
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/D4FCF92C716B11ED9F349A49C4F9AE02.roa
File: D4FCF92C716B11ED9F349A49C4F9AE02.roa (raw, json)
Hash identifier: XMmSyDgKxtH6qPeamyVCMMC+VcBd+O1+Cvw9Hsg5W7w=
Subject key identifier: D7:EB:78:85:B4:17:72:E8:AB:09:ED:A9:67:90:7D:B6:10:6D:30:B4
Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial: 070D
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/D4FCF92C716B11ED9F349A49C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:19:13 +0000
ROA not before: Mon 10 Nov 2025 22:45:40 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 65004
IP address blocks: 122.15.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 23:24:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1805 (0x70d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Validity
Not Before: Nov 10 22:45:40 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a49130-ccb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5d:65:f3:7f:14:83:03:3c:c3:8f:4f:26:a2:
21:3f:58:30:34:31:e0:d8:f6:d9:19:97:13:b3:a6:
51:0a:32:b8:4e:f7:df:ef:91:d3:31:8e:45:a3:84:
46:d0:7d:30:39:54:dc:2e:26:79:a5:88:13:8a:5e:
4d:9e:f9:bb:f1:71:42:83:b0:8a:c3:54:0b:d3:f8:
2b:59:e7:34:90:1c:4e:6d:a5:79:a2:67:37:b2:39:
7f:3f:83:c8:9f:6a:cf:29:b1:cf:2f:e0:05:5d:dd:
e3:10:9d:55:38:99:64:a5:a7:30:52:8a:44:9c:44:
19:84:4f:9c:ff:09:45:60:83:29:db:46:cd:0f:f0:
60:79:7d:ed:63:5d:8b:17:8e:d6:5f:96:27:26:38:
df:e5:fe:cb:4d:89:71:40:9f:61:58:b2:27:44:12:
27:5e:4e:38:bb:94:9f:37:49:0b:35:17:fd:d9:aa:
f0:ad:29:a6:30:4a:7a:d3:d2:d7:71:04:33:ba:fe:
fe:9f:66:b2:d1:33:ac:a1:c6:15:94:4e:86:f3:69:
ad:98:d9:e9:d1:77:93:b3:2c:e5:8a:e7:6b:cf:bc:
d1:04:3e:13:e6:f7:ae:9e:4c:6d:f8:dc:b6:30:8e:
0c:a0:7d:fe:bc:fa:f1:f6:7f:a8:95:31:b7:93:6c:
18:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EB:78:85:B4:17:72:E8:AB:09:ED:A9:67:90:7D:B6:10:6D:30:B4
X509v3 Authority Key Identifier:
keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/D4FCF92C716B11ED9F349A49C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
122.15.208.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:4e:23:ef:62:7d:0b:b8:57:30:9f:49:0d:c8:e8:a1:56:60:
6a:87:e9:dd:3e:31:b8:0d:d3:45:fe:e3:9d:fd:9e:67:51:ae:
b1:b1:ea:9f:85:33:fa:38:38:14:4f:37:01:12:63:e9:2a:0f:
39:8c:97:ce:79:23:b9:34:23:bd:48:71:a1:56:b8:d6:05:9f:
31:7b:bd:23:0e:45:df:92:6a:2f:0e:bc:62:93:c6:3c:1f:0f:
f5:ef:04:a2:75:00:46:01:41:33:a6:c7:b4:a4:ac:3e:5d:55:
9f:90:d8:7b:87:4e:c0:f0:c7:f8:a6:88:24:03:82:93:de:af:
14:b5:87:e5:c3:13:54:2b:34:77:79:8f:27:e4:a4:50:bb:fa:
a1:50:dd:b6:c5:12:90:07:46:dd:ce:f9:2d:88:b7:52:15:3f:
09:f1:1e:cc:4d:4d:5b:07:65:d0:75:d2:2c:ad:77:24:3e:19:
a6:ba:17:2e:f7:19:89:92:43:75:00:7a:f6:43:1a:fd:f7:40:
16:44:a3:92:99:61:59:ef:a9:31:db:f1:18:b8:66:62:98:26:
8d:2c:ff:2c:a9:3b:b8:77:f5:a1:89:8c:5e:03:23:1f:45:c3:
47:12:0a:47:9e:52:cb:e5:2c:04:b1:e6:a0:13:bc:b2:ba:e0:
45:e1:40:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:14:36 2026 by rpki-client