
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/CFD2FAA62A2811EF8313971CC4F9AE02.roa
File: CFD2FAA62A2811EF8313971CC4F9AE02.roa (raw, json)
Hash identifier: Z7sCR/hy5PSvWmSEkAZIXi35sZPSqzMXoQoz3Wu/KXY=
Subject key identifier: 9F:B4:CB:9F:DA:D1:1B:80:25:2A:80:E1:B3:0B:04:F5:1E:E9:23:2C
Certificate issuer: /CN=A91196F9/serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24
Certificate serial: 01B0
Authority key identifier: 82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/CFD2FAA62A2811EF8313971CC4F9AE02.roa
Signing time: Tue 08 Sep 2026 04:54:09 +0000
ROA not before: Tue 08 Sep 2026 04:54:09 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 132583
IP address blocks: 36.50.206.0/23 maxlen: 24
103.207.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl
rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 04:21:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91196F9, serialNumber=82735B3F9C9EA975D4E02A94E2A1081BA4A8AB24
Validity
Not Before: Sep 8 04:54:09 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a9f94f1-dab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:65:4e:6e:4a:11:7e:36:44:ff:e2:d6:5d:ff:
19:b7:89:94:4c:6a:59:6d:2a:f5:5d:60:24:77:9c:
87:d3:f1:31:d1:62:dc:81:9a:cb:1f:57:8c:99:f9:
93:29:1d:98:a2:7d:61:d6:f4:52:c6:c1:a3:f5:1a:
d2:85:16:0c:69:09:6e:7a:25:fd:e9:03:e6:8b:a0:
7c:a7:5a:f8:be:53:1f:43:e1:bd:f6:42:86:2a:42:
62:06:f6:19:35:be:1f:4c:3f:02:2e:e2:a8:30:70:
ba:5a:92:22:54:d4:1f:23:10:63:84:b6:55:9e:24:
57:d4:06:a4:31:93:b5:67:70:ac:a3:65:14:f4:01:
70:33:bd:77:e0:87:b8:73:42:3c:cf:5c:51:71:3b:
17:70:40:6a:ed:4d:04:e8:4e:e3:e6:38:ae:41:1b:
e4:ab:37:45:fa:d1:19:5c:c2:42:15:d2:5c:0a:66:
1a:4f:6e:41:38:26:a5:29:08:73:ef:69:e1:48:a1:
19:58:5c:b2:d5:37:53:26:0f:69:4b:ba:50:41:17:
f6:54:38:79:24:eb:f9:c5:f8:28:7f:87:c3:fd:1f:
bf:49:fb:d0:a1:de:f4:8f:07:88:6a:65:35:7e:5e:
fd:67:49:56:87:1b:da:4b:a1:a7:61:c0:7e:94:d5:
f3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B4:CB:9F:DA:D1:1B:80:25:2A:80:E1:B3:0B:04:F5:1E:E9:23:2C
X509v3 Authority Key Identifier:
keyid:82:73:5B:3F:9C:9E:A9:75:D4:E0:2A:94:E2:A1:08:1B:A4:A8:AB:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnNbP5yeqXXU4CqU4qEIG6SoqyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91196F9/F94940082A1D11EFA9E1F985C4F9AE02/CFD2FAA62A2811EF8313971CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
36.50.206.0/23
103.207.78.0/23
Signature Algorithm: sha256WithRSAEncryption
31:45:ad:c8:11:99:76:cb:af:fc:de:ef:82:3f:70:ed:48:e1:
df:40:e1:9e:a4:a4:d7:c9:55:eb:a3:45:cd:47:17:a1:20:f8:
e2:52:88:0b:89:04:48:56:65:c8:74:85:09:36:1c:a9:43:5a:
c9:99:d6:2a:f0:8b:11:62:c5:ab:85:9d:96:04:f0:63:64:6a:
c7:a1:16:10:76:b3:61:46:4a:2c:b4:f2:53:83:92:eb:cf:54:
c5:22:d9:5b:d0:b5:04:1c:6b:1f:aa:52:79:a7:9a:5b:84:8e:
f9:bd:9e:68:dd:86:8b:cf:df:03:8c:87:e0:85:c9:84:48:19:
00:6a:ca:5f:a8:7e:89:1d:48:a0:37:be:4d:25:27:77:14:bd:
87:2d:77:f1:92:27:85:18:05:00:56:07:bb:40:52:fb:a4:3e:
4f:66:48:cd:6d:f2:35:e7:6b:1d:d6:ce:18:1d:7b:9e:86:c1:
ea:97:8c:a4:c6:55:43:a4:62:50:a8:93:80:34:b8:9e:f2:cd:
6c:e8:cc:75:6c:fd:68:cf:e5:35:4f:13:dd:e9:29:8a:13:97:
6e:18:bc:70:74:75:40:f8:5b:c4:38:bc:4b:cc:5c:6b:be:47:
89:52:6c:03:7f:51:d3:25:ec:b8:98:d1:87:12:7d:2b:1e:ad:
6b:47:8c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:35:13 2026 by rpki-client