
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/534379FCEE1611ECA6DE1824C4F9AE02.roa
File: 534379FCEE1611ECA6DE1824C4F9AE02.roa (raw, json)
Hash identifier: WrBoB3k+TzkgstCIfTVURqYqkE8urIjGdVsTJXRt8nM=
Subject key identifier: 57:34:1B:B0:73:F5:6F:4E:11:43:18:FC:32:C2:18:E5:C5:88:CD:14
Certificate issuer: /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8
Certificate serial: 369B
Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/534379FCEE1611ECA6DE1824C4F9AE02.roa
Signing time: Sun 30 Aug 2026 15:14:11 +0000
ROA not before: Sun 30 Aug 2026 15:14:11 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 198949
IP address blocks: 1.179.246.0/24 maxlen: 24
1.179.247.0/24 maxlen: 24
118.174.10.0/24 maxlen: 24
180.180.242.0/24 maxlen: 24
180.180.243.0/24 maxlen: 24
180.180.244.0/24 maxlen: 24
180.180.245.0/24 maxlen: 24
180.180.247.0/24 maxlen: 24
203.113.14.0/24 maxlen: 24
203.113.95.0/24 maxlen: 24
203.114.98.0/24 maxlen: 24
203.114.102.0/24 maxlen: 24
2001:ec0:100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl
rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13979 (0x369b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF4FE, serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8
Validity
Not Before: Aug 30 15:14:11 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a9448c3-9862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0e:1b:c5:fe:14:16:35:00:c4:96:ff:e9:81:
25:fd:fc:80:d4:39:d4:c0:d3:fb:65:d5:54:85:24:
fd:1d:2c:70:c9:f6:c6:09:56:ff:fb:0b:e6:6d:ef:
c1:93:38:c4:96:46:b2:77:65:d3:da:71:f4:26:4c:
56:a9:68:ea:d1:39:51:f7:09:bb:86:9a:eb:ac:7d:
8d:ad:56:b0:fc:15:21:b0:36:e7:df:e6:f0:b7:f1:
5e:56:62:db:6d:16:55:f7:1f:2f:b6:2b:64:94:2e:
b8:f4:7c:c7:91:d7:85:aa:69:3d:16:37:bb:4d:da:
3a:15:10:8e:e0:a9:b3:c1:6c:2b:1f:10:8b:f8:02:
83:98:d2:7d:a4:47:c6:7b:c8:35:02:64:2d:0c:b3:
2f:c4:32:aa:10:f1:e4:bd:08:b2:96:0f:21:f5:cd:
a6:ce:1c:3a:64:3e:c4:85:c5:6b:78:2b:e3:d5:b1:
2e:b5:b5:89:fe:ca:b2:73:cf:d8:47:f8:ff:ab:82:
e8:85:d4:d0:39:5f:85:13:3c:5f:ee:46:32:ea:7b:
8f:12:89:ab:82:5b:ca:c7:96:a0:68:2b:28:e3:e3:
51:10:60:4f:9e:f4:48:e7:7b:3e:6b:44:cb:0c:f6:
50:41:78:ed:54:15:bd:d4:ab:5a:8e:d7:fd:c4:23:
6a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:34:1B:B0:73:F5:6F:4E:11:43:18:FC:32:C2:18:E5:C5:88:CD:14
X509v3 Authority Key Identifier:
keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/534379FCEE1611ECA6DE1824C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
1.179.246.0/23
118.174.10.0/24
180.180.242.0-180.180.245.255
180.180.247.0/24
203.113.14.0/24
203.113.95.0/24
203.114.98.0/24
203.114.102.0/24
IPv6:
2001:ec0:100::/40
Signature Algorithm: sha256WithRSAEncryption
5d:0b:fb:fd:ad:e3:8e:a0:97:bd:f6:f2:ee:95:ba:cd:08:d7:
16:3f:2a:73:5a:ad:62:49:06:0f:b8:c6:27:d6:4b:8e:d8:b0:
dd:dd:aa:f6:37:e4:31:46:79:de:1b:d6:f0:f6:5c:42:98:87:
92:1e:1a:97:c6:bd:1a:60:b5:93:8e:56:77:85:0f:28:7e:e0:
e4:60:98:51:71:6c:4e:92:e5:c9:8e:af:9c:c4:04:cd:71:6f:
5e:e7:dc:14:76:57:a1:af:b5:93:ea:24:bd:b9:92:c9:71:5c:
30:86:12:03:21:8f:cf:ff:ff:76:89:36:8e:31:ab:61:c1:65:
f3:8a:be:24:23:4b:ed:d0:0d:c2:da:34:b3:a5:2a:b7:c7:2b:
8e:f4:d3:14:7a:b1:ec:92:ef:51:16:83:cd:d5:24:09:34:a0:
95:f1:46:6d:d7:a2:ab:c3:e3:7d:4b:4b:cf:bd:e6:ac:ad:53:
27:44:f5:91:9d:83:55:3a:56:73:a8:9d:3c:ba:6d:d2:ed:34:
d1:24:2a:d0:4e:0a:7f:04:57:88:21:c4:8a:c0:70:63:2c:98:
ed:b7:9c:2c:72:f6:63:d0:6f:9b:db:7b:eb:21:1b:b8:f8:97:
03:11:3e:9c:f0:e3:a2:7d:2b:5b:3c:4f:f8:75:2a:e8:10:09:
49:c2:fe:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 09:28:16 2026 by rpki-client