
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/CE7DA91A8C0911EAAFF6CD27C4F9AE02.roa
File: CE7DA91A8C0911EAAFF6CD27C4F9AE02.roa (raw, json)
Hash identifier: tAcZwWZwhXU4QpEPlt2t2XMLszlvvkM98qyIqRR6Ejk=
Subject key identifier: 95:E4:4C:D4:46:A1:67:73:01:B9:A7:4F:69:E9:52:AA:5B:3F:5B:EA
Certificate issuer: /CN=A91A8666/serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592
Certificate serial: 0A62
Authority key identifier: 32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/CE7DA91A8C0911EAAFF6CD27C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:29:57 +0000
ROA not before: Fri 10 Oct 2025 21:20:33 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 14618
IP address blocks: 203.210.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl
rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 19:19:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2658 (0xa62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8666, serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592
Validity
Not Before: Oct 10 21:20:33 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a590d5-585a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:19:7d:42:63:7a:ae:68:56:a8:7e:23:b0:6e:
74:82:47:eb:da:00:b6:a1:94:5b:e8:0a:90:6c:18:
33:a3:a3:92:b9:49:20:cf:18:c7:87:d4:b2:d3:69:
e3:c6:30:c4:ca:5b:ad:77:89:1e:a0:e9:ae:f1:ef:
6a:81:a6:3c:3d:fe:09:42:6c:e1:b0:92:a2:e5:65:
c9:c3:cc:46:dd:c0:ed:cd:4c:cd:e1:af:d7:28:c4:
79:b7:9b:15:07:67:2d:f3:33:88:51:78:b5:cf:36:
ce:48:fd:c6:8f:ee:56:b0:08:c1:60:e7:54:ae:1e:
a4:c6:38:9b:0f:6f:d0:08:5c:f0:d2:88:9a:35:16:
14:35:4e:c4:60:d6:89:ae:5a:47:b2:e9:29:90:99:
4e:45:4a:9e:f0:93:52:7c:58:0b:49:9e:f4:a1:39:
76:e7:0e:4f:8b:d9:3d:24:d8:ef:41:69:9a:5d:19:
22:d2:67:83:75:4c:ff:a1:6a:40:48:a8:9a:36:8b:
d9:f6:31:b7:17:c9:6c:f4:e3:23:3b:09:de:0a:2e:
18:4e:cc:b3:ff:3a:b1:b9:a3:24:2e:87:69:b8:0a:
12:74:51:5e:1d:34:a8:e0:48:5f:64:f9:3e:c0:7d:
79:32:95:7c:cc:51:60:9e:c9:ee:46:8b:a5:02:5a:
94:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E4:4C:D4:46:A1:67:73:01:B9:A7:4F:69:E9:52:AA:5B:3F:5B:EA
X509v3 Authority Key Identifier:
keyid:32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/CE7DA91A8C0911EAAFF6CD27C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.210.75.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:c0:86:ff:6e:69:60:30:0f:d5:8a:1c:15:e0:6b:23:9c:5e:
e7:f0:88:32:74:17:ab:ca:03:af:cd:6d:8e:e1:9d:78:6d:21:
2c:ef:37:9a:c9:7f:65:e8:80:13:8f:c9:33:8f:b5:17:4f:51:
d6:0e:5a:2f:27:57:4f:96:8b:c2:e6:77:7a:68:df:cc:86:cb:
c9:cb:f5:32:0c:dd:3b:95:1c:87:e3:0c:41:86:ac:63:ba:44:
fc:0c:5b:45:c9:d9:b2:57:ff:97:ba:57:32:74:44:da:ef:4f:
63:66:41:a0:10:ef:1f:eb:1f:0c:34:e0:58:03:88:05:7d:26:
c2:6a:d4:e2:a7:6b:ec:5f:b6:67:c7:02:94:80:fd:94:62:b8:
46:6a:be:ca:59:a7:79:a6:ad:5c:ec:67:28:eb:0e:01:3d:2c:
1f:eb:5e:7d:93:5a:6b:4e:20:46:e6:07:51:f6:22:9c:cf:6c:
0e:1a:78:09:16:c2:8e:04:d8:f4:25:60:3c:1b:fc:9a:5a:16:
9e:e1:86:46:94:e5:91:45:4c:81:ae:ef:b6:82:05:c4:aa:e6:
32:80:07:bc:d1:7d:e5:be:74:9e:7e:6e:90:ae:cc:30:b3:14:
3a:ca:81:dc:a0:f2:74:e6:f3:e9:b5:5c:62:41:1f:03:f9:38:
22:82:d9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 05:08:56 2026 by rpki-client