
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4EAF8364839211EE9CAD6C0DC4F9AE02.roa
File: 4EAF8364839211EE9CAD6C0DC4F9AE02.roa (raw, json)
Hash identifier: D1B89qYGk0OqOMmQKg7M0JKqyYWlGZVa4uDUA1RVZRo=
Subject key identifier: 9B:76:84:8D:8C:E9:C6:BE:41:43:74:67:94:24:40:93:77:87:4F:FB
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 5F07
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4EAF8364839211EE9CAD6C0DC4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:20:44 +0000
ROA not before: Thu 28 Aug 2025 14:57:35 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 55317
IP address blocks: 202.74.58.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24327 (0x5f07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:57:35 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a60d3c-1e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f2:9c:8d:c8:69:e4:d6:52:29:d1:46:d7:1d:
92:b2:7f:70:4a:11:77:15:ed:57:41:24:41:60:c6:
1f:da:91:88:6d:4f:18:d5:95:35:e1:b8:92:49:4b:
b1:94:c8:79:5e:1a:80:ac:bb:0c:df:55:e2:c7:61:
6a:ac:f7:e0:85:83:a3:a2:12:5f:51:1d:c5:e4:d4:
ae:6f:80:2f:04:47:b6:8b:6b:fc:3b:69:a4:6c:42:
da:70:e3:e3:80:8d:de:e5:f3:8d:4e:ac:0b:34:98:
cf:ee:19:e0:07:23:da:33:36:ff:ac:7d:e2:6c:54:
c0:cc:ce:05:2f:07:3c:18:05:82:cf:5c:9a:9a:ba:
f6:9a:b5:3a:a9:d0:aa:b3:be:3f:09:99:37:e7:0f:
fa:5c:1c:58:50:1b:2c:a9:b6:54:5a:b5:ea:5c:23:
4d:91:a2:25:c8:b7:e7:58:5b:d6:d3:66:db:4b:61:
82:61:42:6d:ba:b0:ae:ff:d5:00:1b:fd:3f:35:6f:
c3:18:dd:9f:04:13:ab:b6:bb:40:a4:e7:c6:5b:6f:
14:28:56:6d:04:d3:73:aa:ea:f6:20:d6:dd:86:bc:
ee:cf:51:d1:0f:f8:30:09:22:e7:0d:12:c9:18:63:
78:13:79:a2:97:5a:c1:d0:3c:70:c0:87:de:03:54:
c8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:76:84:8D:8C:E9:C6:BE:41:43:74:67:94:24:40:93:77:87:4F:FB
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4EAF8364839211EE9CAD6C0DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.74.58.0/23
Signature Algorithm: sha256WithRSAEncryption
09:e8:3e:e2:7b:41:f0:b4:a5:86:ad:4e:91:ca:f5:ab:8d:96:
9a:da:a6:8d:7c:b5:97:77:38:42:43:d5:90:15:2a:75:7f:b0:
71:5c:a0:fb:75:d1:10:10:20:cb:c6:9c:57:9a:ed:54:b5:8a:
9a:45:94:0b:61:6f:68:9c:4c:f0:30:1a:2a:f7:82:6e:d5:56:
4e:34:a0:db:e1:b0:7f:a4:31:36:ee:6b:07:c8:9b:5a:a7:82:
83:7f:3b:90:9e:63:f2:92:82:dd:9c:a8:df:a6:2d:a2:1c:ff:
ff:be:3e:83:b1:87:e6:22:86:42:ce:b4:2d:59:d0:39:92:56:
4e:91:9b:2c:66:bb:11:c2:e8:1b:ec:42:6b:e1:4b:17:34:ba:
6a:94:4d:1d:11:71:1d:a2:b0:ff:ef:14:63:ad:8c:48:fb:49:
cd:89:a1:f9:0c:a2:0c:e2:f6:63:28:3f:a5:f4:e9:e4:de:f0:
7b:83:df:64:23:f7:6f:56:cb:41:98:8e:57:41:4b:1f:89:de:
3c:53:b3:81:a6:f9:a2:54:57:f2:5e:35:63:b4:e8:0b:f3:b7:
57:ad:df:d2:c3:c6:e1:9f:e0:90:b2:30:24:b8:38:6b:bd:10:
8a:da:8b:a6:77:88:12:df:9b:23:ac:ce:0c:57:c9:8b:2c:c3:
17:f4:ec:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:46:24 2026 by rpki-client