
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/796CD35A5B5511EE8E4D2A39C4F9AE02.roa
File: 796CD35A5B5511EE8E4D2A39C4F9AE02.roa (raw, json)
Hash identifier: KT2tiHsvRY9LOJYw0HcT//nfw16eth/WSx/o0UIX/Uw=
Subject key identifier: 9C:64:BD:A7:84:F7:0E:B6:A9:8A:78:38:EB:75:9A:22:A0:50:36:D0
Certificate issuer: /CN=A91AD92A/serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F
Certificate serial: 0204
Authority key identifier: 37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/796CD35A5B5511EE8E4D2A39C4F9AE02.roa
Signing time: Wed 17 Jun 2026 03:33:16 +0000
ROA not before: Wed 17 Jun 2026 03:33:16 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 8075
IP address blocks: 203.23.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl
rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Jul 2026 03:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 516 (0x204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD92A, serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F
Validity
Not Before: Jun 17 03:33:16 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a32157b-afd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:60:68:35:3e:8c:6a:85:50:4b:e3:ea:da:3f:
3b:b1:3a:10:e7:88:f7:98:4e:7e:91:2b:48:e6:e1:
22:e2:ef:7c:ca:57:54:a6:2b:5e:8d:a9:55:96:b8:
d7:de:c0:9e:43:86:9d:2e:09:d6:b5:c1:45:44:c8:
31:fe:fb:dc:73:26:25:f2:69:43:b2:12:24:98:7c:
dd:6b:b6:7a:40:42:a5:41:c2:5f:84:b6:76:db:8f:
87:d9:bf:a0:3b:c5:ce:d7:a0:01:19:09:37:c6:9c:
16:dd:54:d0:c4:cd:e6:76:a0:8a:31:c6:8c:60:a7:
98:80:23:e1:65:14:70:40:e4:66:37:1e:ec:3b:70:
87:74:e4:41:20:50:d6:a7:8d:cd:35:08:db:56:e9:
ba:d5:6a:11:3c:69:0c:7c:a0:9d:7e:78:3c:fb:05:
46:17:68:b5:8a:9e:ea:1f:02:c8:b8:09:27:3c:69:
43:07:f9:a3:25:68:59:bd:13:e5:cc:1d:99:e7:70:
1b:37:44:7e:99:6a:13:50:1e:35:d3:0d:dd:c3:b3:
fd:08:c1:f5:60:b5:88:11:be:01:9c:ba:34:2f:72:
8e:12:23:30:64:f4:be:e8:3d:e6:f6:e1:b2:e5:cb:
b8:7f:61:62:48:f7:70:8f:ee:93:20:99:2f:52:78:
a7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:64:BD:A7:84:F7:0E:B6:A9:8A:78:38:EB:75:9A:22:A0:50:36:D0
X509v3 Authority Key Identifier:
keyid:37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/796CD35A5B5511EE8E4D2A39C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.23.232.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:b9:83:6f:ad:a7:0c:49:54:16:f2:85:57:72:64:3f:41:c6:
4f:df:2d:2f:7a:2c:f9:b1:c3:3f:0e:16:ae:1b:ed:99:ad:fa:
74:86:20:78:3e:3b:19:d6:a1:16:9f:ac:07:c2:72:3a:90:f1:
19:20:73:ea:71:ea:c8:17:87:0b:fc:35:1b:3d:0c:99:af:f9:
76:b9:5c:78:b0:ea:04:8d:3c:01:d6:c6:6f:1c:4d:a9:c1:a8:
bd:66:94:b5:94:3a:60:6a:6c:6d:a1:00:c4:ff:f7:59:89:27:
c7:f4:31:7a:5b:4a:ae:d3:78:e8:73:c6:e6:ee:96:da:fc:cc:
41:37:dd:0c:17:91:7b:e6:ed:98:05:76:90:5e:9e:9c:9a:bc:
48:ce:a5:b9:8d:70:1a:39:d4:8e:21:74:80:32:c4:36:01:a2:
29:ab:5f:7e:8f:f8:1a:bc:f7:c7:a8:0f:cd:97:ec:9c:bb:c6:
1e:22:9f:c7:87:3b:a6:bb:54:65:ec:7b:82:a3:f3:50:3d:66:
7e:b8:95:d9:15:70:13:b3:d6:29:f0:7f:22:17:60:62:93:df:
fb:0d:af:f8:97:46:1a:85:b1:a7:b5:78:24:e6:50:15:97:12:
d2:7d:be:c2:68:78:70:1f:5d:03:08:84:48:e5:c5:3d:f4:ca:
8f:0e:66:76
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUQ5MkExMTAvBgNVBAUTKDM3OUI5MUM5MzBFMEEyQUY4QjgyMkFEOUE5NTlCQURG
NURERDYwOUYwHhcNMjYwNjE3MDMzMzE2WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTMyMTU3Yi1hZmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsmBoNT6MaoVQS+Pq2j87sToQ54j3mE5+kStI5uEi4u98yldUpitejalVlrjX
3sCeQ4adLgnWtcFFRMgx/vvccyYl8mlDshIkmHzda7Z6QEKlQcJfhLZ224+H2b+g
O8XO16ABGQk3xpwW3VTQxM3mdqCKMcaMYKeYgCPhZRRwQORmNx7sO3CHdORBIFDW
p43NNQjbVum61WoRPGkMfKCdfng8+wVGF2i1ip7qHwLIuAknPGlDB/mjJWhZvRPl
zB2Z53AbN0R+mWoTUB410w3dw7P9CMH1YLWIEb4BnLo0L3KOEiMwZPS+6D3m9uGy
5cu4f2FiSPdwj+6TIJkvUninBwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJxkvaeE
9w62qYp4OOt1miKgUDbQMB8GA1UdIwQYMBaAFDebkckw4KKvi4Iq2alZut9d3WCf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDkyQS8zQ0U1NzdEQTVC
NTQxMUVFODA4NkY0MzJDNEY5QUUwMi9ONXVSeVREZ29xLUxnaXJacVZtNjMxM2RZ
SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL041dVJ5VERnb3EtTGdpclpxVm02MzEzZFlKOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUQ5MkEvM0NFNTc3REE1QjU0MTFFRTgwODZGNDMyQzRGOUFFMDIvNzk2Q0QzNUE1
QjU1MTFFRThFNEQyQTM5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyxfoMA0GCSqGSIb3DQEBCwUAA4IBAQCtuYNvracMSVQW8oVXcmQ/
QcZP3y0veiz5scM/DhauG+2Zrfp0hiB4PjsZ1qEWn6wHwnI6kPEZIHPqcerIF4cL
/DUbPQyZr/l2uVx4sOoEjTwB1sZvHE2pwai9ZpS1lDpgamxtoQDE//dZiSfH9DF6
W0qu03joc8bm7pba/MxBN90MF5F75u2YBXaQXp6cmrxIzqW5jXAaOdSOIXSAMsQ2
AaIpq19+j/gavPfHqA/Nl+ycu8YeIp/Hhzumu1Rl7HuCo/NQPWZ+uJXZFXATs9Yp
8H8iF2Bik9/7Da/4l0YahbGntXgk5lAVlxLSfb7CaHhwH10DCIRI5cU99MqPDmZ2
-----END CERTIFICATE-----
Generated at Tue Jul 21 04:53:24 2026 by rpki-client