
$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/605B17F8E19611EC8AD57C6CC4F9AE02.roa
File: 605B17F8E19611EC8AD57C6CC4F9AE02.roa (raw, json)
Hash identifier: CWmQKY2/QmBRZT94uG0rGyG5reZbZWhYR6NCJaw+5tY=
Subject key identifier: 20:BF:43:A6:DD:31:09:E7:F7:FF:99:A5:48:85:A2:51:0F:9E:C3:1C
Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial: 0A18
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/605B17F8E19611EC8AD57C6CC4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:53:33 +0000
ROA not before: Wed 27 Aug 2025 01:05:44 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 137392
IP address blocks: 203.172.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2584 (0xa18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Validity
Not Before: Aug 27 01:05:44 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a5884c-75fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ae:76:41:b8:52:09:12:e9:ba:7c:68:df:9b:
f2:7c:2e:e8:c1:e2:ff:de:cb:50:ba:7b:4e:55:0d:
55:66:69:ca:f4:9e:77:64:a5:77:ac:d3:86:dc:f3:
4a:b9:40:36:15:cf:ad:6f:dd:47:da:1a:f8:23:a1:
56:6e:5d:80:ee:55:c8:04:19:ee:61:e7:71:93:d7:
31:56:15:86:06:a3:da:1a:96:9f:47:2f:ba:9b:c3:
0b:40:bf:66:0a:89:44:d3:59:a2:ef:da:92:b6:5c:
46:32:53:c5:ff:ca:0b:dd:d0:03:ee:4f:a1:0e:59:
4a:ec:93:21:f6:80:ca:7b:83:3a:d2:46:5c:77:c2:
78:c2:a0:d0:22:f0:71:f7:e6:90:05:7a:38:5f:0c:
6b:97:74:db:10:68:46:cf:da:42:34:ac:18:c7:a8:
85:ed:67:d5:0e:4a:1d:fc:64:3d:08:31:f9:3f:0b:
ad:c3:4c:dc:5c:21:e6:b5:c2:7e:bb:c7:cd:92:57:
f9:0f:5e:91:9b:73:ff:bb:c6:45:7f:71:51:55:21:
27:87:0b:3a:00:6a:a8:4c:67:e8:ec:de:22:dc:ce:
ee:94:0f:c7:36:8f:88:22:fd:18:08:64:a1:51:27:
93:00:54:d6:6a:ac:28:85:98:84:97:ba:18:1b:88:
e2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BF:43:A6:DD:31:09:E7:F7:FF:99:A5:48:85:A2:51:0F:9E:C3:1C
X509v3 Authority Key Identifier:
keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/605B17F8E19611EC8AD57C6CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.172.73.0/24
Signature Algorithm: sha256WithRSAEncryption
63:4c:7e:15:51:4b:4a:95:c0:a2:e9:73:66:7a:e3:40:97:46:
8a:9b:b4:8c:69:5c:7d:7b:23:e6:1f:2c:d4:0e:48:36:48:0c:
22:74:e7:db:40:f9:c0:01:c5:87:1d:8d:44:3b:30:e6:e3:3b:
14:ed:4e:53:96:b6:6a:06:25:b3:b8:83:d3:ba:ea:e4:f5:aa:
c2:e9:6d:b5:89:cb:e4:37:e6:c5:cf:19:c3:56:38:bb:1c:f8:
ca:44:50:1f:b2:a0:70:1a:51:d1:7a:b0:9a:7d:29:67:63:f9:
a9:e8:a6:e5:6c:82:84:a3:23:0e:67:84:52:4e:e8:33:00:21:
ba:93:36:7b:9e:1e:2a:1e:4c:a1:f4:9a:4a:b9:1b:df:ed:0c:
49:0e:76:0b:5e:84:01:05:53:e3:8f:26:61:c7:45:d2:b5:f6:
6b:3f:b4:ce:d7:c2:a7:53:9c:30:8d:30:d8:cd:64:bb:6a:73:
5d:1d:63:9a:07:04:81:3c:8a:77:c3:47:03:8e:24:d4:00:13:
3b:9b:3e:b6:e7:ea:69:07:b7:ed:c7:a5:2c:69:7c:73:2e:a5:
11:63:6a:9c:c5:95:b8:57:2e:0a:96:ea:de:d6:15:a4:7d:d7:
6a:64:ec:f7:16:81:60:74:bd:df:01:91:7e:2e:9a:96:33:02:
cc:88:6c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 01:19:58 2026 by rpki-client