
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/427996B2D4CF11F0BFE5643BC4F9AE02.roa
File: 427996B2D4CF11F0BFE5643BC4F9AE02.roa (raw, json)
Hash identifier: TXMQQ1A35wcn0vd2F/lg63dSiXn2E+vH3CzPG5I1pTw=
Subject key identifier: A2:D3:27:6F:5E:80:91:C9:1B:12:6E:5B:BA:4C:98:DD:5F:C1:D6:C7
Certificate issuer: /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8
Certificate serial: 35F9
Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/427996B2D4CF11F0BFE5643BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:45:08 +0000
ROA not before: Tue 09 Dec 2025 07:25:45 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 45806
IP address blocks: 1.179.161.0/24 maxlen: 24
1.179.211.0/24 maxlen: 24
1.179.223.0/24 maxlen: 24
182.52.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl
rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 14:25:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13817 (0x35f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF4FE, serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8
Validity
Not Before: Dec 9 07:25:45 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a48934-9d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6d:0d:e8:4b:53:ae:86:5c:9a:83:0c:c6:ac:
6f:de:d3:e3:17:a2:9e:56:77:93:5a:5a:16:2b:8e:
df:3f:ca:d9:b6:81:24:e7:70:36:ed:85:d2:85:87:
e7:f7:ee:9d:7d:cb:52:f1:48:5f:40:c2:ec:dc:9d:
79:a1:58:30:5a:b2:03:12:cf:57:82:97:89:ce:6f:
1f:2f:7c:b3:59:66:3f:af:c7:92:3a:69:65:b0:c3:
83:a4:33:88:42:13:1c:cb:e7:fd:93:b5:c8:df:02:
71:b8:f1:a5:29:0c:57:04:86:39:03:87:26:9a:d1:
79:17:29:5f:ea:fd:df:b5:21:17:b5:f8:4c:e3:bd:
9f:ae:a8:1e:2e:c5:4d:96:9a:8f:e3:b2:a4:50:1e:
2a:79:29:4f:2d:22:ff:58:48:c0:23:61:64:49:c7:
3e:88:96:29:88:95:57:9c:07:a0:41:af:21:bf:be:
f6:d2:af:2d:91:cf:f6:93:7c:da:14:de:a9:33:88:
91:a4:bc:81:24:9e:ba:44:c9:ec:7e:33:bf:5e:4b:
20:7a:9c:e2:fe:69:1f:d3:98:4e:8d:b7:74:6c:84:
e1:90:03:4d:88:ef:b1:cc:73:8b:fd:88:1c:0c:88:
7b:93:b8:bf:43:8c:df:d6:21:7f:e3:22:d0:e4:1e:
01:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D3:27:6F:5E:80:91:C9:1B:12:6E:5B:BA:4C:98:DD:5F:C1:D6:C7
X509v3 Authority Key Identifier:
keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/427996B2D4CF11F0BFE5643BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
1.179.161.0/24
1.179.211.0/24
1.179.223.0/24
182.52.154.0/24
Signature Algorithm: sha256WithRSAEncryption
22:b1:5c:a2:d2:80:a9:cf:c7:9c:ae:e8:2a:5b:eb:3b:06:ec:
84:11:df:f1:92:d2:a9:e7:f4:99:96:7a:c9:01:98:d4:3e:76:
6a:e1:00:b6:62:3f:ed:06:bc:21:54:f7:cd:f2:08:45:f3:46:
a4:d6:62:cf:e2:c1:a9:f1:cd:7e:ab:1d:c5:0b:d5:ef:0f:59:
83:2c:cf:2f:87:08:2d:11:72:60:66:07:35:79:72:f8:54:a0:
78:ea:03:48:25:9d:e4:bb:29:df:2d:84:f4:6d:67:33:9c:8a:
01:55:81:48:ee:a4:1b:07:36:9f:93:e2:5d:b0:8c:92:da:56:
7e:14:2b:2a:4a:da:1a:64:83:95:fb:0d:a1:46:a2:89:3f:26:
40:9c:94:89:d6:4b:7c:c3:6a:72:49:c2:b1:4c:49:2d:63:1c:
e1:f4:78:5e:40:16:f8:43:15:48:41:cf:61:08:7e:e5:26:ea:
c7:b1:a7:17:e4:b6:f2:d3:02:01:10:a9:53:61:98:4e:be:4a:
f1:ec:c5:a8:e7:65:e1:ba:b7:06:18:9e:17:86:fa:9a:27:c9:
e7:58:6e:0f:cc:1d:1d:71:9d:d8:da:73:3a:b9:89:27:e5:b0:
46:73:3c:21:b3:ef:62:c1:d5:a9:97:7b:a3:b5:ac:3a:2d:cf:
a5:64:20:ff
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICNfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0Y0RkUxMTAvBgNVBAUTKDE2QjU2NEI3NThERkNENTJDNUNFODkxMTkyRTMxQjcx
NUIxQ0JGRTgwHhcNMjUxMjA5MDcyNTQ1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODkzNC05ZDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA220N6EtTroZcmoMMxqxv3tPjF6KeVneTWloWK47fP8rZtoEk53A27YXShYfn
9+6dfctS8UhfQMLs3J15oVgwWrIDEs9XgpeJzm8fL3yzWWY/r8eSOmllsMODpDOI
QhMcy+f9k7XI3wJxuPGlKQxXBIY5A4cmmtF5Fylf6v3ftSEXtfhM472frqgeLsVN
lpqP47KkUB4qeSlPLSL/WEjAI2FkScc+iJYpiJVXnAegQa8hv7720q8tkc/2k3za
FN6pM4iRpLyBJJ66RMnsfjO/Xksgepzi/mkf05hOjbd0bIThkANNiO+xzHOL/Ygc
DIh7k7i/Q4zf1iF/4yLQ5B4BZQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFKLTJ29e
gJHJGxJuW7pMmN1fwdbHMB8GA1UdIwQYMBaAFBa1ZLdY381Sxc6JEZLjG3FbHL/o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjRGRS9CQTEzMTI0RTFE
ODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpWTEZ6b2tSa3VNYmNWc2N2
LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZyVmt0MWpmelZMRnpva1JrdU1iY1ZzY3YtZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0Y0RkUvQkExMzEyNEUxRDg1MTFFMkE3Nzk5OURDMDhCMDJDRDIvNDI3OTk2QjJE
NENGMTFGMEJGRTU2NDNCQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe
BAIAATAYAwQAAbOhAwQAAbPTAwQAAbPfAwQAtjSaMA0GCSqGSIb3DQEBCwUAA4IB
AQAisVyi0oCpz8ecrugqW+s7BuyEEd/xktKp5/SZlnrJAZjUPnZq4QC2Yj/tBrwh
VPfN8ghF80ak1mLP4sGp8c1+qx3FC9XvD1mDLM8vhwgtEXJgZgc1eXL4VKB46gNI
JZ3kuynfLYT0bWcznIoBVYFI7qQbBzafk+JdsIyS2lZ+FCsqStoaZIOV+w2hRqKJ
PyZAnJSJ1kt8w2pyScKxTEktYxzh9HheQBb4QxVIQc9hCH7lJurHsacX5Lby0wIB
EKlTYZhOvkrx7MWo52XhurcGGJ4XhvqaJ8nnWG4PzB0dcZ3Y2nM6uYkn5bBGczwh
s+9iwdWpl3ujtaw6Lc+lZCD/
-----END CERTIFICATE-----
Generated at Sun Mar 15 08:41:52 2026 by rpki-client