
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/FD57EA90508511EEBA4C0E2BC4F9AE02.roa
File: FD57EA90508511EEBA4C0E2BC4F9AE02.roa (raw, json)
Hash identifier: vDdvCJ7Ilkj6j3EyUUG3A6VDOaQ9973VRteQFzrr2bg=
Subject key identifier: CD:1A:86:A1:DB:1A:5E:89:36:E6:40:64:0A:0E:2B:BD:13:14:68:02
Certificate issuer: /CN=A91A2265/serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32
Certificate serial: 022E
Authority key identifier: BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/FD57EA90508511EEBA4C0E2BC4F9AE02.roa
Signing time: Fri 31 Jul 2026 04:52:06 +0000
ROA not before: Fri 31 Jul 2026 04:52:06 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 9334
IP address blocks: 203.167.0.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl
rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 02:39:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 558 (0x22e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2265, serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32
Validity
Not Before: Jul 31 04:52:06 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a6c29f6-67ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:50:1a:83:3f:f1:71:8e:35:0c:50:9b:76:
64:61:05:8a:74:af:3e:1c:96:9c:fd:72:cb:0d:48:
a0:a6:8a:06:5a:6a:cd:d8:74:76:41:98:dc:28:7f:
4d:c1:4b:43:a2:29:d5:28:91:b7:ae:0f:62:7d:b2:
8a:91:1c:3b:fd:3e:30:ab:a4:b2:1e:ef:d2:77:6b:
d0:24:a3:0a:9c:81:ad:a9:f4:20:a2:4a:8a:35:1d:
e5:79:94:f4:29:d4:23:8f:f6:bf:df:37:d8:2b:bd:
dd:6c:50:c6:0a:b9:6e:79:c1:af:9a:b4:31:37:df:
34:d2:fa:93:5b:90:91:a1:6d:4c:33:5d:a0:fa:4b:
89:de:d3:0f:17:0c:45:a3:70:2f:b5:b9:85:46:b0:
31:a2:b9:97:fc:59:dd:6f:12:c5:a5:b8:b4:a6:13:
c2:9e:8a:65:f5:90:98:7b:13:48:d5:91:33:0f:5f:
7a:3e:69:81:e0:7e:fb:26:8d:6b:42:aa:50:ae:e9:
3b:96:fd:b8:0a:77:e2:fa:5f:1a:e6:85:b9:fe:c5:
fe:d8:47:96:94:3f:9e:31:66:3d:66:32:da:68:c5:
66:93:b8:3f:ca:b1:a7:03:f5:2d:c9:59:c3:0d:e9:
8f:40:b9:33:cf:06:f4:c4:6d:9c:bd:8f:3f:79:32:
3f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1A:86:A1:DB:1A:5E:89:36:E6:40:64:0A:0E:2B:BD:13:14:68:02
X509v3 Authority Key Identifier:
keyid:BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/FD57EA90508511EEBA4C0E2BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.167.0.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:2b:1b:50:d0:f4:5d:29:d7:b4:9b:20:2b:e3:74:8c:a4:e3:
a4:7c:55:6c:26:92:45:81:1a:8a:04:29:41:a5:15:c9:c4:3b:
83:8c:fa:a6:f7:d8:4e:cb:16:1b:15:2d:0a:96:6a:28:4b:58:
86:34:c7:73:77:9c:1f:4e:3d:63:a0:3c:36:5f:7a:f8:0d:5d:
6d:af:fa:f0:84:24:af:01:58:85:9a:a8:56:ed:f9:68:3f:8d:
24:3f:8f:34:75:1b:e8:e3:a4:f4:37:c2:ab:35:e8:c0:dc:3c:
20:ac:ca:cc:c7:c1:f1:2f:a6:fa:81:07:42:70:b3:90:2b:85:
86:ab:98:f8:4a:8c:a2:d5:2a:86:f9:41:f4:8b:4d:26:83:80:
59:62:ba:5a:06:2c:07:b8:c1:20:40:9b:d8:d6:52:84:46:0b:
82:23:41:26:38:c2:4d:af:5d:7f:e0:4c:5f:5e:f1:18:13:18:
46:b8:a8:fb:f5:37:8b:a7:14:c2:3e:aa:94:e9:13:00:97:0c:
fe:e8:a1:1b:7b:d2:41:1e:fe:35:9b:dd:3c:f1:9a:f2:39:b0:
60:24:2c:af:43:37:22:8b:57:0f:f9:f5:12:dd:6e:76:2d:53:
3f:fa:10:1d:21:c4:e9:ab:d5:59:61:35:de:9e:e2:17:5a:35:
a3:b4:c1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:05:34 2026 by rpki-client