
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F851511E721511EFA7D82D3EC4F9AE02.roa
File: F851511E721511EFA7D82D3EC4F9AE02.roa (raw, json)
Hash identifier: toQDnGI394sLknkqeKKnE8l7blSkBhno/Eijkaniz0g=
Subject key identifier: 45:C1:6B:12:91:A4:5A:1C:01:2E:86:9A:BF:90:75:69:95:28:EB:0C
Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial: 0275
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F851511E721511EFA7D82D3EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:17:25 +0000
ROA not before: Wed 31 Dec 2025 04:24:54 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 9533
IP address blocks: 202.28.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 04:45:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 629 (0x275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Validity
Not Before: Dec 31 04:24:54 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a490c5-e49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:62:d8:22:d5:8b:59:cb:26:36:68:aa:ed:1b:
e8:16:c4:9f:28:bd:ff:97:5c:8b:7a:9a:8f:2b:c7:
82:26:67:54:41:de:b0:f4:38:d0:fe:fb:7f:d0:ac:
70:44:5a:44:3e:0e:05:ff:e4:85:57:20:b6:5e:3c:
ce:ac:dd:81:7b:28:36:29:5a:91:16:c7:ea:cd:85:
c2:82:3e:df:b1:8d:09:a0:60:d6:69:f7:24:77:e2:
08:e0:20:39:f5:70:b7:3d:02:8e:9f:5d:3d:1a:0c:
38:66:65:55:22:3c:bd:bb:17:01:12:b8:13:59:ae:
d0:79:4c:c0:a5:4d:33:9e:9b:85:f5:d7:07:35:6a:
e6:de:6d:2e:62:9c:b0:63:4b:bc:be:b7:90:90:d3:
f5:fe:7f:5f:99:79:cf:6b:82:5d:8b:c6:c4:2a:80:
1b:c8:d8:ff:fb:b8:af:51:6f:86:88:21:e1:5b:11:
e4:95:99:4b:9f:5b:07:70:b5:3f:58:ed:84:6b:ab:
39:b6:45:c6:c1:0e:19:8e:36:d3:57:15:19:38:43:
56:2b:13:5d:fd:0c:50:11:c5:80:c2:15:0a:d7:81:
c7:41:b0:bb:99:cf:ee:3e:d7:72:17:0d:01:eb:3f:
30:c7:68:37:34:b6:78:18:3c:3f:2d:56:a6:87:9c:
00:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C1:6B:12:91:A4:5A:1C:01:2E:86:9A:BF:90:75:69:95:28:EB:0C
X509v3 Authority Key Identifier:
keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F851511E721511EFA7D82D3EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.28.17.0/24
Signature Algorithm: sha256WithRSAEncryption
14:36:c9:25:12:8e:b4:9d:71:80:da:3e:63:44:c5:97:9c:31:
f2:4d:d2:b6:19:8d:97:17:78:21:b2:01:93:fa:7b:97:79:d2:
1d:62:b7:93:6c:3a:0d:34:b8:82:3c:e4:f2:22:04:f7:1c:df:
a6:f5:fc:ff:a1:cf:b4:0b:84:bd:db:9c:0b:a8:72:ea:3b:57:
25:70:22:08:d3:44:aa:a6:5e:8d:df:57:f1:a0:53:7a:93:50:
ac:39:71:2b:3c:01:de:a2:27:24:65:45:6a:62:65:a2:e2:84:
39:95:c2:11:ef:25:f5:ed:f1:38:d9:f5:8a:14:07:9d:ea:24:
3d:80:dd:5b:4f:70:01:f9:0f:f6:da:74:60:57:ee:5b:78:f9:
30:79:e2:0b:d6:7c:80:66:34:27:33:15:e1:29:4b:b3:9e:65:
1b:12:a6:3e:38:8b:a2:0d:f2:4c:58:3a:c7:4c:f1:b1:65:53:
32:73:33:b1:f3:b7:be:19:cc:b7:0b:9f:59:51:60:e2:5a:31:
1f:c8:0a:5a:40:b2:db:f3:f7:fe:25:45:40:75:77:f4:ff:78:
2a:4b:48:4d:22:f4:8d:d5:a6:a3:15:85:f8:f9:10:c9:33:e3:
4f:29:2c:87:b7:f4:38:d7:c4:23:96:3a:0f:d3:3f:69:b3:fe:
09:c1:6f:10
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB
MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDU0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTBjNS1lNDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu2LYItWLWcsmNmiq7RvoFsSfKL3/l1yLepqPK8eCJmdUQd6w9DjQ/vt/0Kxw
RFpEPg4F/+SFVyC2XjzOrN2Beyg2KVqRFsfqzYXCgj7fsY0JoGDWafckd+II4CA5
9XC3PQKOn109Ggw4ZmVVIjy9uxcBErgTWa7QeUzApU0znpuF9dcHNWrm3m0uYpyw
Y0u8vreQkNP1/n9fmXnPa4Jdi8bEKoAbyNj/+7ivUW+GiCHhWxHklZlLn1sHcLU/
WO2Ea6s5tkXGwQ4ZjjbTVxUZOENWKxNd/QxQEcWAwhUK14HHQbC7mc/uPtdyFw0B
6z8wx2g3NLZ4GDw/LVamh5wAawIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEXBaxKR
pFocAS6Gmr+QdWmVKOsMMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF
ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0
U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvRjg1MTUxMUU3
MjE1MTFFRkE3RDgyRDNFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyhwRMA0GCSqGSIb3DQEBCwUAA4IBAQAUNsklEo60nXGA2j5jRMWX
nDHyTdK2GY2XF3ghsgGT+nuXedIdYreTbDoNNLiCPOTyIgT3HN+m9fz/oc+0C4S9
25wLqHLqO1clcCII00Sqpl6N31fxoFN6k1CsOXErPAHeoickZUVqYmWi4oQ5lcIR
7yX17fE42fWKFAed6iQ9gN1bT3AB+Q/22nRgV+5bePkweeIL1nyAZjQnMxXhKUuz
nmUbEqY+OIuiDfJMWDrHTPGxZVMyczOx87e+Gcy3C59ZUWDiWjEfyApaQLLb8/f+
JUVAdXf0/3gqS0hNIvSN1aajFYX4+RDJM+NPKSyHt/Q418QjljoP0z9ps/4JwW8Q
-----END CERTIFICATE-----
Generated at Sun Mar 15 05:50:58 2026 by rpki-client