
$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/4B5E14FC96AD11EBA4AC9F7FC4F9AE02.roa
File: 4B5E14FC96AD11EBA4AC9F7FC4F9AE02.roa (raw, json)
Hash identifier: VgB5I6QMqxnBLBYIkLAYzulZt0i2loK6LJFS/QrdqBs=
Subject key identifier: 5B:D6:7A:17:40:43:8D:E7:13:3D:B2:E0:EF:49:B5:DE:14:23:83:7C
Certificate issuer: /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A
Certificate serial: 10B5
Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/4B5E14FC96AD11EBA4AC9F7FC4F9AE02.roa
Signing time: Fri 06 Mar 2026 18:25:05 +0000
ROA not before: Fri 06 Mar 2026 18:25:05 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 399151
IP address blocks: 203.17.72.0/24 maxlen: 24
2001:dcd:dd05::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl
rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 18:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4277 (0x10b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91919EA, serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A
Validity
Not Before: Mar 6 18:25:05 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69ab1c01-adbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:82:4a:15:dd:e4:b5:60:73:ad:a9:1a:db:5a:
89:a1:8a:1a:3c:1c:95:d7:da:e8:e0:0e:ad:df:4c:
fc:d1:57:d2:7c:15:4e:ff:69:30:e3:80:37:cd:50:
c7:2a:95:4a:2f:9f:64:4b:8b:6f:9c:3a:4b:86:b5:
f8:72:d5:94:6a:60:f0:ba:9a:c8:02:60:71:d5:4f:
d8:f0:c6:dd:90:ca:cd:ec:7c:9f:e5:39:1b:c0:39:
fa:ca:87:cd:0d:32:9d:73:27:9d:8c:42:c0:88:48:
cb:4b:01:3f:a2:60:30:64:28:80:db:34:53:60:f3:
9a:8d:2e:73:99:64:f9:d8:94:9f:10:c3:1b:a4:3a:
57:e6:73:3c:7e:f9:6a:85:ca:45:6b:2e:e4:12:32:
d7:f1:d1:bf:bf:0f:53:90:10:c4:e2:5a:29:14:1a:
c2:33:3d:97:bc:c4:54:09:e3:59:f5:f8:13:55:f2:
d5:bb:a6:d9:8f:df:ae:6f:fd:38:3a:09:8b:cd:7f:
e3:43:45:48:f8:70:28:e8:90:0a:f9:8e:d6:0a:ab:
d9:77:4d:8c:08:ed:7b:6f:3f:23:a0:e7:e1:fd:cf:
3a:d0:ec:de:de:bc:d9:e1:e5:b9:3f:62:8a:8d:c1:
0c:46:00:8a:e1:d9:91:8f:86:fe:1b:ab:3a:94:5f:
78:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D6:7A:17:40:43:8D:E7:13:3D:B2:E0:EF:49:B5:DE:14:23:83:7C
X509v3 Authority Key Identifier:
keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/4B5E14FC96AD11EBA4AC9F7FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.17.72.0/24
IPv6:
2001:dcd:dd05::/48
Signature Algorithm: sha256WithRSAEncryption
26:1e:d2:78:71:c1:e0:29:fc:17:47:6b:36:96:f6:cc:a7:f1:
8a:56:80:9d:2a:d0:11:ff:32:96:a2:12:ca:44:d7:b4:09:9c:
b6:32:60:b2:64:8e:4a:09:dc:8e:47:30:37:fa:8e:44:df:1b:
73:ff:bd:02:62:67:4f:e5:17:46:f4:ae:f6:c5:77:8d:2f:ee:
15:ee:ec:05:d4:7f:1d:bd:5a:61:23:ba:8a:c9:3f:f2:02:d5:
73:2d:0e:f8:80:d9:0e:c4:67:19:23:0c:36:bb:b3:15:86:ee:
e1:65:88:64:22:ff:1d:c9:5b:0c:72:18:83:ce:17:7f:97:17:
a2:78:75:27:eb:da:01:ac:48:48:dd:43:79:e1:f0:e4:50:2a:
91:42:42:cc:a8:2c:d5:6c:8b:3f:16:42:54:cb:52:44:4b:60:
5e:d6:15:2b:46:63:07:21:04:e8:ea:a9:85:04:07:5e:f4:41:
06:8d:16:69:6a:85:7c:f6:02:f7:50:3d:92:a1:ef:b4:23:fe:
b0:45:76:85:24:94:b8:f4:b5:18:07:11:a2:58:78:0c:5c:22:
d9:70:1a:94:0d:03:17:5d:61:15:c7:1e:56:c2:ff:21:be:31:
e9:0b:3c:10:15:a9:2a:2e:1d:24:67:75:ad:48:d7:1b:18:18:
2d:aa:73:dd
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICELUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTE5RUExMTAvBgNVBAUTKDdCMDFDQUNDMTcwRkU2QTYxQjIwMzA0MTg1RTg2ODk0
NkRGNzI4NUEwHhcNMjYwMzA2MTgyNTA1WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWFiMWMwMS1hZGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvYJKFd3ktWBzraka21qJoYoaPByV19ro4A6t30z80VfSfBVO/2kw44A3zVDH
KpVKL59kS4tvnDpLhrX4ctWUamDwuprIAmBx1U/Y8MbdkMrN7Hyf5TkbwDn6yofN
DTKdcyedjELAiEjLSwE/omAwZCiA2zRTYPOajS5zmWT52JSfEMMbpDpX5nM8fvlq
hcpFay7kEjLX8dG/vw9TkBDE4lopFBrCMz2XvMRUCeNZ9fgTVfLVu6bZj9+ub/04
OgmLzX/jQ0VI+HAo6JAK+Y7WCqvZd02MCO17bz8joOfh/c860Oze3rzZ4eW5P2KK
jcEMRgCK4dmRj4b+G6s6lF94BwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFFvWehdA
Q43nEz2y4O9Jtd4UI4N8MB8GA1UdIwQYMBaAFHsByswXD+amGyAwQYXoaJRt9yha
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTlFQS82RDQ2M0NGRTA0
RkQxMUVBODJDQ0NBMThDNEY5QUUwMi9ld0hLekJjUDVxWWJJREJCaGVob2xHMzNL
Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V3SEt6QmNQNXFZYklEQkJoZWhvbEczM0tGby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTE5RUEvNkQ0NjNDRkUwNEZEMTFFQTgyQ0NDQTE4QzRGOUFFMDIvNEI1RTE0RkM5
NkFEMTFFQkE0QUM5RjdGQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAyxFIMA8EAgACMAkDBwAgAQ3N3QUwDQYJKoZIhvcNAQELBQADggEB
ACYe0nhxweAp/BdHazaW9syn8YpWgJ0q0BH/MpaiEspE17QJnLYyYLJkjkoJ3I5H
MDf6jkTfG3P/vQJiZ0/lF0b0rvbFd40v7hXu7AXUfx29WmEjuorJP/IC1XMtDviA
2Q7EZxkjDDa7sxWG7uFliGQi/x3JWwxyGIPOF3+XF6J4dSfr2gGsSEjdQ3nh8ORQ
KpFCQsyoLNVsiz8WQlTLUkRLYF7WFStGYwchBOjqqYUEB170QQaNFmlqhXz2AvdQ
PZKh77Qj/rBFdoUklLj0tRgHEaJYeAxcItlwGpQNAxddYRXHHlbC/yG+MekLPBAV
qSouHSRnda1I1xsYGC2qc90=
-----END CERTIFICATE-----
Generated at Fri Mar 13 10:38:19 2026 by rpki-client