
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/2D90FD2CBCCC11F19ABD13383311F970.roa
File: 2D90FD2CBCCC11F19ABD13383311F970.roa (raw, json)
Hash identifier: enORr+OQA4Q3cdUOGHVJP+2SyD/k7Oy+3tQz7do69XI=
Subject key identifier: F5:5B:49:90:D7:8F:FD:A4:35:5B:E5:39:F7:5A:36:4C:3C:88:98:2E
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 378B
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/2D90FD2CBCCC11F19ABD13383311F970.roa
Signing time: Wed 30 Sep 2026 12:40:55 +0000
ROA not before: Wed 30 Sep 2026 12:40:55 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 141215
IP address blocks: 202.142.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 14:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14219 (0x378b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Validity
Not Before: Sep 30 12:40:55 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6abd0357-35df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bb:0c:5e:25:ca:b6:d5:c4:d1:fd:e2:cc:fd:
14:43:a4:5f:ab:61:85:e6:69:5e:35:ef:58:69:30:
24:4c:5c:51:cc:aa:2b:8e:0d:ce:e6:7d:28:cd:ce:
6b:d6:5c:de:4d:d9:20:71:9c:00:21:39:67:8c:83:
76:1f:d7:48:f8:81:64:ab:76:64:bc:ba:e0:6e:cf:
ae:22:4f:ba:21:2e:6d:c1:d6:5c:64:50:b6:21:22:
2b:e6:00:c1:a2:4c:cb:d4:c8:76:bd:94:8c:fb:91:
c5:b7:a7:05:b4:f2:09:b2:e1:d6:99:08:20:23:cf:
2e:e1:93:db:41:60:24:36:2d:41:32:52:20:b0:ae:
45:0a:ad:c5:7b:99:0b:de:30:b0:43:b0:b1:f8:e5:
a6:a4:ac:d8:1b:83:1c:26:a3:39:8f:da:bb:ee:ae:
ae:e0:2f:d6:d9:a8:8e:5b:49:73:e9:4f:02:1b:39:
85:ef:6e:42:4b:00:f2:f0:e2:c3:62:01:cc:22:46:
e3:41:3b:33:4e:71:81:17:46:f2:a7:0f:f4:bf:c6:
07:56:17:5d:f3:32:94:e5:84:1f:e3:a4:4b:06:99:
4c:85:b1:ec:34:ec:d1:3d:f9:c3:56:c1:62:02:99:
fb:a4:6b:0a:28:94:ae:b8:9c:48:4a:c3:82:14:7e:
b3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5B:49:90:D7:8F:FD:A4:35:5B:E5:39:F7:5A:36:4C:3C:88:98:2E
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/2D90FD2CBCCC11F19ABD13383311F970.roa
sbgp-ipAddrBlock: critical
IPv4:
202.142.155.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:95:65:2a:18:ce:bc:3b:d4:19:50:b0:f3:8b:cc:06:3e:ca:
4b:4c:03:bf:df:b6:18:b2:51:ad:38:99:34:e2:3e:0e:a0:8c:
90:8b:22:ce:48:68:58:bc:16:19:94:a8:ea:1e:19:08:e3:27:
29:ab:af:ec:e0:84:9a:80:50:73:f1:9e:98:1e:c2:59:d0:90:
89:5b:7b:a0:62:04:d1:55:ae:16:01:96:07:d9:82:6a:38:57:
16:83:04:ce:1a:de:f1:5f:6a:79:9b:e5:cd:c8:5a:00:3e:49:
06:a1:51:d4:0e:df:ad:fc:d7:55:e3:c7:e2:54:32:c5:5c:d9:
1e:a8:c6:d1:b4:3f:60:bd:1c:1f:a4:68:a0:c1:cd:81:e6:ed:
5b:d3:13:d8:f3:4e:63:b1:6a:ad:1c:36:76:bc:be:2f:24:4f:
d1:f8:b6:b4:29:1c:87:30:7d:33:35:43:2c:03:dd:c5:d5:f2:
6f:c9:2f:25:8e:72:e0:b3:e7:4c:ae:0c:3f:39:83:7a:1c:69:
b3:8b:43:4c:0b:da:66:61:bb:9d:09:d5:62:87:bb:af:86:70:
6f:ea:a7:ef:ca:ac:99:d8:f5:e2:f7:ab:02:20:c4:77:23:c2:
41:e4:9d:e4:39:47:40:30:6c:23:af:5c:0e:3b:7e:76:05:dd:
66:89:c3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:59:17 2026 by rpki-client