
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/E14BDC8EF3EE11ECBAE10054C4F9AE02.roa
File: E14BDC8EF3EE11ECBAE10054C4F9AE02.roa (raw, json)
Hash identifier: /HZqYc+XrDRax1XWxnWWaDO8ZrVsGYFgHHVy0LG/zoI=
Subject key identifier: EE:8D:CC:E6:1A:C5:7F:39:5C:1E:FF:2B:D4:6F:2C:EB:A2:29:07:44
Certificate issuer: /CN=A91C5B46/serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7
Certificate serial: 267B
Authority key identifier: 56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/E14BDC8EF3EE11ECBAE10054C4F9AE02.roa
Signing time: Fri 06 Mar 2026 16:19:48 +0000
ROA not before: Fri 06 Mar 2026 16:19:48 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 38468
IP address blocks: 123.136.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl
rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 16:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9851 (0x267b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5B46, serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7
Validity
Not Before: Mar 6 16:19:48 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69aafea4-ac18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:48:41:d8:05:a7:41:8e:2d:a5:c4:4c:d2:ca:
8a:78:63:60:72:18:7a:a8:c0:12:7b:3a:cc:43:83:
44:12:f7:5f:2b:16:45:3a:08:32:18:14:77:e0:81:
b3:a5:03:d5:c8:e3:f7:ab:cb:a5:82:99:8b:74:82:
ec:f4:b2:33:99:88:ca:60:a3:49:52:c6:a5:3c:6f:
8f:de:22:b5:13:8f:2a:25:cb:d3:b5:d6:34:68:1f:
d2:51:4f:94:4b:c6:6f:3e:dc:cc:f1:17:31:21:93:
e0:73:f0:f3:cd:1b:e4:a5:9c:d2:96:0a:68:07:3e:
24:34:75:c2:3c:c9:99:cb:ae:c1:79:44:27:fe:4d:
ac:c6:66:0f:8f:99:7e:5a:c8:59:60:2a:48:d8:44:
66:2a:fc:bc:c2:6d:98:5d:12:c5:0c:f1:95:05:2a:
4a:54:35:a1:f6:b5:2f:5b:fb:e5:b4:01:d4:ea:e2:
a2:f4:11:b4:d2:7f:6f:83:77:f6:7e:76:b1:6b:d8:
51:18:e2:22:13:9c:7e:d3:5e:22:ad:c3:b0:f5:60:
60:fe:cb:30:74:95:7d:f8:2e:50:b4:56:78:9a:78:
f8:23:8c:fe:fa:2c:02:e6:de:42:5b:54:37:1a:f6:
c8:02:4e:38:79:31:15:78:b2:38:72:4f:15:b7:9f:
4c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8D:CC:E6:1A:C5:7F:39:5C:1E:FF:2B:D4:6F:2C:EB:A2:29:07:44
X509v3 Authority Key Identifier:
keyid:56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/E14BDC8EF3EE11ECBAE10054C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
123.136.16.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:66:41:78:c4:f4:09:4a:f5:04:ce:d1:98:86:b9:0e:b4:63:
83:3a:5e:10:1c:8e:01:ed:21:4d:02:d5:60:20:8e:9b:9f:71:
5c:eb:74:a4:f6:3f:5b:95:09:4f:b4:6f:84:d4:60:8e:05:5f:
fa:fa:9e:cf:c8:70:ee:31:97:3c:0d:aa:a2:32:76:0b:e2:b9:
0a:8a:98:58:01:9c:f3:00:24:7d:0e:c2:df:80:7c:df:bd:c7:
b9:3c:62:d6:c3:3d:99:9d:fb:d4:a5:a8:87:79:42:17:ac:65:
cf:1e:1c:b3:76:b4:a9:f5:cd:d2:cd:71:42:87:51:8f:26:04:
21:a0:a6:2c:1e:4d:0f:20:0c:40:20:7b:ea:dd:98:67:49:72:
d5:d1:af:f5:1d:ba:91:e3:0c:fd:f2:28:7f:98:01:ed:71:53:
e9:36:97:9f:11:0e:14:82:ae:64:e2:4f:0d:2b:af:77:76:8c:
18:3a:af:a9:ca:25:69:18:f4:1f:2f:ba:01:20:85:a0:8a:53:
c8:0e:d9:77:fb:a1:80:0c:c5:96:6c:7b:d5:de:80:6c:fb:c3:
94:33:d8:49:59:da:ad:5c:d3:02:6a:61:a4:95:37:94:dd:2f:
7d:06:55:49:c0:31:57:2b:15:5f:b3:11:0e:45:0a:2a:94:fe:
6a:1e:16:fa
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICJnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzVCNDYxMTAvBgNVBAUTKDU2Q0QzMkQxM0Y4Q0FFMUU5MkY5Qzk3RjM5NUYxQTIz
QUJCOUM2RjcwHhcNMjYwMzA2MTYxOTQ4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWFhZmVhNC1hYzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3khB2AWnQY4tpcRM0sqKeGNgchh6qMASezrMQ4NEEvdfKxZFOggyGBR34IGz
pQPVyOP3q8ulgpmLdILs9LIzmYjKYKNJUsalPG+P3iK1E48qJcvTtdY0aB/SUU+U
S8ZvPtzM8RcxIZPgc/DzzRvkpZzSlgpoBz4kNHXCPMmZy67BeUQn/k2sxmYPj5l+
WshZYCpI2ERmKvy8wm2YXRLFDPGVBSpKVDWh9rUvW/vltAHU6uKi9BG00n9vg3f2
fnaxa9hRGOIiE5x+014ircOw9WBg/sswdJV9+C5QtFZ4mnj4I4z++iwC5t5CW1Q3
GvbIAk44eTEVeLI4ck8Vt59M3QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFO6NzOYa
xX85XB7/K9RvLOuiKQdEMB8GA1UdIwQYMBaAFFbNMtE/jK4ekvnJfzlfGiOrucb3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUI0Ni9CQTBCODQzMDAy
ODgxMUU1QUUxRTQ3NjFDNEY5QUUwMi9WczB5MFQtTXJoNlMtY2xfT1Y4YUk2dTV4
dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZzMHkwVC1Ncmg2Uy1jbF9PVjhhSTZ1NXh2Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzVCNDYvQkEwQjg0MzAwMjg4MTFFNUFFMUU0NzYxQzRGOUFFMDIvRTE0QkRDOEVG
M0VFMTFFQ0JBRTEwMDU0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQDe4gQMA0GCSqGSIb3DQEBCwUAA4IBAQAeZkF4xPQJSvUEztGYhrkO
tGODOl4QHI4B7SFNAtVgII6bn3Fc63Sk9j9blQlPtG+E1GCOBV/6+p7PyHDuMZc8
DaqiMnYL4rkKiphYAZzzACR9DsLfgHzfvce5PGLWwz2ZnfvUpaiHeUIXrGXPHhyz
drSp9c3SzXFCh1GPJgQhoKYsHk0PIAxAIHvq3ZhnSXLV0a/1HbqR4wz98ih/mAHt
cVPpNpefEQ4Ugq5k4k8NK693dowYOq+pyiVpGPQfL7oBIIWgilPIDtl3+6GADMWW
bHvV3oBs+8OUM9hJWdqtXNMCamGklTeU3S99BlVJwDFXKxVfsxEORQoqlP5qHhb6
-----END CERTIFICATE-----
Generated at Sat Mar 7 20:46:59 2026 by rpki-client