
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C829F090459C11EF81933157C4F9AE02.roa
File: C829F090459C11EF81933157C4F9AE02.roa (raw, json)
Hash identifier: ubx6ILFqTdCnvIv2eO4FA1WdSxDmuzI4m2gh8CDmvqc=
Subject key identifier: 20:DF:19:E3:86:69:72:5D:FF:F2:50:09:85:27:8F:7B:07:DF:8E:EB
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6EFF
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C829F090459C11EF81933157C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:35:16 +0000
ROA not before: Fri 02 Oct 2026 15:35:16 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 38249
IP address blocks: 202.87.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 10:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28415 (0x6eff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:35:16 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcf33-2f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7c:ad:c8:06:db:fa:fd:5c:df:5e:5d:ef:d2:
27:c2:c0:08:eb:8c:1d:08:eb:af:20:36:21:59:51:
ba:24:9d:db:38:9e:7f:72:ca:f4:0c:73:dd:a8:fd:
86:b8:c1:96:9c:4b:1a:ec:a8:ef:5d:8e:11:f6:d2:
07:31:6b:bd:51:c9:97:da:5f:64:95:3e:dc:40:5b:
b2:f8:f1:41:8f:5e:dd:30:55:97:ce:60:10:0d:a6:
80:64:c9:f8:15:7b:9f:3d:6e:0a:45:90:6d:54:94:
99:98:04:21:c7:55:d5:a0:07:c7:90:fc:af:7c:2b:
c7:24:6e:f5:fd:b3:b0:36:aa:7e:7c:19:09:17:a7:
42:f8:36:b5:52:21:75:3e:8e:bd:e2:ba:d7:80:de:
0b:b0:f4:9e:4a:5e:88:89:be:09:16:43:c8:16:46:
23:b1:a5:5c:de:e2:dd:c7:63:d6:4a:34:ea:9a:49:
18:e0:51:b3:dd:34:cf:fd:5f:6f:a1:21:25:39:fd:
46:5f:5d:a9:6f:7b:fc:fa:98:09:13:58:64:59:ec:
c9:2e:84:31:80:3d:88:95:a8:e4:f6:69:6f:a4:b1:
f9:16:ab:b1:82:2b:b8:f3:39:2a:bc:3d:10:c6:70:
61:12:6b:75:0c:98:47:9d:12:64:ce:c8:b9:78:a2:
08:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DF:19:E3:86:69:72:5D:FF:F2:50:09:85:27:8F:7B:07:DF:8E:EB
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C829F090459C11EF81933157C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.87.212.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:d3:64:99:fe:1d:74:ee:85:be:e1:0b:1b:4e:de:62:7c:9c:
ef:9d:0f:cc:48:7f:31:a2:2b:3b:17:e1:88:ef:e6:d8:df:4a:
28:72:74:f8:15:94:7d:96:52:0e:6c:01:6c:4b:f5:1f:9c:c3:
c2:1a:32:bb:ae:a5:f4:7f:3b:6a:dd:28:b4:3d:5b:fa:3f:d8:
f6:da:c4:b4:2e:13:8e:7a:0e:d6:bc:3e:66:90:3d:bb:30:13:
00:16:9c:35:f6:47:58:4b:04:ca:8f:e7:2a:16:36:f4:14:98:
51:4a:b8:9a:d7:3c:ab:4a:5d:bd:26:61:22:a9:60:01:d8:f0:
e6:4f:b9:26:54:50:e9:2c:7c:db:b4:b9:0e:7c:51:68:38:65:
b0:64:01:e3:69:9f:91:2e:e8:e2:81:af:0c:00:5a:b8:24:00:
5a:6b:09:e8:a5:1c:a7:32:d9:af:46:9c:80:25:6c:e4:35:be:
70:0b:b1:10:68:ec:7f:88:ad:f5:b3:d2:3c:e5:81:dc:16:fe:
57:0d:51:02:14:c2:be:64:eb:ca:4f:7a:d3:a0:4a:5d:b8:2f:
9d:95:d6:71:9e:b2:90:69:e0:c3:cc:0c:cb:79:9b:9f:3a:81:
9f:fe:b7:5a:10:38:bd:92:75:32:5f:22:5d:3c:34:90:4d:d4:
a7:b2:53:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 15:41:37 2026 by rpki-client