
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/E79C4936420D11EC89D7C163C4F9AE02.roa
File: E79C4936420D11EC89D7C163C4F9AE02.roa (raw, json)
Hash identifier: b6TojMyMXKNeDAeMFbGHIUBMHFzUnaz4LVGCT3m/S4A=
Subject key identifier: CA:EB:D5:1F:52:1B:36:D1:22:E3:5C:16:D8:EF:B9:4F:03:FE:96:37
Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Certificate serial: 1003
Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/E79C4936420D11EC89D7C163C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:47:09 +0000
ROA not before: Wed 14 Jan 2026 18:15:13 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 56311
IP address blocks: 210.57.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 17:41:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4099 (0x1003)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Validity
Not Before: Jan 14 18:15:13 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a489ad-eb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ea:c2:bd:c6:a4:eb:93:bc:0b:4e:e6:57:19:
d7:c5:10:cd:3b:09:3e:77:b2:1a:00:c9:f7:cd:e1:
09:27:b5:d1:91:94:89:45:9d:4e:58:91:ef:15:f0:
28:84:a1:78:14:cd:39:72:25:8b:d9:14:02:68:e4:
fa:bf:d2:83:7d:43:85:22:de:d2:5c:43:ca:ac:7c:
3d:93:dc:d6:98:d6:f9:22:a3:1c:6a:54:17:d6:73:
f0:13:9d:52:9c:53:99:49:8b:1a:8c:4e:0f:fc:2a:
3c:05:27:63:2c:4b:04:eb:1e:79:86:2e:a3:63:91:
fc:21:4d:3a:2b:28:35:a5:f4:33:5a:0c:31:71:8f:
b4:e8:c4:b1:7d:07:fa:cf:2e:89:13:8f:21:d2:a0:
5a:05:24:5a:d9:01:da:59:4a:a5:99:6c:27:19:23:
17:4f:d4:7d:f9:8b:cb:60:90:ba:13:94:fe:f6:25:
ea:da:52:b8:7e:90:c4:f9:88:a5:7a:1c:56:40:14:
ce:8e:d5:3d:be:51:57:d3:67:93:05:86:6b:39:c6:
90:57:16:ff:48:c9:0d:97:32:8d:d6:73:f5:1f:bf:
9e:99:77:b4:b7:5a:4f:0b:ab:44:8c:55:0a:38:72:
f4:98:c8:62:3d:18:5d:89:c0:ba:57:25:f3:7a:47:
77:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EB:D5:1F:52:1B:36:D1:22:E3:5C:16:D8:EF:B9:4F:03:FE:96:37
X509v3 Authority Key Identifier:
keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/E79C4936420D11EC89D7C163C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.57.76.0/24
Signature Algorithm: sha256WithRSAEncryption
87:cb:61:ea:b2:18:91:54:b0:dc:fe:45:28:1b:fa:e0:0e:81:
3e:d3:95:46:01:83:6c:2e:8d:bc:6f:b2:8c:2e:72:da:a9:96:
97:76:71:54:28:2b:d3:a3:35:d5:88:c4:25:2f:74:35:60:b9:
73:ae:a0:da:01:4c:11:08:65:f7:5c:68:4e:7f:57:2e:41:d4:
ca:eb:8c:97:1b:29:07:8c:c0:6a:bd:2f:3d:25:f7:4c:80:13:
fe:20:85:f7:8a:48:0c:dd:f5:e8:fd:c0:ae:88:27:bb:ec:d9:
90:41:20:bd:3a:6d:d7:95:80:ca:17:4a:8b:6b:e1:86:7a:b5:
c7:a0:a4:d2:50:78:be:1d:66:1b:fd:74:6b:e4:86:10:30:0e:
7f:56:99:f8:e0:8d:9f:b5:27:17:84:64:c7:cb:14:e6:b8:0d:
2b:84:7c:fc:a8:fe:e9:f0:ad:8d:54:ec:00:e0:a7:43:4b:77:
72:a5:c4:e2:4f:fc:49:0b:4b:65:6c:60:01:b9:74:83:9a:0e:
7c:e3:07:80:71:cb:b7:64:7b:5f:72:e8:11:87:93:9b:12:82:
5e:a0:aa:25:c0:be:6e:91:d3:d4:55:18:a9:2f:b7:a7:42:91:
fe:6a:b4:56:d0:3d:ba:6d:01:84:58:a5:84:eb:58:96:84:1a:
e1:bf:a5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 03:30:19 2026 by rpki-client