
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/B74BF7F018BF11EFB54AFB20C4F9AE02.roa
File: B74BF7F018BF11EFB54AFB20C4F9AE02.roa (raw, json)
Hash identifier: PmHnCW9wuHVesyB6pjwdM0nSHd68dr8hBmAABYCg/4o=
Subject key identifier: 71:E3:A7:43:D1:52:AF:EC:8D:4B:6D:0C:BD:59:D7:F4:05:84:E3:1D
Certificate issuer: /CN=A91CE403/serialNumber=D78F30904E75DF94CEB75966AF838E763EA89762
Certificate serial: 0144
Authority key identifier: D7:8F:30:90:4E:75:DF:94:CE:B7:59:66:AF:83:8E:76:3E:A8:97:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/B74BF7F018BF11EFB54AFB20C4F9AE02.roa
Signing time: Thu 29 Jan 2026 04:23:39 +0000
ROA not before: Thu 29 Jan 2026 04:23:39 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 152175
IP address blocks: 36.50.98.0/23 maxlen: 24
203.29.114.0/23 maxlen: 24
2401:5a60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.crl
rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 03:40:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324 (0x144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE403, serialNumber=D78F30904E75DF94CEB75966AF838E763EA89762
Validity
Not Before: Jan 29 04:23:39 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=697ae0cb-e3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3b:69:09:e4:ec:48:7e:7a:e7:93:a8:12:a1:
9e:05:b8:f6:51:43:50:0b:6b:59:04:78:c6:9a:e1:
1e:36:69:63:d2:30:d2:80:68:e7:d7:17:6a:09:92:
85:64:65:76:81:a7:8c:66:f4:51:b5:f9:db:e6:2d:
bf:fc:c3:88:ea:dc:51:d0:ac:2e:20:cf:02:1e:eb:
d8:d9:81:9d:ad:de:c4:cf:f3:0e:da:a2:ba:1e:80:
f4:4b:71:ce:a3:29:6c:36:01:6b:e1:d5:c1:7e:e1:
e9:e8:92:cb:5e:ac:d1:cc:ea:d9:9a:33:e0:ba:a9:
9e:a8:cd:0c:52:53:2a:51:dc:49:df:da:0e:cf:c5:
6a:36:09:3f:df:83:7e:3e:4a:73:37:17:95:43:ad:
bd:8f:68:92:ae:50:ce:8b:29:ce:4e:e8:b6:fc:3e:
12:4f:f6:6c:99:08:a0:c0:9c:66:7f:bd:29:83:94:
d3:57:60:e9:28:b5:6a:a4:a5:42:6f:11:a6:a8:e6:
a9:d8:a8:1c:1b:91:79:76:bf:71:ff:8b:fe:1b:05:
a8:34:02:7d:6a:51:d4:d5:71:cc:cc:61:56:bf:28:
e5:ee:dc:66:5d:7d:1f:cf:ab:ae:5a:be:62:e9:b1:
4f:89:ec:42:f3:68:d1:87:54:68:62:1e:b1:17:8f:
e0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E3:A7:43:D1:52:AF:EC:8D:4B:6D:0C:BD:59:D7:F4:05:84:E3:1D
X509v3 Authority Key Identifier:
keyid:D7:8F:30:90:4E:75:DF:94:CE:B7:59:66:AF:83:8E:76:3E:A8:97:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/B74BF7F018BF11EFB54AFB20C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.98.0/23
203.29.114.0/23
IPv6:
2401:5a60::/32
Signature Algorithm: sha256WithRSAEncryption
c7:67:c9:9f:cc:bc:79:00:6a:5d:13:3c:b3:e2:5f:6e:f5:e4:
ca:89:46:a3:77:6a:eb:03:86:68:7a:30:51:31:98:a7:7b:fa:
f6:db:b9:a7:31:c7:28:aa:ae:e4:73:2c:42:58:94:8d:5c:b2:
7f:33:ac:cd:a4:66:44:98:c1:ee:75:a8:56:be:19:68:9a:5f:
04:8b:2e:e9:77:b5:78:40:6a:ef:94:14:dc:82:75:59:42:d5:
73:c4:d8:75:32:c1:d7:6f:65:9e:b4:8e:d2:73:5f:a9:a3:b8:
d9:63:ea:ab:e2:5f:65:d6:aa:e3:02:4f:f8:9c:40:1a:34:ed:
5b:66:bb:b2:4c:b3:82:55:0e:9b:85:19:a1:94:1d:7f:93:35:
ac:2e:47:2f:44:2d:02:68:3e:ec:7b:f4:09:57:74:7f:09:71:
06:8e:66:3f:46:d5:ae:14:22:ad:ca:09:49:ca:36:f1:3f:ce:
0d:1f:22:2e:90:e6:3f:e6:5d:9a:1f:fb:80:bc:9a:66:15:ed:
e9:de:53:93:db:ef:4a:81:40:41:00:68:a1:7a:5e:86:a2:87:
76:fa:46:fc:2e:87:62:ff:69:ff:0d:c4:c1:55:d1:c1:27:dd:
29:8c:72:ca:7b:0d:74:c1:0e:ab:a4:b8:4c:80:d5:37:45:90:
1c:35:d6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:50:32 2026 by rpki-client