
$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/2651B7F8CFB111F0AE39703EC4F9AE02.roa
File: 2651B7F8CFB111F0AE39703EC4F9AE02.roa (raw, json)
Hash identifier: wL6OiQGqQLOSb9keu9RroEBvZOy7TfOeWOCUAV+nelQ=
Subject key identifier: 84:68:B7:A5:19:72:8D:98:6D:A3:63:C7:9B:B3:06:01:3D:20:C0:EC
Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial: 3778
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/2651B7F8CFB111F0AE39703EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:08:37 +0000
ROA not before: Tue 02 Dec 2025 19:00:21 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 134677
IP address blocks: 202.73.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 21:53:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14200 (0x3778)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Validity
Not Before: Dec 2 19:00:21 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a48eb5-08b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ac:97:3e:36:76:70:1b:b6:23:cc:e6:d7:86:
d8:25:72:6a:f8:0f:60:14:ab:27:b2:36:99:98:76:
e1:28:cf:d6:a1:ec:76:91:be:c2:54:98:c2:bb:ae:
58:25:77:cb:ec:28:43:30:12:76:3d:c1:c9:65:63:
65:20:a9:81:80:d8:17:c3:ea:90:bb:a8:4e:dd:67:
3b:5c:b7:20:cd:f9:2b:ff:ce:a0:34:ea:88:e6:74:
55:53:10:61:0f:26:05:a9:fc:27:5f:3d:24:77:0d:
5f:d0:d8:3b:3c:f8:a7:0d:5c:5f:aa:bc:fc:ef:56:
a8:5e:e0:b0:25:6a:28:82:c4:24:b8:33:9b:a8:a1:
4e:43:ec:c6:f2:a3:24:35:bb:38:39:f8:2c:7a:58:
da:cf:40:7f:55:40:3e:a2:a9:0c:2a:ab:54:7e:9e:
d6:c2:be:a2:9e:20:6d:2b:3f:22:69:20:1d:3d:b8:
09:1a:ad:6c:84:d4:e5:42:c7:61:cf:d9:36:d8:b1:
2b:c8:19:75:33:87:d7:96:1e:30:25:5e:98:18:f6:
b7:9c:06:11:7c:96:42:e3:5c:14:21:bf:2f:15:b6:
d0:37:4c:3d:58:be:c1:f6:84:d8:e5:d2:be:36:44:
a8:40:2b:9e:7e:0a:c6:2a:94:ba:39:ea:64:fd:03:
3b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:68:B7:A5:19:72:8D:98:6D:A3:63:C7:9B:B3:06:01:3D:20:C0:EC
X509v3 Authority Key Identifier:
keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/2651B7F8CFB111F0AE39703EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.73.4.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:c0:b9:76:55:7a:b1:03:bd:af:cb:13:28:1a:06:94:94:c2:
a5:7e:59:da:a8:50:77:1d:1a:05:17:f9:b9:f3:e9:2b:25:ee:
f1:ef:9d:ee:90:da:4d:c8:bf:b2:18:6c:8d:93:96:76:23:0f:
68:32:8b:e8:b2:34:c4:37:0a:2e:93:23:c4:fb:c7:61:27:31:
6e:c6:33:99:75:4f:17:6e:0d:b5:f2:9a:35:36:bb:e0:68:81:
a5:6f:3c:9a:c1:54:63:14:c0:94:c2:88:2e:c9:14:cb:7b:42:
d6:04:4c:d3:da:65:85:8e:b2:b8:d7:cc:4a:02:1c:fb:69:fc:
3b:21:31:2e:6a:f6:f8:52:48:d0:90:e8:13:67:82:95:38:ea:
bb:2b:59:b7:d7:60:49:8f:12:b1:1f:3c:bc:4c:2a:39:28:7a:
ea:9d:db:f5:4b:2b:c6:d8:32:6b:2a:bf:da:58:e9:11:c1:0b:
aa:81:f2:36:43:3d:88:c8:15:39:a3:40:a7:94:81:5a:70:44:
90:e0:90:b5:16:bc:0d:36:96:25:63:2d:86:27:83:ec:03:ed:
28:8f:7f:c5:2b:43:50:e4:ac:cd:6e:10:42:9f:13:50:4e:50:
d4:23:3d:93:f1:7f:96:cc:9c:f6:46:fb:c0:4c:c6:5f:d5:94:
90:71:2a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 07:01:20 2026 by rpki-client