
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/226402B0860D11EB8F541B68C4F9AE02.roa
File: 226402B0860D11EB8F541B68C4F9AE02.roa (raw, json)
Hash identifier: M9ppE4joD9xwoTUQo681WtE4hNxYeaQXNCyA3Aznyms=
Subject key identifier: 2B:65:0D:08:4A:2E:32:A0:23:92:54:6C:28:4A:89:03:C1:C3:1A:7A
Certificate issuer: /CN=A91D14EF/serialNumber=F1B65B797616397352ECBD4A2C774FCF7EC6D470
Certificate serial: 06E8
Authority key identifier: F1:B6:5B:79:76:16:39:73:52:EC:BD:4A:2C:77:4F:CF:7E:C6:D4:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/226402B0860D11EB8F541B68C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:44:25 +0000
ROA not before: Wed 30 Apr 2025 22:34:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4826
IP address blocks: 203.56.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.crl
rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 21:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1768 (0x6e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D14EF, serialNumber=F1B65B797616397352ECBD4A2C774FCF7EC6D470
Validity
Not Before: Apr 30 22:34:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3fc69-d4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f1:31:0f:04:e1:3c:6a:6b:6d:07:34:db:dc:
9c:35:b0:cb:d0:e9:62:45:83:13:58:b8:3c:9c:c1:
7a:0b:c3:33:30:2d:27:17:fd:f0:2f:bd:4a:fb:ac:
a7:0e:79:5c:b4:29:3d:3f:af:61:39:c6:cf:7c:41:
e3:e8:40:01:cf:52:d1:80:b8:fd:d6:b3:8e:7c:06:
c6:9f:57:4b:e4:d0:0a:88:94:16:df:14:8a:18:6f:
b4:8a:f4:28:c6:15:60:97:c0:80:14:99:38:72:3f:
17:81:7a:05:d7:f6:53:e6:7b:0f:f4:c4:2d:6b:8c:
7a:1e:a5:63:eb:2b:1a:2f:d3:c5:8a:42:c9:b9:b4:
5f:41:92:39:ee:87:e5:ae:24:38:8e:1f:4c:80:a9:
97:a8:bb:c2:36:5a:37:96:a3:b6:8a:7a:41:7f:93:
50:19:5a:22:3c:7a:9f:1b:df:7c:a1:e3:fb:cf:ac:
2a:6f:68:ca:34:df:cf:4f:63:ea:3b:ad:95:f5:61:
7c:70:78:d8:39:da:d1:ab:9a:c2:64:f0:40:d7:ce:
67:8c:11:e9:6d:b0:f7:da:1f:90:32:57:da:d1:fb:
05:02:48:18:73:87:aa:aa:e1:06:1e:cf:b3:f8:7d:
66:73:68:78:ba:75:e4:e2:44:34:a4:0e:af:63:49:
61:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:65:0D:08:4A:2E:32:A0:23:92:54:6C:28:4A:89:03:C1:C3:1A:7A
X509v3 Authority Key Identifier:
keyid:F1:B6:5B:79:76:16:39:73:52:EC:BD:4A:2C:77:4F:CF:7E:C6:D4:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/226402B0860D11EB8F541B68C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.56.102.0/24
Signature Algorithm: sha256WithRSAEncryption
27:b4:4d:a6:c2:e7:47:78:98:1b:a0:59:fc:45:a8:ab:52:0d:
9a:d2:18:58:11:0a:cf:41:44:0e:32:42:0b:19:5a:99:51:d5:
c8:8c:6e:8c:e2:34:46:9d:d1:4c:bb:9d:e3:42:14:20:c1:29:
9a:4a:fe:bd:99:ee:ad:e1:a6:b7:f1:ca:63:a5:0b:f7:2e:59:
16:3a:1b:2c:5f:d3:fe:03:42:ec:49:d5:f7:d2:a6:f0:54:0d:
6d:16:2d:fc:ca:df:e2:7b:d8:11:de:fc:22:76:a9:22:67:ab:
c1:90:f7:0c:f2:37:a0:f8:d7:78:01:a2:ba:93:d0:3b:5a:a3:
ba:f7:a3:2f:dd:80:18:a1:e8:f1:bb:54:f1:a3:9d:05:83:fd:
85:78:9a:1e:24:c8:d2:63:d1:de:ce:11:13:70:b5:a3:97:10:
59:d0:82:21:84:23:7d:78:2d:4e:11:b3:f1:73:d6:46:cc:b3:
20:9d:d5:73:f7:83:71:28:2f:c3:8f:63:73:9b:b9:35:3f:7f:
2e:0e:9e:50:c0:ed:4c:6c:2b:24:a0:0b:eb:89:73:6e:f7:f5:
70:04:23:85:36:6d:8f:b2:c2:da:25:17:08:27:00:3f:5f:86:
7a:16:05:d6:b7:0b:bd:7e:8d:4b:8e:37:5b:37:c3:4c:c3:9b:
a9:0b:d2:6e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDE0RUYxMTAvBgNVBAUTKEYxQjY1Qjc5NzYxNjM5NzM1MkVDQkQ0QTJDNzc0RkNG
N0VDNkQ0NzAwHhcNMjUwNDMwMjIzNDE2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZmM2OS1kNGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArfExDwThPGprbQc029ycNbDL0OliRYMTWLg8nMF6C8MzMC0nF/3wL71K+6yn
DnlctCk9P69hOcbPfEHj6EABz1LRgLj91rOOfAbGn1dL5NAKiJQW3xSKGG+0ivQo
xhVgl8CAFJk4cj8XgXoF1/ZT5nsP9MQta4x6HqVj6ysaL9PFikLJubRfQZI57ofl
riQ4jh9MgKmXqLvCNlo3lqO2inpBf5NQGVoiPHqfG998oeP7z6wqb2jKNN/PT2Pq
O62V9WF8cHjYOdrRq5rCZPBA185njBHpbbD32h+QMlfa0fsFAkgYc4eqquEGHs+z
+H1mc2h4unXk4kQ0pA6vY0lhEQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCtlDQhK
LjKgI5JUbChKiQPBwxp6MB8GA1UdIwQYMBaAFPG2W3l2FjlzUuy9Six3T89+xtRw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTRFRi8yNjQwMTAwNjg2
MEIxMUVCOTFDMTJENjNDNEY5QUUwMi84YlpiZVhZV09YTlM3TDFLTEhkUHozN0cx
SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhiWmJlWFlXT1hOUzdMMUtMSGRQejM3RzFIQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDE0RUYvMjY0MDEwMDY4NjBCMTFFQjkxQzEyRDYzQzRGOUFFMDIvMjI2NDAyQjA4
NjBEMTFFQjhGNTQxQjY4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyzhmMA0GCSqGSIb3DQEBCwUAA4IBAQAntE2mwudHeJgboFn8Rair
Ug2a0hhYEQrPQUQOMkILGVqZUdXIjG6M4jRGndFMu53jQhQgwSmaSv69me6t4aa3
8cpjpQv3LlkWOhssX9P+A0LsSdX30qbwVA1tFi38yt/ie9gR3vwidqkiZ6vBkPcM
8jeg+Nd4AaK6k9A7WqO696Mv3YAYoejxu1Txo50Fg/2FeJoeJMjSY9HezhETcLWj
lxBZ0IIhhCN9eC1OEbPxc9ZGzLMgndVz94NxKC/Dj2Nzm7k1P38uDp5QwO1MbCsk
oAvriXNu9/VwBCOFNm2PssLaJRcIJwA/X4Z6FgXWtwu9fo1LjjdbN8NMw5upC9Ju
-----END CERTIFICATE-----
Generated at Sun Mar 8 01:46:13 2026 by rpki-client