
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/796CD35A5B5511EE8E4D2A39C4F9AE02.roa
File: 796CD35A5B5511EE8E4D2A39C4F9AE02.roa (raw, json)
Hash identifier: H4qSPCS4a424OujhWGbHGAYZCjn8O2kfiMo1t1dyle0=
Subject key identifier: 4E:F1:D4:2C:E3:DE:68:1E:B9:75:2C:CC:CE:9D:4C:BD:FF:BD:AD:AB
Certificate issuer: /CN=A91AD92A/serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F
Certificate serial: 01CB
Authority key identifier: 37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/796CD35A5B5511EE8E4D2A39C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:09:48 +0000
ROA not before: Sun 15 Jun 2025 03:32:25 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 8075
IP address blocks: 203.23.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl
rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 03:23:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459 (0x1cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD92A, serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F
Validity
Not Before: Jun 15 03:32:25 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a59a2c-5ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:ed:3b:02:bd:6c:83:67:02:0d:07:03:45:
a9:64:4d:ff:ff:b1:ae:4d:5f:c9:af:6f:a6:59:ed:
aa:68:b9:6d:57:15:9e:c4:86:6f:93:4b:19:8a:80:
79:64:50:25:d7:fb:84:b3:c3:3b:61:d6:d8:7c:50:
26:73:03:e5:14:71:7d:6a:a0:50:fb:aa:30:c2:64:
ee:06:08:06:c9:36:8a:68:94:02:64:4f:e5:ab:87:
ef:69:46:1d:77:72:a4:1a:8c:48:65:fe:25:98:7e:
39:f9:1e:48:6e:d9:25:3d:96:c5:20:b3:be:b6:fa:
53:4b:0d:d0:01:3b:0e:8a:d7:e1:a4:3a:ea:64:39:
f2:94:39:7c:de:31:b8:eb:f9:10:ae:ea:c7:84:8f:
e4:b5:ee:37:57:23:d4:91:f2:67:56:a2:a9:7c:f2:
69:9b:7b:ac:12:82:d6:3d:62:1d:1c:1a:fb:76:15:
0f:f1:39:c7:c8:53:d8:9d:d4:46:43:f7:f2:8c:dd:
01:59:f5:af:10:21:5a:54:67:9c:30:88:59:de:cf:
8b:ed:d5:ca:0e:e8:93:e0:4f:a5:43:39:42:b5:75:
9f:df:63:53:c8:33:67:ed:31:3f:1e:e4:1d:5c:c3:
18:24:1d:ee:e9:de:a7:df:ad:c6:2e:81:c9:bf:82:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F1:D4:2C:E3:DE:68:1E:B9:75:2C:CC:CE:9D:4C:BD:FF:BD:AD:AB
X509v3 Authority Key Identifier:
keyid:37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/796CD35A5B5511EE8E4D2A39C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.23.232.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:ea:8c:a6:92:54:e6:56:28:e2:21:e9:3a:26:1e:99:07:06:
f3:32:1a:4e:4f:02:dc:5a:66:41:91:cd:84:ae:08:49:49:d8:
ae:6c:16:c7:c2:45:92:ea:e5:63:21:c0:b5:b8:70:1c:cc:36:
7b:c3:1a:94:64:3e:1e:de:9f:33:64:db:ff:c4:17:55:98:41:
b4:d0:db:49:1e:c1:ee:8d:6e:b9:ac:04:2a:f3:4f:56:c0:90:
58:c9:38:44:35:28:e9:80:a9:1e:61:58:14:68:c3:d3:7f:fd:
bb:8e:16:9f:9d:88:f9:46:ab:21:0e:24:bb:69:dc:35:4e:d9:
93:a4:d7:d7:af:ea:4e:e1:10:0a:ae:f2:74:b8:0b:e1:c8:e0:
c3:42:c5:86:6c:e2:1e:52:55:26:c0:1a:5a:83:0d:3d:55:22:
6e:b5:e6:cf:64:ad:54:05:6c:ba:22:9d:13:69:28:6a:1c:89:
82:95:f1:e1:2c:08:0e:11:7a:e7:71:5c:1b:ac:5d:a5:ee:e8:
14:7f:1e:2c:7e:fe:8c:8a:82:02:54:af:6e:2d:b6:c0:fe:7b:
9c:6f:aa:b7:bd:70:bc:73:91:6a:45:da:e8:03:0f:1b:ec:e9:
3b:3b:20:4a:82:e0:20:5a:9e:13:a6:86:18:15:31:e7:e0:43:
2c:bc:f9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 19:16:13 2026 by rpki-client