
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/3F780E2A179211ECB303FF58C4F9AE02.roa
File: 3F780E2A179211ECB303FF58C4F9AE02.roa (raw, json)
Hash identifier: E2OVt2t2RwL7eW2IIag4jKtOfPTzQfuNebzivsrFSS4=
Subject key identifier: 36:63:C9:FD:3B:D0:D3:39:4A:97:FE:8D:BE:D1:4B:E5:AA:E3:72:CA
Certificate issuer: /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial: 071B
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/3F780E2A179211ECB303FF58C4F9AE02.roa
Signing time: Wed 02 Sep 2026 23:44:17 +0000
ROA not before: Wed 02 Sep 2026 23:44:17 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 56307
IP address blocks: 203.202.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 22:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1819 (0x71b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Validity
Not Before: Sep 2 23:44:17 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a98b4d1-08e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4c:83:5c:f7:2f:d3:bf:d5:c7:14:6d:a5:6f:
f6:57:5b:c2:55:5b:fd:ad:bf:79:57:1a:d8:10:e4:
af:b4:5a:51:1a:8a:95:4c:79:4b:20:28:b4:08:46:
cc:7b:b4:8d:87:93:af:a8:5d:54:f8:f7:fb:71:24:
d2:93:42:20:1f:cf:1d:55:a4:7e:51:95:6d:15:cc:
ba:84:34:3b:7a:56:bb:3e:6d:d4:25:b4:40:88:63:
fb:a2:1e:b5:3b:67:c0:79:c2:ce:3e:05:95:5a:11:
66:c9:5f:be:08:c7:21:05:4f:4c:f0:74:10:a2:8a:
1e:48:a7:a8:d1:0a:c2:92:10:52:f2:73:5b:50:8e:
b4:bb:38:c8:8d:eb:6b:9a:f6:52:50:85:43:95:97:
a9:79:8e:4f:29:02:56:4b:d5:1d:45:ea:43:18:b4:
3c:50:7d:ab:5f:17:82:ea:94:ed:2e:d7:f0:7d:ac:
b5:37:70:98:42:69:d2:51:57:d4:c6:53:26:81:bb:
19:16:35:f1:fc:11:f1:2f:2e:46:4a:a2:63:4e:21:
a7:3d:d2:24:fe:21:a1:55:7d:f7:cd:5a:01:ff:8f:
0e:61:a0:7c:00:a8:35:37:e5:f8:55:08:f6:45:34:
5d:1e:fa:db:62:c2:7b:d5:30:74:9c:15:4a:95:7a:
7a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:63:C9:FD:3B:D0:D3:39:4A:97:FE:8D:BE:D1:4B:E5:AA:E3:72:CA
X509v3 Authority Key Identifier:
keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/3F780E2A179211ECB303FF58C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.202.0.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:6f:54:0f:fe:05:1f:5f:06:06:37:b3:f5:a9:07:8d:12:41:
63:62:ad:84:7c:7b:5b:09:77:18:ec:16:49:cd:b8:19:e8:77:
cd:f2:4f:79:0c:ba:ae:32:6b:09:3c:f4:22:e2:a6:20:79:88:
1b:22:dc:a9:6c:cc:60:ff:e2:62:01:cc:3f:00:17:5d:34:de:
a1:cd:f0:cb:77:1d:ba:55:87:2b:ff:34:09:53:9a:61:71:0c:
f6:7e:b2:9b:b1:e6:01:b4:0a:d5:6d:f0:a2:b1:a7:93:8b:8f:
8a:29:0a:2c:93:63:ed:08:e3:14:85:c4:5f:37:1c:d6:44:e5:
23:b9:dc:dc:6e:c8:aa:00:21:3f:e3:ba:6e:c3:3d:9d:11:6d:
54:4c:62:2e:93:5f:e9:a0:ce:63:2b:6f:e2:74:02:8e:9e:df:
ff:2b:a4:23:23:a0:6d:ff:26:9e:bb:13:ef:ff:d9:b2:30:52:
3b:02:1f:aa:3a:43:1e:64:17:d4:68:96:47:8e:0e:45:44:39:
c4:83:f0:02:cd:51:1c:c3:b7:32:06:9f:dd:b8:21:4e:bf:27:
35:c2:49:b3:89:f6:a6:e0:fc:f2:15:81:44:0b:54:d0:a8:12:
4c:43:a4:de:f8:3c:23:da:2f:11:bc:51:31:13:47:b0:28:13:
0a:7f:cc:3d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTE0QjExMTAvBgNVBAUTKDYxNzE0MzJENTU5NENCM0Y2MDhEM0JFMEY1MjYwMEJC
RUM0NkU1RkIwHhcNMjYwOTAyMjM0NDE3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk4YjRkMS0wOGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA40yDXPcv07/VxxRtpW/2V1vCVVv9rb95VxrYEOSvtFpRGoqVTHlLICi0CEbM
e7SNh5OvqF1U+Pf7cSTSk0IgH88dVaR+UZVtFcy6hDQ7ela7Pm3UJbRAiGP7oh61
O2fAecLOPgWVWhFmyV++CMchBU9M8HQQoooeSKeo0QrCkhBS8nNbUI60uzjIjetr
mvZSUIVDlZepeY5PKQJWS9UdRepDGLQ8UH2rXxeC6pTtLtfwfay1N3CYQmnSUVfU
xlMmgbsZFjXx/BHxLy5GSqJjTiGnPdIk/iGhVX33zVoB/48OYaB8AKg1N+X4VQj2
RTRdHvrbYsJ71TB0nBVKlXp63QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDZjyf07
0NM5Spf+jb7RS+Wq43LKMB8GA1UdIwQYMBaAFGFxQy1VlMs/YI074PUmALvsRuX7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTRCMS84NDE4OTIyNkZC
RTQxMUVCODJCNjI2NEZDNEY5QUUwMi9ZWEZETFZXVXl6OWdqVHZnOVNZQXUteEc1
ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lYRkRMVldVeXo5Z2pUdmc5U1lBdS14RzVmcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTE0QjEvODQxODkyMjZGQkU0MTFFQjgyQjYyNjRGQzRGOUFFMDIvM0Y3ODBFMkEx
NzkyMTFFQ0IzMDNGRjU4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAy8oAMA0GCSqGSIb3DQEBCwUAA4IBAQCqb1QP/gUfXwYGN7P1qQeN
EkFjYq2EfHtbCXcY7BZJzbgZ6HfN8k95DLquMmsJPPQi4qYgeYgbItypbMxg/+Ji
Acw/ABddNN6hzfDLdx26VYcr/zQJU5phcQz2frKbseYBtArVbfCisaeTi4+KKQos
k2PtCOMUhcRfNxzWROUjudzcbsiqACE/47puwz2dEW1UTGIuk1/poM5jK2/idAKO
nt//K6QjI6Bt/yaeuxPv/9myMFI7Ah+qOkMeZBfUaJZHjg5FRDnEg/ACzVEcw7cy
Bp/duCFOvyc1wkmzifam4PzyFYFEC1TQqBJMQ6Te+Dwj2i8RvFExE0ewKBMKf8w9
-----END CERTIFICATE-----
Generated at Tue Sep 15 07:24:47 2026 by rpki-client