37:6e:cd:48:b0:36:1e:e5:88:f6:7c:bf:4b:af:cc:91:70:
43:95:3a:f6:4d:fb:19:7d:2b:ce:15:63:30:9f:b1:9e:bd:d7:
c0:52:86:31:4a:64:3c:9e:fd:f5:d6:9c:21:9d:5f:e2:f6:02:
30:09:d6:99:2c:df:9e:fb:94:dd:9e:91:a1:18:76:2f:aa:68:
b1:7b:bf:fc
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICNawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc0QzMxMTAvBgNVBAUTKEYzRkVGNDYyQTREOEUyRjdGQTA3MzVBNkFCNjQ1RUU1
NjM1REE4RjIwHhcNMjYwNDA0MTUxMDE3WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWQxMjlkOC0yYTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlcRV74Z5GIhVckViuWttSYN6R4L47HSBwQFS5NKXn8xQXTZgkLEDYYRynFr1
/zM47HPfQG3DHM2HoPj7gjKGPsef/HR9XO6d3Ksl7mTyXCK+6z3Dc9iD4pqx/zth
s65DRWPLfIVGauhQ2roW4va9CrfuwJOiPlGkdwAcNiykXLJNAtBYEXDFKCJiwblR
ynvT+2uQZosfbt0rcPRQuyEUIVoKv/2yvephOHlMgjKVGrR2nO2foHfYK8n8sx/I
WHQ4UX+T0il1dRUyGUw2xwhqxIqZ7q8SRhlgces93D5de76mOf0iLDni3MA8iBU0
Havsus7CCGuZvfEA04KIL5cC4QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFAHmuJ3n
1Z9dR9fQ+d38x/F5EUNgMB8GA1UdIwQYMBaAFPP+9GKk2OL3+gc1pqtkXuVjXajy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzRDMy82RjhCNTJBMDFE
NzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2ZjZCeldtcTJSZTVXTmRx
UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhfNzBZcVRZNHZmNkJ6V21xMlJlNVdOZHFQSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDc0QzMvNkY4QjUyQTAxRDcwMTFFMkJDMTFEQUI0MDhCMDJDRDIvRENBN0MxRUNC
MEY4MTFFNTk1RTBGNzYxQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQDGzIgMA0EAgACMAcDBQAkAHoAMA0GCSqGSIb3DQEBCwUAA4IBAQBY
J4/lxqvDAxS8iOuRTThwh0rUz/Mk0uRhHaIiMxCp7OA4OG6FvX5NgB8d/2aHN4bt
qPFLIyXD6Cjgm3VqMpEG/MEVIZPT+e82pLIvC9WvMwjl/mZj33cLrRkmnGKafd5l
a84b6Xd2opAOvMYxwzD8MH+Kc1DEQzXJ9IapmL5wA2lYnnhZ+M4aBlOIzDb6A1au
QA7GwAhrS0uAtCwQ996GzjX45yJHXsl/lDMZzG+KESsqroe2N27NSLA2HuWI9ny/
S6/MkXBDlTr2TfsZfSvOFWMwn7GevdfAUoYxSmQ8nv311pwhnV/i9gIwCdaZLN+e
+5TdnpGhGHYvqmixe7/8
-----END CERTIFICATE-----
Generated at Sun Apr 5 22:24:46 2026 by rpki-client