
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/325AC09ED0E611F1AAC7587D3066CEF9.roa
File: 325AC09ED0E611F1AAC7587D3066CEF9.roa (raw, json)
Hash identifier: sjZSHi1TAaE5c4E4t8iCErmTMDjVgDkK6ODH8fexMWE=
Subject key identifier: 34:E8:8C:23:3F:42:D7:07:62:26:74:E5:28:D1:15:36:F2:B8:A4:10
Certificate issuer: /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial: 03EE
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/325AC09ED0E611F1AAC7587D3066CEF9.roa
Signing time: Mon 26 Oct 2026 02:37:33 +0000
ROA not before: Mon 26 Oct 2026 02:37:33 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 202.134.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 01:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1006 (0x3ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Validity
Not Before: Oct 26 02:37:33 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6adebced-da7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a8:5b:bf:1f:da:27:c6:88:99:0d:40:77:4e:
4f:37:49:fa:69:b6:ab:9b:0a:8d:28:ab:85:8f:9c:
ec:36:01:4b:71:c5:ac:cc:88:df:32:e0:4d:4d:a8:
31:51:31:d3:2c:6a:22:2f:c2:a9:95:f9:35:6e:bf:
a9:e9:c5:a0:5c:2b:2e:4c:52:5b:57:01:18:dd:06:
61:74:d5:64:eb:a3:4b:d1:75:25:96:88:b9:14:55:
37:8a:29:a8:97:c3:ac:7e:6d:7c:7f:8f:4b:73:be:
77:3f:e7:1e:e6:8c:a4:9c:72:70:25:af:0a:d9:2e:
90:c4:7c:b5:01:a9:3e:35:a4:89:01:2c:e3:2d:c4:
6d:a5:74:b3:82:d7:b4:1a:98:34:f8:f6:7e:95:82:
97:b6:91:e7:13:65:73:7d:c5:72:a4:9c:2e:c3:ae:
5b:ba:4a:69:ea:fa:2c:46:ed:99:14:91:3d:2f:4a:
91:48:32:0e:e8:85:b3:63:49:36:31:af:91:5c:ea:
37:eb:24:23:20:29:7b:29:8e:7b:ba:05:ba:f2:88:
b9:f5:58:cb:53:41:b6:a7:b0:50:4f:b6:30:a9:30:
96:70:34:57:d0:d1:ec:82:00:5c:99:2c:89:e2:48:
45:49:44:01:6e:37:6b:e2:71:68:fe:71:d8:32:58:
09:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E8:8C:23:3F:42:D7:07:62:26:74:E5:28:D1:15:36:F2:B8:A4:10
X509v3 Authority Key Identifier:
keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/325AC09ED0E611F1AAC7587D3066CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
202.134.230.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:5c:e9:73:5f:22:7f:9b:f3:f3:59:69:a4:aa:cc:99:75:8e:
39:ae:5d:2d:63:85:d3:51:64:c4:d7:3a:45:eb:37:85:59:98:
09:cc:a3:55:1e:ca:32:50:fa:82:b7:05:5f:79:aa:93:28:ec:
2d:0b:76:1e:28:0c:55:84:11:32:0d:79:05:73:8f:ed:64:13:
ee:98:5e:74:f1:67:8c:1d:cf:be:8a:3c:f6:a6:b1:3c:03:c9:
41:ce:d8:e5:6e:96:85:ac:c9:cb:f4:3f:2c:2f:d5:36:c0:d4:
67:44:b1:df:b4:3d:3e:e6:5d:7c:a4:c7:df:b2:a3:63:2c:17:
6c:e9:6a:c5:9d:e0:2d:c0:8f:5e:96:1c:78:aa:5f:e9:ad:84:
28:a5:46:e6:08:cd:50:7d:5d:79:e2:cf:b3:30:c9:39:a8:c5:
d6:45:01:71:fa:74:c5:52:38:53:2b:15:6c:1e:51:24:2c:0d:
b0:75:57:91:3c:5f:28:3c:d0:54:52:16:e0:0f:12:8a:95:30:
5c:a7:28:61:2b:18:54:38:fc:fa:d2:61:30:44:67:7f:e0:4a:
cf:15:31:fc:d4:89:9a:f3:39:d0:1b:fe:94:9d:ed:93:f9:09:
6e:5b:4c:0d:c8:2b:df:10:37:57:50:2d:a5:d9:b7:80:13:12:
58:1e:c7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:12:02 2026 by rpki-client