
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/720ED6F487CB11F0B605C67DC4F9AE02.roa
File: 720ED6F487CB11F0B605C67DC4F9AE02.roa (raw, json)
Hash identifier: +pNI/1E6fuCMCQEnZFXGL2gCdVJrdJVa4JzJ+dtH2kY=
Subject key identifier: A9:A1:21:42:10:0E:8B:65:55:45:55:0C:7D:26:6F:10:0E:FF:F6:53
Certificate issuer: /CN=A91523FF/serialNumber=606B4F42EE97F7488EC20B63D8B1AAF6D42D9CA7
Certificate serial: D6
Authority key identifier: 60:6B:4F:42:EE:97:F7:48:8E:C2:0B:63:D8:B1:AA:F6:D4:2D:9C:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGtPQu6X90iOwgtj2LGq9tQtnKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/720ED6F487CB11F0B605C67DC4F9AE02.roa
Signing time: Mon 19 Oct 2026 07:55:25 +0000
ROA not before: Mon 19 Oct 2026 07:55:25 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 139043
IP address blocks: 202.66.180.0/24 maxlen: 24
202.66.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.crl
rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGtPQu6X90iOwgtj2LGq9tQtnKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91523FF, serialNumber=606B4F42EE97F7488EC20B63D8B1AAF6D42D9CA7
Validity
Not Before: Oct 19 07:55:25 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ad5cced-f12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:77:7d:d6:a2:4f:73:81:17:86:27:b1:45:97:
36:98:1d:b5:e4:d1:95:ad:58:e6:0e:4d:56:16:11:
fb:e7:36:7e:4f:fb:05:17:22:17:1c:9d:66:74:ef:
1b:d6:cd:9c:9d:1b:a8:dc:51:16:09:47:c9:9b:48:
30:95:6d:53:dd:9c:27:32:fb:d2:04:83:0e:02:76:
ee:92:e8:c2:26:f9:ba:31:24:e8:92:35:2d:96:12:
f7:19:f8:41:73:c4:c0:c2:e6:2e:70:b4:18:68:6a:
76:c8:ae:d7:20:d9:15:27:de:52:62:34:b4:ba:37:
1a:3c:b3:98:f2:18:eb:f9:40:92:78:27:9a:0a:2c:
7b:bb:5a:23:3a:78:2c:3d:fd:67:99:d9:79:b2:fd:
f3:d4:34:56:20:10:f0:d2:47:cf:7b:cd:03:6f:ce:
f4:72:fa:12:9e:f4:76:13:84:26:61:d5:80:23:d8:
52:a2:bd:b2:39:e2:f7:d4:04:e8:34:a3:5f:d2:5f:
e9:ad:c7:72:42:0a:d9:51:92:a7:4b:91:f7:1d:48:
9d:d9:37:1a:ef:1c:ad:52:37:f9:bc:f1:c4:6a:4e:
60:75:68:e4:78:5b:a1:1b:2f:25:01:24:49:a3:a5:
0c:fa:1d:41:a2:f9:9b:5c:39:a9:75:dd:9e:86:40:
6b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A1:21:42:10:0E:8B:65:55:45:55:0C:7D:26:6F:10:0E:FF:F6:53
X509v3 Authority Key Identifier:
keyid:60:6B:4F:42:EE:97:F7:48:8E:C2:0B:63:D8:B1:AA:F6:D4:2D:9C:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGtPQu6X90iOwgtj2LGq9tQtnKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/720ED6F487CB11F0B605C67DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.66.180.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:17:2f:79:f7:eb:90:8f:a2:20:c1:4d:96:09:7f:a8:a6:79:
79:34:15:3f:c0:77:44:7c:dd:8d:02:70:f6:e6:1c:48:5e:ad:
73:02:8c:8c:a3:c5:44:d2:ef:6d:b6:6a:57:4f:56:72:b2:8e:
35:58:39:ae:4d:9c:6a:c1:6f:81:96:e2:12:96:38:04:1c:7e:
15:94:c9:95:63:a1:24:3a:4a:b1:69:65:f7:28:65:20:60:06:
78:00:02:31:7e:34:84:66:d7:d5:b2:73:41:55:09:a0:5a:af:
45:c9:ad:14:a2:8a:68:17:42:3f:95:1c:f3:36:8b:b4:25:c9:
fc:63:c0:14:3b:72:a2:dd:e3:d2:b4:9f:26:09:83:78:ec:3a:
93:9a:d0:1b:7f:c3:46:e5:49:9f:2a:b6:08:7e:dd:ef:6d:a7:
cf:51:15:79:4d:0e:37:c4:2c:d1:c0:79:d5:44:43:94:aa:f9:
0a:4a:20:b7:01:cf:92:58:37:54:d1:19:3f:ce:89:eb:c8:fb:
65:01:50:cf:a5:16:d7:0b:ce:7c:c3:c7:6f:b2:5c:a7:60:df:
4c:bc:40:f0:94:4c:e0:a0:94:57:df:81:06:56:2b:43:d7:35:
4f:4a:86:ed:3d:77:89:9c:17:a3:0e:ad:1d:a4:6d:7a:ce:3e:
e1:2e:76:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:55:34 2026 by rpki-client