
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/B00A68E6014A11EFA8F03B5BC4F9AE02.roa
File: B00A68E6014A11EFA8F03B5BC4F9AE02.roa (raw, json)
Hash identifier: C1YgA2mgyvjCutK+smCWFY6hevh0ShUwDKL03UM7rbg=
Subject key identifier: 0E:1C:D9:73:41:6E:2C:D6:AE:54:37:AC:D1:BC:04:AE:45:54:F6:8D
Certificate issuer: /CN=A91C2B93/serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D
Certificate serial: 0163
Authority key identifier: D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/B00A68E6014A11EFA8F03B5BC4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:04:53 +0000
ROA not before: Wed 09 Apr 2025 05:12:13 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 4637
IP address blocks: 202.27.128.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl
rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 03:55:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2B93, serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D
Validity
Not Before: Apr 9 05:12:13 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a59905-bb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cb:d8:68:07:b7:3b:ed:7a:49:4a:73:5b:7b:
d2:b0:13:25:50:7b:e1:73:7c:2b:24:e2:86:e6:8a:
41:a0:59:17:cc:39:ec:df:c8:f0:2e:22:9a:dc:cf:
2c:9c:5f:1d:b4:13:3a:09:99:a7:38:8d:89:ad:89:
5a:b3:e4:e6:4f:fc:38:b9:42:9a:7d:ef:33:00:0b:
cf:cf:2c:70:c6:83:e6:66:af:93:33:0c:66:a6:ff:
ad:92:52:76:20:2f:15:f6:1c:ba:4b:b4:a3:6a:3d:
d9:29:6e:5d:44:5d:28:aa:89:1f:a8:28:12:1e:fb:
7e:d7:27:2e:64:ab:fa:fa:6d:ce:84:53:56:1b:14:
51:1b:df:54:e8:db:3d:18:b2:32:88:71:20:6f:bc:
fc:0f:df:0a:a3:31:b9:14:a2:f0:bd:b8:c7:5c:e2:
e4:7f:67:27:5a:a7:ca:31:4e:2c:de:9c:9c:cf:74:
d6:cf:fa:0d:ea:b2:18:33:eb:0b:be:de:6f:56:7a:
26:e2:77:18:a9:3c:8a:1d:c3:4c:6f:d1:f6:eb:00:
19:6f:5a:74:16:a9:fb:bc:02:46:51:e3:df:5f:05:
40:82:03:f5:fd:62:68:b2:c3:b1:98:4b:95:f9:3e:
ba:7f:10:b7:c0:fc:5b:b7:5b:4d:26:e4:a0:04:83:
8d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1C:D9:73:41:6E:2C:D6:AE:54:37:AC:D1:BC:04:AE:45:54:F6:8D
X509v3 Authority Key Identifier:
keyid:D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/B00A68E6014A11EFA8F03B5BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.27.128.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:8e:24:2f:be:60:b4:6c:37:5d:96:9b:4c:4c:88:38:44:cd:
61:5d:88:dd:2b:47:fe:51:26:71:a5:fd:cc:2a:48:89:d6:97:
7d:da:64:c9:f0:b5:74:3a:5e:5c:2d:f0:a8:f7:20:d8:ba:72:
2b:c0:5c:b2:9d:da:10:65:1e:f6:86:10:34:e1:83:ec:05:37:
ec:ce:db:b0:39:92:5e:bc:38:22:64:b6:a0:6a:7c:32:a8:e9:
7a:59:49:0d:40:ba:73:7e:a5:74:1d:d7:c2:62:b9:af:67:79:
82:66:b5:ee:eb:86:0a:95:ee:6a:7d:99:bc:65:6b:c4:04:2c:
61:4d:8f:5f:a7:37:4b:0e:29:cc:20:51:b0:19:20:81:8c:89:
6f:3a:ee:12:3a:30:3d:be:49:5b:09:e1:bb:d3:25:3c:48:29:
2f:8d:cb:0b:80:19:37:2c:98:e4:22:b9:1a:7d:0d:9f:47:1f:
e0:9c:cb:fd:3c:16:a5:04:a6:42:f0:1b:30:0d:f6:93:8c:78:
ba:75:aa:d6:24:e9:90:fc:4d:53:8d:cc:d9:d1:a3:45:21:3f:
8a:59:a2:41:6b:d0:6d:a7:b1:13:c3:ac:da:e2:62:c3:2c:42:
0e:c7:7a:a3:9f:6d:2a:94:55:bf:63:f2:79:89:ce:6e:3f:e8:
e0:05:ab:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:33:46 2026 by rpki-client