
$ rpki-client -vvf rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/E7BD97EE5D9311F0AFF08443C4F9AE02.roa
File: E7BD97EE5D9311F0AFF08443C4F9AE02.roa (raw, json)
Hash identifier: 3otco3eSbyB75iJxOgjvmTNnA1O8d8ApjaaZwkF7ilI=
Subject key identifier: FB:2B:98:A6:A8:FD:A1:C9:5B:B8:62:96:92:89:5C:48:D9:43:42:38
Certificate issuer: /CN=A91174ED/serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D
Certificate serial: 72
Authority key identifier: D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/E7BD97EE5D9311F0AFF08443C4F9AE02.roa
Signing time: Thu 29 Jan 2026 06:28:57 +0000
ROA not before: Thu 29 Jan 2026 06:28:57 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 58929
IP address blocks: 202.14.145.0/24 maxlen: 24
203.4.149.0/24 maxlen: 24
203.33.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl
rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:09:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91174ED, serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D
Validity
Not Before: Jan 29 06:28:57 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=697afe29-5ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d1:88:de:08:ab:76:c0:62:39:15:e9:c1:11:
ad:5a:bc:37:3f:9a:ad:d5:59:e3:88:01:c2:17:b4:
e9:68:49:4e:d8:a7:e2:d6:86:23:b5:93:7a:2f:a9:
a2:76:03:2d:d4:1f:9e:8e:c7:e7:5b:5c:d5:2e:ae:
a3:e5:be:e3:86:f1:d7:bf:0b:5d:ac:95:71:78:85:
a7:e9:a2:19:3e:9b:8f:cc:03:dd:58:f4:65:cc:3b:
97:d6:e2:83:5c:f5:a5:83:b3:84:59:c4:14:5a:72:
78:fa:32:bd:83:28:0e:46:fa:da:0c:4a:68:cd:00:
d9:e5:c8:63:ec:f9:23:7f:97:1a:58:21:f3:27:f9:
42:07:e9:1c:ea:1d:a1:a0:1f:d6:1a:56:1d:26:f5:
93:fa:e8:69:4b:23:e0:af:22:1a:2a:30:7f:fe:a4:
92:4f:7c:2e:97:66:63:40:0a:73:3c:df:3c:b2:fe:
da:59:6b:c4:6a:ee:aa:09:4e:e7:00:27:b0:ed:0d:
21:3d:04:78:5e:17:ae:8d:52:35:6a:3c:e4:c4:3e:
ec:3e:69:ab:f5:0c:36:39:78:df:e5:2c:ce:5e:35:
1c:06:8a:99:57:b6:5a:d2:f6:1e:b3:67:51:cd:32:
a9:ac:00:9a:2c:4a:fd:4c:72:ac:40:d1:98:09:23:
8a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2B:98:A6:A8:FD:A1:C9:5B:B8:62:96:92:89:5C:48:D9:43:42:38
X509v3 Authority Key Identifier:
keyid:D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/E7BD97EE5D9311F0AFF08443C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.14.145.0/24
203.4.149.0/24
203.33.136.0/22
Signature Algorithm: sha256WithRSAEncryption
95:48:8e:d9:d6:ba:3d:23:14:73:15:ca:4b:89:ac:a2:e2:ea:
1b:74:2e:0c:2d:e1:c6:4e:e9:eb:b1:4b:18:c1:ef:0d:a2:39:
08:42:e8:1e:db:73:15:0c:d8:71:b9:cd:74:ba:aa:aa:51:86:
b9:2b:c8:16:9d:f2:b6:0d:ad:f3:54:83:d9:fa:7d:b7:2f:f2:
d0:4f:c6:ca:9a:c4:f7:f4:26:77:4d:09:3c:66:86:2b:d4:fa:
9f:b5:b5:7b:7d:2e:fc:bf:0c:34:7d:af:29:00:a3:17:ea:22:
26:22:41:d6:10:bf:80:c2:56:b0:f8:6c:13:d2:ff:cf:9d:da:
1a:ac:d7:5d:a2:cc:76:66:6b:92:7f:2e:71:69:ba:c7:d0:42:
f2:33:3e:67:28:a5:b7:04:8d:56:15:e8:31:ce:7e:f6:50:fa:
e1:cc:e3:e7:75:54:53:3c:05:04:42:cb:1f:5a:4a:ed:aa:47:
e4:d4:eb:38:43:46:f0:9c:bf:7f:2c:28:f1:3e:ce:dd:73:ce:
7b:fd:a2:d2:54:dc:be:0c:3a:ca:2b:02:3e:35:8f:0b:69:9b:
fb:5b:45:a2:53:b2:02:f7:69:0e:f4:c1:8a:fe:89:f3:76:b3:
bc:ff:ab:2f:43:93:d6:8d:bd:74:b2:11:c8:32:51:e5:e9:44:
7d:e0:04:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:28 2026 by rpki-client