
$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2E4393FEE0CD11ECB03A892AC4F9AE02.roa
File: 2E4393FEE0CD11ECB03A892AC4F9AE02.roa (raw, json)
Hash identifier: NzGiS0gs/1eFoXh8dxqxRHr5k/bAohCvV5+OTEvEO8I=
Subject key identifier: 8F:1F:7E:05:68:81:B4:68:85:B7:2D:73:4D:82:DA:BD:66:80:59:77
Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial: 0A27
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2E4393FEE0CD11ECB03A892AC4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:53:45 +0000
ROA not before: Wed 27 Aug 2025 01:05:55 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 24465
IP address blocks: 202.183.134.0/24 maxlen: 24
210.1.38.0/24 maxlen: 24
210.1.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2599 (0xa27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Validity
Not Before: Aug 27 01:05:55 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a58859-1537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:61:a9:19:45:f4:86:e5:89:20:f9:be:71:
8c:bf:06:74:d5:55:44:b1:c1:db:08:86:b4:ab:ee:
c1:fe:af:da:79:9d:6b:32:71:27:d5:ae:34:ef:20:
84:84:f0:16:16:0e:15:a1:cb:72:c6:ae:bc:d4:6e:
4d:7f:9f:41:39:27:19:28:a8:9f:64:b0:53:ba:cc:
bf:89:41:2b:ae:6b:77:47:80:dc:77:53:9a:d8:a9:
41:64:10:56:d0:2c:ac:a2:3a:28:4d:15:fc:58:5e:
ab:a3:22:1f:aa:26:4f:d1:b5:e4:72:36:ec:77:9d:
11:37:47:79:01:7e:be:bc:7c:9d:57:3e:09:1b:84:
17:c9:a9:9f:16:79:87:43:54:61:68:c2:40:36:2f:
44:04:91:96:3e:e9:96:fb:7c:0f:af:9c:29:74:04:
d4:dd:22:3c:d9:8d:73:df:d7:d0:4d:c3:8d:13:b6:
0b:bb:23:37:e1:fa:a4:b6:6b:4a:d5:bb:8a:bd:bf:
d8:05:4a:4a:35:cd:8c:00:15:5b:35:64:7f:11:fe:
85:76:30:13:5b:d9:1c:d9:2e:5f:90:83:e4:38:24:
b5:11:58:41:fd:96:b0:22:c9:81:ee:00:27:c4:54:
85:ce:85:27:95:48:1c:2b:99:6b:2a:a7:5f:03:25:
c8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1F:7E:05:68:81:B4:68:85:B7:2D:73:4D:82:DA:BD:66:80:59:77
X509v3 Authority Key Identifier:
keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2E4393FEE0CD11ECB03A892AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.183.134.0/24
210.1.38.0/24
210.1.53.0/24
Signature Algorithm: sha256WithRSAEncryption
45:5f:d0:7d:0b:c7:5b:ab:fe:82:57:91:e2:5a:ea:0a:de:3b:
73:7e:a2:df:fb:66:5c:b6:10:1a:97:b8:5e:ae:93:cc:79:a2:
75:8c:07:11:d0:1a:30:87:f4:6e:f5:33:bc:aa:7b:40:93:b4:
01:6f:03:1f:35:ae:f3:ef:25:7c:c6:3a:51:25:64:2b:30:7f:
d3:76:a4:39:b3:c2:98:04:d0:75:91:27:41:02:6a:45:b4:d5:
ea:3e:98:fb:8b:54:bc:53:6e:4b:16:1a:fa:33:a1:d7:48:ae:
7d:4f:d6:e2:34:c3:b4:8d:cd:4f:53:61:bb:f8:a1:0f:c4:5b:
ca:26:f5:d3:a7:8f:4e:e4:d9:e0:49:75:8d:37:f4:73:67:45:
eb:05:11:7a:12:0e:64:3d:ff:49:88:74:89:65:20:56:1b:db:
af:e4:b1:a9:c3:6a:3e:a5:27:7c:7a:ea:18:b3:b3:f4:55:61:
91:6b:92:64:e1:ad:b8:9d:c3:34:b8:b0:bc:d3:58:b5:5d:7b:
04:1e:3f:5f:48:87:48:bd:97:f4:8e:5c:15:62:28:ca:09:d9:
e2:9a:4c:78:34:71:0a:bb:f2:8f:68:fb:42:e1:25:22:cb:24:
3c:6c:5a:8c:1c:47:59:1a:6d:06:04:7d:ea:5f:fd:56:fc:1c:
e4:8d:81:8a
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICCicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyQ0ExMTAvBgNVBAUTKDc3QTIwMUM1OEVCM0I0MjA4QzkxQkE3RUNFRDkzNkU1
OTVFNjFBMTkwHhcNMjUwODI3MDEwNTU1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1ODg1OS0xNTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsmVhqRlF9IbliSD5vnGMvwZ01VVEscHbCIa0q+7B/q/aeZ1rMnEn1a407yCE
hPAWFg4Voctyxq681G5Nf59BOScZKKifZLBTusy/iUErrmt3R4Dcd1Oa2KlBZBBW
0CysojooTRX8WF6royIfqiZP0bXkcjbsd50RN0d5AX6+vHydVz4JG4QXyamfFnmH
Q1RhaMJANi9EBJGWPumW+3wPr5wpdATU3SI82Y1z39fQTcONE7YLuyM34fqktmtK
1buKvb/YBUpKNc2MABVbNWR/Ef6FdjATW9kc2S5fkIPkOCS1EVhB/ZawIsmB7gAn
xFSFzoUnlUgcK5lrKqdfAyXIcQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFI8ffgVo
gbRohbctc02C2r1mgFl3MB8GA1UdIwQYMBaAFHeiAcWOs7QgjJG6fs7ZNuWV5hoZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9GNUVEQzdGQzhB
NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi9kNklCeFk2enRDQ01rYnAtenRrMjVaWG1H
aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Q2SUJ4WTZ6dENDTWticC16dGsyNVpYbUdoay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjYyQ0EvRjVFREM3RkM4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvMkU0MzkzRkVF
MENEMTFFQ0IwM0E4OTJBQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQAyreGAwQA0gEmAwQA0gE1MA0GCSqGSIb3DQEBCwUAA4IBAQBFX9B9
C8dbq/6CV5HiWuoK3jtzfqLf+2ZcthAal7herpPMeaJ1jAcR0Bowh/Ru9TO8qntA
k7QBbwMfNa7z7yV8xjpRJWQrMH/TdqQ5s8KYBNB1kSdBAmpFtNXqPpj7i1S8U25L
Fhr6M6HXSK59T9biNMO0jc1PU2G7+KEPxFvKJvXTp49O5NngSXWNN/RzZ0XrBRF6
Eg5kPf9JiHSJZSBWG9uv5LGpw2o+pSd8euoYs7P0VWGRa5Jk4a24ncM0uLC801i1
XXsEHj9fSIdIvZf0jlwVYijKCdnimkx4NHEKu/KPaPtC4SUiyyQ8bFqMHEdZGm0G
BH3qX/1W/BzkjYGK
-----END CERTIFICATE-----
Generated at Sun Mar 15 01:18:09 2026 by rpki-client