
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/D992FDD49B4811EFA17EB17FC4F9AE02.roa
File: D992FDD49B4811EFA17EB17FC4F9AE02.roa (raw, json)
Hash identifier: FIe/ZxZ/czs73Iv9mGeR+sUl8NFbSaTBZOQUejuclqo=
Subject key identifier: 94:9B:79:59:A1:F8:18:90:D3:08:D2:3E:7D:D6:A1:5A:34:A5:E1:D2
Certificate issuer: /CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF
Certificate serial: 0BFF
Authority key identifier: B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/D992FDD49B4811EFA17EB17FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:35:06 +0000
ROA not before: Sat 12 Jul 2025 19:59:31 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 23686
IP address blocks: 101.97.48.0/23 maxlen: 23
101.97.50.0/23 maxlen: 23
2404:4f01::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl
rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 18:56:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3071 (0xbff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE558, serialNumber=B36B971724A3BABD890B754598933720F972FEAF
Validity
Not Before: Jul 12 19:59:31 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a478ca-119d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:e3:fc:96:11:24:1f:f4:a6:db:aa:48:0e:
76:ba:54:01:f2:7c:2a:c4:db:38:d6:cf:26:7b:e3:
5a:b2:cd:42:b5:41:2e:6b:a9:7a:c1:a7:2f:19:57:
75:29:75:0d:05:bc:ff:c3:cd:e7:3d:6e:60:8e:c5:
71:08:1c:93:1a:96:40:5b:fc:7c:52:56:e1:7c:d3:
c3:5b:6a:7e:5a:62:63:21:90:16:64:26:90:54:ad:
bd:5b:e9:cb:a9:69:49:06:6b:4a:87:e4:8d:fb:44:
95:2a:eb:34:8c:3f:af:7f:c2:ce:36:25:cd:6f:95:
6c:66:d3:bf:a5:7f:df:7d:1c:ae:58:9c:ed:44:8a:
1a:cb:3f:8b:3a:fe:a4:c7:a5:e4:e4:7a:af:f8:fc:
84:80:0a:93:6e:f1:e6:f6:60:3d:cd:b8:e8:68:b3:
06:d4:76:0f:9f:5f:b7:78:df:29:b0:9b:50:3a:50:
2b:a0:94:4e:0b:a0:6d:1d:e0:fe:da:4a:68:15:7b:
22:f3:7f:10:39:1d:10:dc:29:25:14:fd:33:c9:8a:
d1:fe:81:7a:56:b2:60:a5:b6:16:4c:3c:95:ef:da:
02:ff:9c:a3:19:47:55:08:e0:56:e2:c6:9a:8d:94:
d9:da:99:d3:7a:fe:7b:41:4c:61:9d:5a:e5:4a:80:
6e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9B:79:59:A1:F8:18:90:D3:08:D2:3E:7D:D6:A1:5A:34:A5:E1:D2
X509v3 Authority Key Identifier:
keyid:B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/D992FDD49B4811EFA17EB17FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
101.97.48.0/22
IPv6:
2404:4f01::/33
Signature Algorithm: sha256WithRSAEncryption
61:3b:01:8c:88:20:7a:26:dd:6a:0e:fd:35:f2:15:fb:5e:d7:
5f:f1:91:f4:29:0c:0e:0e:c2:fb:0a:5d:d5:30:16:77:2a:4c:
1b:4c:cf:f5:19:5e:16:cb:18:a9:b6:d4:43:f3:66:70:de:e1:
8c:09:1b:8b:53:b4:74:33:cc:a7:7d:4a:ce:a8:17:1d:bb:7c:
8e:6f:84:8f:2b:7e:fc:b9:99:5e:64:e2:19:d0:cf:1a:21:d8:
ec:a7:87:c3:72:c1:94:9b:d3:d0:02:a9:c1:b9:21:69:5b:0c:
f0:a2:14:04:8c:5d:67:0a:1d:00:66:3b:93:01:28:4a:53:40:
16:a0:78:62:b3:98:06:14:07:8e:51:87:a4:aa:74:06:02:c6:
94:21:4b:c2:22:0f:f9:7f:35:be:a1:f4:a2:ed:78:b7:f5:11:
34:45:21:59:57:1d:f0:65:41:ff:44:6d:d0:58:9f:bb:95:59:
66:cf:6b:5f:59:4e:67:33:d6:5b:d7:ea:17:07:25:a4:f1:fd:
6b:f0:24:62:55:d1:2b:21:d7:3c:94:3a:32:29:bd:c8:ed:bf:
af:66:cd:99:99:b1:e6:d2:2f:e8:45:89:2f:90:7b:44:41:1c:
29:b6:dd:f7:03:a3:5a:28:e2:80:44:ee:02:ef:88:82:80:e7:
5d:a1:70:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 23:45:21 2026 by rpki-client