
$ rpki-client -vvf rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/99E2D388E9C411EFAFABDD0BC4F9AE02.roa
File: 99E2D388E9C411EFAFABDD0BC4F9AE02.roa (raw, json)
Hash identifier: U5XpQ0ehMGdgmuN8+HXp5RjG+d9wkF5svI623aYi6Vk=
Subject key identifier: 84:89:26:AD:CF:CE:55:00:C7:92:3D:BF:BD:8D:4E:C8:16:BA:1E:9E
Certificate issuer: /CN=A91627F9/serialNumber=F375476F3235DC3D525171E2BE9211638E490847
Certificate serial: D2
Authority key identifier: F3:75:47:6F:32:35:DC:3D:52:51:71:E2:BE:92:11:63:8E:49:08:47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/99E2D388E9C411EFAFABDD0BC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:22:42 +0000
ROA not before: Tue 27 May 2025 07:45:57 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 4764
IP address blocks: 203.0.120.0/24 maxlen: 24
2001:df5:1bc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.crl
rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 06:04:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210 (0xd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91627F9, serialNumber=F375476F3235DC3D525171E2BE9211638E490847
Validity
Not Before: May 27 07:45:57 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a58f22-d99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c0:aa:23:3d:f5:c3:29:b6:58:36:cb:1e:36:
69:2d:11:75:78:d3:35:fb:9c:e7:13:77:a5:8a:e0:
9b:71:a8:00:8b:14:32:ca:a7:e7:ca:5d:44:30:18:
87:e6:8c:57:68:60:d3:30:8a:66:f5:c3:f6:83:f6:
18:9f:32:ff:00:11:e9:2e:e8:06:d8:b7:6a:a3:ce:
5c:e9:ef:21:ed:55:56:88:e2:a6:4b:95:7c:6b:13:
ca:03:46:6c:8e:69:c7:7c:3d:2b:c8:1a:24:e2:1b:
68:ea:b4:44:0b:ba:a6:d4:7d:0e:9b:df:d9:18:99:
4a:07:ea:f7:ea:9b:20:5d:e4:54:b1:e4:dd:86:e8:
c4:d2:36:62:95:dd:c3:d9:4c:c2:62:89:82:42:5d:
91:3c:71:d8:f5:17:cb:1d:12:7c:5a:de:e5:ab:f3:
ca:67:63:96:a6:2d:4a:aa:86:dc:36:0f:99:51:11:
9d:9d:17:71:64:d8:aa:d8:c0:9f:ba:72:b7:aa:56:
e5:28:8a:83:05:4d:39:a5:63:4b:75:f9:59:22:80:
08:bb:be:ac:bd:7a:bc:16:f3:73:4b:08:f9:0f:a4:
79:85:2a:82:a6:14:f5:51:b4:df:89:a3:2f:e5:46:
c8:f7:8c:25:4e:75:13:3c:37:7c:db:fb:b7:f0:2a:
dd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:89:26:AD:CF:CE:55:00:C7:92:3D:BF:BD:8D:4E:C8:16:BA:1E:9E
X509v3 Authority Key Identifier:
keyid:F3:75:47:6F:32:35:DC:3D:52:51:71:E2:BE:92:11:63:8E:49:08:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/99E2D388E9C411EFAFABDD0BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.0.120.0/24
IPv6:
2001:df5:1bc0::/48
Signature Algorithm: sha256WithRSAEncryption
15:59:2d:e9:2f:6b:a4:26:e4:56:d1:8c:e1:c7:7b:46:ff:ce:
7d:96:32:45:c7:75:5e:c5:d5:2c:08:20:ac:ec:8c:fe:06:32:
a5:af:80:92:89:15:1f:ca:a3:e6:f1:48:44:83:0f:2a:e7:42:
d0:8a:15:00:14:31:fa:bd:43:41:82:b5:24:8e:15:10:a6:cd:
1d:b7:8e:81:8d:3b:0d:28:f4:ec:12:6b:11:ca:73:54:20:42:
f8:d1:ac:2b:3d:1e:cb:f5:6b:3a:cd:3d:d5:f7:b6:42:b2:af:
5c:a4:cf:36:2b:fc:5d:f4:0b:26:f3:a3:d3:f4:38:b2:42:bb:
64:81:a6:a7:fe:cb:94:00:ea:c8:a8:1a:11:86:65:a0:66:74:
06:0c:a5:8c:52:24:79:84:ad:02:cd:cd:26:02:d2:93:0f:f2:
b3:13:07:f2:bf:08:3f:a2:4e:5b:02:1a:e8:3e:01:cf:ac:7f:
ec:b0:64:9e:95:bd:3b:b2:c6:37:c5:d3:39:c2:fc:a4:14:2f:
80:ed:e0:12:f5:05:bb:cf:a4:6d:5b:b3:ab:2e:92:f6:9e:53:
91:49:aa:e8:42:c3:92:08:b7:a8:56:f3:85:15:3b:2a:61:1f:
23:f0:9c:f4:3f:09:b7:44:92:a8:e7:25:35:b4:e8:2b:35:f0:
8c:ee:f2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 00:04:44 2026 by rpki-client