
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/CA8007604A3011EFB101441AC4F9AE02.roa
File: CA8007604A3011EFB101441AC4F9AE02.roa (raw, json)
Hash identifier: OYe/sL//0F80CjmdwWc7Zc6ApG3ySvcexTnka8nqBXI=
Subject key identifier: 21:13:83:77:A3:4D:73:43:7E:2C:71:55:F3:7C:76:00:81:98:5D:FB
Certificate issuer: /CN=A91CE814/serialNumber=118D9BDE31754F9854CB554740A299F137E241E2
Certificate serial: 0123
Authority key identifier: 11:8D:9B:DE:31:75:4F:98:54:CB:55:47:40:A2:99:F1:37:E2:41:E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/CA8007604A3011EFB101441AC4F9AE02.roa
Signing time: Thu 05 Feb 2026 15:24:03 +0000
ROA not before: Thu 05 Feb 2026 15:24:03 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 24074
IP address blocks: 202.49.200.0/23 maxlen: 23
202.49.202.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl
rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 04:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE814, serialNumber=118D9BDE31754F9854CB554740A299F137E241E2
Validity
Not Before: Feb 5 15:24:03 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6984b613-9961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a4:a1:2b:d5:2c:87:cb:f2:57:cd:12:ef:0a:
28:68:59:1b:de:a3:d5:e0:bb:e4:47:75:d3:4f:2a:
2c:a9:c7:e4:b0:1e:c1:68:08:d6:aa:7e:76:92:6d:
75:f8:1e:a3:25:0e:5c:fe:e9:4d:0c:21:29:ef:b0:
fc:71:3b:72:22:13:be:d7:19:b5:83:0b:4a:64:3a:
17:04:0e:4e:23:17:2f:e9:80:1f:82:b0:a1:8c:1b:
e0:9c:d9:bf:a5:f3:84:35:ac:ff:e2:cd:e5:c5:ef:
3a:b7:f5:3b:75:f7:23:f0:98:9a:0d:2c:8b:9a:b5:
88:e2:d7:4e:34:7e:9f:a4:29:b0:27:0e:06:00:d9:
ad:81:88:ad:be:9f:46:9f:b5:ce:6c:a9:9a:ae:79:
39:a4:69:9e:f7:e5:f4:58:6b:67:e1:e6:d2:aa:4e:
75:6e:71:f7:7c:fe:cd:70:43:48:02:34:4e:83:c6:
54:3c:42:80:d9:33:2c:64:f7:5c:6c:ce:ae:6f:a5:
1e:09:62:ec:1e:4f:d5:4b:77:b6:1d:a8:04:95:b2:
85:82:07:81:39:a4:a4:37:c7:74:1c:7d:6c:0a:8e:
2a:b0:f2:59:f6:91:17:5f:3d:d5:d0:f9:16:90:27:
0b:f0:7c:52:53:62:2e:86:79:cf:a8:66:98:6a:c7:
1c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:13:83:77:A3:4D:73:43:7E:2C:71:55:F3:7C:76:00:81:98:5D:FB
X509v3 Authority Key Identifier:
keyid:11:8D:9B:DE:31:75:4F:98:54:CB:55:47:40:A2:99:F1:37:E2:41:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/CA8007604A3011EFB101441AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.49.200.0/22
Signature Algorithm: sha256WithRSAEncryption
74:d7:84:99:97:d9:1c:ce:1f:64:af:3e:7b:0e:a7:be:78:69:
9d:da:b1:92:84:13:d2:8a:79:0b:20:29:0a:28:ff:71:e8:b1:
63:72:f9:fb:0a:35:cf:98:39:fb:85:7e:19:c1:ff:6c:77:71:
02:44:2b:ea:f7:13:8e:b1:71:3f:87:60:ad:75:fe:29:93:88:
d0:c3:11:0f:88:72:fb:85:0f:60:5d:02:e6:74:54:bb:44:69:
c1:63:13:d7:b5:83:b3:25:ca:d0:ef:7a:03:50:e7:53:80:2c:
df:6c:58:20:de:04:27:cb:c7:4c:17:dc:03:31:c7:57:24:7a:
d7:64:4a:64:37:e3:93:d3:34:46:41:fa:c9:54:ff:75:81:ea:
1e:2f:91:08:78:01:76:59:ab:30:a9:d0:dd:90:21:59:2b:18:
01:a8:66:be:15:d4:7a:d7:16:c2:00:26:11:ce:f6:ea:ba:fe:
a9:50:c5:0c:5f:0a:4a:c7:af:6d:35:59:28:7c:e8:01:bf:ca:
f4:a0:9c:92:62:c3:0a:51:34:4d:db:46:5b:b6:e4:fd:ed:01:
5e:e1:ec:20:2f:8e:0e:4d:1e:ba:f1:7d:be:17:c5:cd:47:be:
1e:d7:11:46:44:46:8c:59:7a:03:2e:93:0d:54:59:8c:76:b9:
4c:70:42:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:37:45 2026 by rpki-client