
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/A4C78624D4CC11F083620C83C4F9AE02.roa
File: A4C78624D4CC11F083620C83C4F9AE02.roa (raw, json)
Hash identifier: 0F3WwX6JLWtvVg/ceJ0+Xc+w1kqKsMeH8GrxG9Um5ig=
Subject key identifier: 35:A3:4B:A9:77:DC:D6:63:9C:F3:20:F3:5D:02:9B:49:5B:1F:3C:1E
Certificate issuer: /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8
Certificate serial: 3699
Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/A4C78624D4CC11F083620C83C4F9AE02.roa
Signing time: Sun 30 Aug 2026 15:14:07 +0000
ROA not before: Sun 30 Aug 2026 15:14:07 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 147027
IP address blocks: 1.179.227.0/24 maxlen: 24
125.24.252.0/24 maxlen: 24
2001:ec0:8a5::/48 maxlen: 48
2001:ec0:400c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl
rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13977 (0x3699)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF4FE, serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8
Validity
Not Before: Aug 30 15:14:07 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a9448bf-923f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0a:cf:f3:b9:ff:03:bf:b7:41:53:c4:e0:40:
64:2d:94:2f:b5:fb:e3:fd:8d:58:e0:c9:12:6d:68:
a3:2f:78:44:38:18:aa:38:94:95:65:29:21:fe:13:
6e:08:8a:b3:3e:da:d9:92:7f:88:d9:5b:48:3e:f9:
b5:4f:c5:12:02:1a:0d:b4:23:b6:f8:c6:56:89:b1:
15:e7:05:91:3b:5e:d0:47:ff:e9:76:b3:52:be:d3:
72:80:0f:e6:0c:7d:2d:75:49:2b:20:d2:99:b2:20:
35:5b:80:65:c8:db:a0:11:00:64:2c:4e:5a:56:b5:
86:ef:93:cb:42:ee:d5:78:5e:fc:04:dd:3a:7a:a6:
75:92:69:fe:d1:d3:e7:75:cc:41:ea:f1:ad:02:e0:
1d:50:ae:67:49:bb:60:90:b0:f4:3c:f9:96:1f:91:
bb:dd:c5:a6:28:80:11:6c:b5:08:13:cb:87:1e:a8:
79:0d:a8:57:18:6f:11:dc:f8:96:59:32:99:e1:5e:
9b:68:42:e7:f1:88:0b:ca:23:a8:34:00:9a:9e:2b:
56:bc:f1:64:bf:25:0f:b7:02:9a:83:97:c7:96:69:
89:91:5f:d9:30:0b:8e:6f:85:9f:34:c8:08:30:f0:
9b:d5:a6:93:35:f3:fa:b3:91:b6:a5:c4:8c:1d:80:
4a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A3:4B:A9:77:DC:D6:63:9C:F3:20:F3:5D:02:9B:49:5B:1F:3C:1E
X509v3 Authority Key Identifier:
keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/A4C78624D4CC11F083620C83C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
1.179.227.0/24
125.24.252.0/24
IPv6:
2001:ec0:8a5::/48
2001:ec0:400c::/48
Signature Algorithm: sha256WithRSAEncryption
a1:3c:1b:2d:ad:ee:af:31:97:89:f7:05:1d:4a:6b:22:38:20:
b6:f9:f6:ab:a2:ed:d5:5b:6e:92:61:84:9b:c5:fe:17:bc:3e:
90:2d:24:5b:40:22:0e:31:b4:c9:4d:0b:b7:5a:f0:bb:4d:c8:
15:6d:1d:3a:48:d0:1a:5e:3d:1e:21:6a:78:22:b9:38:99:ca:
cc:57:06:5f:88:07:37:06:72:d8:fa:32:4a:4e:a7:27:31:f9:
05:04:92:23:99:55:e6:a0:b6:43:e1:c8:c1:e0:2a:9c:01:9a:
73:17:95:e8:4f:eb:e9:36:93:31:2f:1d:80:8d:1b:ae:22:58:
73:cf:4c:1d:3e:9c:c1:7a:02:8e:dc:93:64:00:27:e1:55:d4:
e2:fc:3a:32:23:f4:ca:05:cb:f2:08:ce:a9:b1:9a:75:2c:68:
5d:5d:35:57:98:0e:41:ad:f7:af:68:58:7b:54:8d:1e:ff:3b:
30:64:71:d8:37:36:bf:ad:45:12:3d:d3:24:e2:83:2d:83:e6:
82:a7:f4:2b:65:bb:20:73:6c:db:6c:0e:5c:d1:fb:6e:06:27:
f8:a8:88:ee:c5:6b:74:5c:94:17:f5:9b:d1:2b:ed:fd:65:e1:
1f:ee:7c:d5:c8:8b:f1:9c:d6:54:48:9c:3a:53:b8:9d:49:fc:
c6:26:62:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 09:28:06 2026 by rpki-client