
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/8ADEE00C71AB11EFB9222180C4F9AE02.roa
File: 8ADEE00C71AB11EFB9222180C4F9AE02.roa (raw, json)
Hash identifier: LuBPyPQHcJhH6uaYn0DvZZt7tDQx0TiPHD++p8p9vBg=
Subject key identifier: 81:5A:3B:81:E8:90:BB:C6:D9:1B:BB:62:26:D5:A7:0E:D3:20:62:37
Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial: 0276
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/8ADEE00C71AB11EFB9222180C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:17:26 +0000
ROA not before: Wed 31 Dec 2025 04:24:55 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 9546
IP address blocks: 202.28.92.0/22 maxlen: 22
202.28.116.0/24 maxlen: 24
202.28.117.0/24 maxlen: 24
202.28.118.0/24 maxlen: 24
202.28.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 05:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 630 (0x276)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Validity
Not Before: Dec 31 04:24:55 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a490c6-618e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:30:ec:f4:fb:23:8c:ef:3d:ff:34:1e:38:44:
29:98:0d:37:80:1a:77:4e:7f:05:8b:12:10:7c:14:
ee:e1:8a:a5:ac:0b:4b:ce:59:db:27:81:f0:22:4c:
8b:f7:f1:27:8d:96:da:85:5b:f5:bd:af:e3:c8:79:
15:3b:b5:91:6a:78:38:95:1e:02:3e:ad:40:7d:23:
69:b7:c2:a4:84:65:f0:ea:28:3c:98:6e:3c:52:37:
d4:ff:68:5f:69:08:dc:bf:03:3d:71:1b:58:59:2e:
68:99:3f:13:ea:fa:d7:35:da:74:2b:30:17:13:05:
d9:85:15:58:2d:44:27:c5:5b:f5:5b:17:56:b6:7d:
61:17:42:50:8c:ce:98:2e:84:77:4a:2f:50:0b:42:
fc:b9:7b:2c:fa:7c:d3:59:7f:20:d6:c9:56:d5:17:
b1:af:62:70:8c:26:8e:c5:2b:50:3a:f5:e5:98:74:
aa:8a:56:ce:4d:e4:3c:2d:4f:10:30:c5:4a:3a:23:
a8:ce:3d:07:b7:fc:a4:39:78:57:cf:1f:cb:77:e9:
39:64:ad:dd:73:a1:58:96:41:30:da:24:94:20:4b:
8c:4b:1f:fc:24:b9:43:74:0b:c9:13:77:5d:86:60:
dd:43:62:d4:b0:a5:ca:19:2a:ab:9f:03:86:f8:7e:
02:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5A:3B:81:E8:90:BB:C6:D9:1B:BB:62:26:D5:A7:0E:D3:20:62:37
X509v3 Authority Key Identifier:
keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/8ADEE00C71AB11EFB9222180C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.28.92.0/22
202.28.116.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:1b:33:27:d9:88:f8:5b:56:bf:26:49:09:a4:10:3f:5e:62:
e0:54:33:5f:8d:8f:17:a6:c6:b3:15:5c:48:4d:3f:a6:dd:d8:
5a:d0:27:75:6d:c3:06:12:07:01:90:0a:15:e7:2c:2a:6c:1d:
b4:ad:6c:50:d7:74:42:77:2f:ac:7b:48:c3:1d:e6:92:12:d4:
e1:d0:07:bc:21:42:27:68:43:de:fd:03:11:07:05:73:54:eb:
46:a8:bc:1a:58:81:03:a1:cf:ee:98:50:fa:d2:01:9b:f1:0d:
97:7f:90:61:7d:c5:6c:55:27:96:5f:71:bd:80:6e:4e:05:a6:
4a:0d:73:03:95:e0:dc:d8:92:61:46:a2:66:c1:c4:ae:32:9e:
02:67:3b:34:a6:b6:42:d2:d3:4a:ab:3f:eb:88:2a:c0:f1:9d:
4f:8a:c9:0e:95:f9:d6:6e:08:4a:39:86:90:c6:06:8f:f9:fe:
3d:9f:52:81:3d:9a:48:45:87:9e:4d:77:2e:60:38:22:d5:d1:
0f:22:04:27:28:cd:05:bd:ad:2b:cb:99:31:50:de:99:42:a1:
b9:ab:cf:70:a7:b3:b8:03:3c:21:22:17:5a:d7:ce:d8:ed:32:
31:53:4d:4d:ef:e2:f1:99:08:30:55:80:47:c4:34:34:42:0d:
04:55:e9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 15:25:53 2026 by rpki-client