
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/C2213CFC2CC311F1A8A01C5D8F833773.roa
File: C2213CFC2CC311F1A8A01C5D8F833773.roa (raw, json)
Hash identifier: dCbH4NL/l/xMZfu4F928E1bAEdQVgxFt32pJoJ1YYyA=
Subject key identifier: 63:95:EA:8A:EA:B2:F7:70:8E:63:22:C4:24:D6:5F:F4:49:CA:95:26
Certificate issuer: /CN=A91E6856/serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4
Certificate serial: 0F49
Authority key identifier: 53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/C2213CFC2CC311F1A8A01C5D8F833773.roa
Signing time: Fri 28 Aug 2026 18:35:02 +0000
ROA not before: Fri 28 Aug 2026 18:35:02 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 35280
IP address blocks: 203.27.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl
rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 17:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3913 (0xf49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6856, serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4
Validity
Not Before: Aug 28 18:35:02 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a91d4d5-bac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:91:6e:20:2b:67:7e:5b:a2:40:e7:2f:47:ff:
1c:1e:4c:e1:34:98:44:68:8a:12:48:94:58:45:05:
d8:ec:35:29:0a:ab:75:b7:f7:b5:94:d5:62:88:0c:
0a:cb:f1:35:97:4e:c3:0c:1b:6e:b2:e3:c4:de:ae:
c6:eb:64:f9:48:13:59:a5:5f:f5:46:aa:51:cd:61:
00:0b:43:41:50:e4:dc:7d:6f:50:b5:b1:13:b2:12:
ed:d3:19:a4:1a:e0:b5:0a:56:d4:2c:25:69:b8:21:
18:0d:29:79:e9:f4:23:94:e6:e7:cd:4d:8f:38:9b:
88:4f:1c:9b:98:3d:75:54:a5:3c:43:b4:e6:d2:92:
af:e8:3b:da:1e:ca:e2:01:70:16:0a:7e:98:31:0e:
e9:21:03:7d:d6:33:45:ca:46:bb:0e:9e:fa:f5:3a:
da:af:5d:9e:95:fc:c8:7c:bd:5a:c0:b2:61:ed:13:
21:af:57:84:a4:2c:94:9c:2b:bf:a1:14:90:18:d6:
98:23:38:8e:1c:6a:0c:17:02:52:63:7b:6d:0a:dc:
51:a4:2f:b2:94:6c:48:a3:75:63:ae:59:85:ab:6e:
55:65:88:35:28:b4:5f:55:6d:4c:d5:dc:66:9f:64:
d3:24:9d:20:4a:f9:bd:d0:91:ad:26:e4:df:75:49:
ed:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:95:EA:8A:EA:B2:F7:70:8E:63:22:C4:24:D6:5F:F4:49:CA:95:26
X509v3 Authority Key Identifier:
keyid:53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/C2213CFC2CC311F1A8A01C5D8F833773.roa
sbgp-ipAddrBlock: critical
IPv4:
203.27.220.0/24
Signature Algorithm: sha256WithRSAEncryption
14:73:1d:eb:5d:1b:64:39:10:bf:fd:51:5a:cc:a9:4c:58:00:
19:e7:6d:3e:7a:6d:78:99:bb:e1:80:c9:57:f0:3e:d6:aa:29:
78:01:ca:dd:9f:42:c2:94:4c:5d:79:36:33:64:54:a7:e6:73:
c0:89:a8:7f:49:2b:dc:5f:66:72:a0:44:b5:59:7c:85:64:7e:
ab:63:19:22:fc:a0:d1:e9:42:68:1a:4a:78:89:27:9b:d3:f3:
56:51:d5:90:52:24:9d:19:dc:c2:97:a1:ad:fe:37:a4:9e:67:
1b:f9:9e:25:d9:9b:b1:21:ff:92:db:25:4a:f6:63:95:4e:6b:
4b:c4:0e:ff:c5:e3:11:23:9c:da:12:6c:53:7e:e5:6e:61:3e:
fb:38:05:5e:75:94:15:4f:46:75:b7:71:06:be:98:12:a7:b2:
b4:a9:df:5d:63:8c:32:6b:2e:d6:3b:79:e4:38:d3:7f:05:72:
36:ea:6b:d8:2e:92:1b:cd:45:62:33:4e:b8:ea:9c:c9:68:64:
a7:8e:3c:3a:25:55:fd:4e:48:90:83:a8:27:bb:a2:85:7c:7b:
33:3a:5e:05:c8:c8:08:65:20:67:4b:a1:18:c6:1d:78:32:0a:
4f:c2:cf:af:a0:09:36:46:33:59:4b:32:0e:2a:76:40:01:48:
a7:fa:10:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:57:53 2026 by rpki-client