
$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4D21FB36F7DB11EE92D1E11FC4F9AE02.roa
File: 4D21FB36F7DB11EE92D1E11FC4F9AE02.roa (raw, json)
Hash identifier: lhXPMVTt2UFIZj0lCq6prRReMQPmTP0Uw35+7SMlNXg=
Subject key identifier: 70:EB:B3:61:F2:97:A5:35:18:BA:36:56:46:B2:00:AB:35:D1:7C:0F
Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial: 36F5
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4D21FB36F7DB11EE92D1E11FC4F9AE02.roa
Signing time: Thu 30 Jul 2026 15:10:58 +0000
ROA not before: Thu 30 Jul 2026 15:10:58 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 17460
IP address blocks: 203.155.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Aug 2026 14:22:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14069 (0x36f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Validity
Not Before: Jul 30 15:10:58 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a6b6981-f42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0f:47:87:47:95:ee:81:cb:16:50:fb:8e:46:
5e:a4:46:13:f8:c5:2d:89:f9:bb:ce:ea:8e:5f:dc:
64:7d:f9:28:4f:2b:94:3a:d4:b8:24:1f:90:fa:68:
84:b5:1b:90:ec:74:22:29:54:bc:16:19:6e:fa:f8:
73:77:ba:77:39:09:3c:cd:f7:22:e9:7e:78:1e:49:
8e:5c:4f:8e:50:15:99:a2:2b:c7:e7:f5:36:9d:12:
bc:67:04:cc:43:8c:c2:2b:51:e8:c7:de:59:d1:43:
a8:9d:c3:45:8c:f2:92:51:c6:73:ab:7e:13:ac:54:
b7:72:7e:6b:a0:b0:62:12:8e:f7:fc:60:ee:6c:7e:
21:c7:f4:5b:42:22:da:e1:f2:fc:6c:b4:47:a3:f8:
85:00:00:b5:50:6e:0a:c0:f3:0b:87:73:9f:59:99:
67:7a:4e:67:a4:48:2a:9f:4e:0a:f8:52:b8:ea:1a:
2c:65:f7:4e:29:26:05:ad:c7:ab:de:d6:e0:cc:37:
8c:d5:04:48:2c:dc:9c:2b:a0:37:ec:8a:6a:b3:20:
c1:89:59:6c:9f:9f:87:56:f3:f6:f5:57:97:65:d2:
34:41:5f:2e:af:36:53:08:93:dd:df:d8:b8:72:8d:
48:75:73:99:af:0e:c6:ea:6a:f5:03:82:c3:a3:e3:
fe:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EB:B3:61:F2:97:A5:35:18:BA:36:56:46:B2:00:AB:35:D1:7C:0F
X509v3 Authority Key Identifier:
keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4D21FB36F7DB11EE92D1E11FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.155.47.0/24
Signature Algorithm: sha256WithRSAEncryption
61:f6:fc:9e:69:e1:61:0a:75:63:ae:78:04:aa:39:60:7e:fc:
31:23:2d:8b:54:11:89:2f:d2:55:55:4b:71:bc:98:ea:7a:5b:
9d:03:78:b7:3b:51:39:9a:cd:f7:14:36:d9:ce:a6:1b:7e:1f:
91:2a:09:ea:c4:4f:58:ef:97:4f:8f:90:89:d2:f3:d0:18:d2:
9a:b9:f8:be:9f:fe:8c:7c:84:31:34:2a:58:d7:14:1f:48:da:
36:1b:c8:2a:14:f5:87:f9:a5:71:11:22:04:08:0d:55:2e:fb:
fc:f3:de:be:10:5e:01:58:0b:fb:df:ee:e2:00:5d:05:62:07:
34:ed:d8:57:c1:09:1d:a0:1f:fc:b2:44:da:e9:3e:21:15:e3:
df:44:f8:45:84:ca:c2:08:04:66:2d:c0:38:75:96:bf:07:2c:
c2:06:71:0f:00:04:19:7b:7f:eb:93:33:4e:4b:43:fb:61:87:
fb:ac:f5:c4:39:da:d6:02:61:d1:c5:ad:ad:40:de:e4:be:ea:
72:4d:8e:49:80:34:5b:36:57:87:bb:99:6e:be:65:c5:e3:9b:
03:71:88:bb:8a:08:43:2d:ec:89:6b:94:d4:5f:63:b9:e7:76:
43:e2:ca:bc:01:1c:60:20:2d:46:a5:bc:64:da:d2:c9:71:b1:
3b:07:54:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 19:50:04 2026 by rpki-client