
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/5CB841E69B1411EEA456FE83C4F9AE02.roa
File: 5CB841E69B1411EEA456FE83C4F9AE02.roa (raw, json)
Hash identifier: qcN79+V6hCQ+S4TSiwH63SC4uJ4XDbKFuURc1XP++Qw=
Subject key identifier: 1F:2E:4B:44:1C:E5:12:CB:CB:DF:59:70:56:19:24:2D:AC:1D:D8:AD
Certificate issuer: /CN=A91C7AB9/serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6
Certificate serial: 0198
Authority key identifier: 59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/5CB841E69B1411EEA456FE83C4F9AE02.roa
Signing time: Thu 29 Jan 2026 03:23:21 +0000
ROA not before: Thu 29 Jan 2026 03:23:21 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 152179
IP address blocks: 36.50.130.0/23 maxlen: 24
2001:df3:49c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl
rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 02:50:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408 (0x198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7AB9, serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6
Validity
Not Before: Jan 29 03:23:21 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=697ad2a9-f478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:e6:f3:4a:86:b1:13:72:cf:2a:c0:c3:21:
2b:42:99:38:e6:6f:3b:d7:51:61:03:c7:89:4c:9e:
40:2d:b2:d1:89:69:f0:b8:35:44:2f:79:04:e1:7e:
00:9b:83:a5:cf:d9:d0:f3:aa:0f:3e:df:2c:25:47:
c9:f6:49:5b:18:14:82:7a:44:d8:1c:e2:4e:72:4f:
b7:dc:a1:ab:1c:aa:3a:f8:22:84:04:ab:80:76:75:
2c:12:08:7b:e3:bf:f8:75:5e:04:0c:28:7a:e0:f1:
80:b9:18:27:c4:a9:93:b8:dd:3a:21:76:12:6c:83:
cc:13:27:31:e3:93:12:4f:e8:42:af:00:d8:66:52:
05:a4:26:66:45:d9:6f:3f:b5:be:47:4c:bb:e3:19:
fb:42:b6:87:42:e7:f9:8e:77:20:29:8e:4d:65:d7:
f2:b9:e3:56:7c:f5:0d:02:05:fa:95:ee:51:3f:d9:
72:8c:b5:2d:65:c6:20:a4:b8:28:22:a9:d9:c4:4e:
b6:20:ca:dc:1b:9f:a9:8f:5f:58:48:ec:cd:e9:55:
31:d0:4e:42:12:2c:ad:02:0f:e0:22:b0:b1:a0:d7:
c5:5a:7d:39:21:45:bb:e1:5c:28:b9:65:8c:c6:32:
9c:0d:d8:dc:e7:9d:48:02:b7:5e:a1:44:73:5a:93:
2e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2E:4B:44:1C:E5:12:CB:CB:DF:59:70:56:19:24:2D:AC:1D:D8:AD
X509v3 Authority Key Identifier:
keyid:59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/5CB841E69B1411EEA456FE83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.130.0/23
IPv6:
2001:df3:49c0::/48
Signature Algorithm: sha256WithRSAEncryption
b7:d3:58:66:04:28:35:8d:25:c5:ac:83:ad:2d:18:c9:bd:39:
72:b5:f1:14:2d:b1:02:4a:84:00:62:ea:cd:95:e2:21:30:4d:
4e:55:69:2d:00:c9:a5:e4:f7:9b:e1:45:14:07:66:4c:e9:7e:
a2:39:bf:1d:cd:b5:ef:11:66:3d:90:37:da:4c:63:e9:a7:5c:
5f:30:cc:d4:d0:b7:23:3d:df:dd:54:2b:06:7e:67:0e:11:68:
e6:2f:85:21:ed:60:9f:90:a3:30:6c:bb:52:77:cf:e0:59:a9:
74:60:e2:b0:f8:f1:9f:57:ff:4f:59:8c:07:e3:74:ee:d6:fd:
a5:e8:83:cc:bd:b8:66:b1:97:7f:cd:72:b0:90:65:5f:f1:a7:
f8:48:1f:00:74:c1:aa:b2:36:79:8c:32:f5:18:b8:6f:bc:d0:
3e:6c:0d:8b:e9:0e:07:8d:15:55:f1:62:b7:60:b7:d6:65:d8:
0c:c2:14:ab:7e:55:6e:5b:92:10:ee:4c:18:e6:b8:d7:28:fa:
17:db:0e:73:9f:bd:00:7f:9e:36:58:69:68:a8:89:a9:a0:b1:
9e:e5:1c:1b:ed:98:56:dd:f8:6a:47:c5:ea:38:71:fb:5d:1a:
5e:07:19:d5:c1:31:27:4b:7b:84:8e:7a:ca:ff:a1:9a:c8:cc:
57:f2:fd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:29:08 2026 by rpki-client