
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/2154A9349EC011F1B15E06384311F970.roa
File: 2154A9349EC011F1B15E06384311F970.roa (raw, json)
Hash identifier: IaN1CbJjVBbSbEXHP5CyiCsaIkx1jFd1E5bqJGTrPXY=
Subject key identifier: 7A:78:79:47:F0:6A:C7:48:F1:CF:97:DF:02:20:00:F2:86:C5:B3:D0
Certificate issuer: /CN=A91D4345/serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB
Certificate serial: 0D58
Authority key identifier: E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/2154A9349EC011F1B15E06384311F970.roa
Signing time: Sun 23 Aug 2026 06:59:06 +0000
ROA not before: Sun 23 Aug 2026 06:59:06 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 149994
IP address blocks: 202.125.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl
rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 18:08:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3416 (0xd58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4345, serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB
Validity
Not Before: Aug 23 06:59:06 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a8a9a3a-e979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1c:70:5a:c1:bd:40:49:1c:94:74:a2:47:05:
f2:95:d1:52:9d:30:fb:85:b3:e1:e5:39:ee:dd:89:
bb:92:1e:21:82:74:20:a5:0e:e4:f6:88:ef:0d:8b:
ac:75:c2:b8:d3:6b:9b:23:9c:4e:7b:ad:5c:f4:6b:
6a:fe:d4:ad:83:e7:b2:33:11:e9:c7:f4:c1:9f:cd:
1e:7a:8a:6e:d3:9c:4a:5c:46:6b:d5:6e:7b:9d:22:
35:66:42:34:29:a4:bb:17:2e:43:e3:9c:aa:04:1a:
8d:42:2b:11:ab:ce:b1:90:b4:25:d0:2a:84:69:2b:
f4:57:54:32:be:ef:41:e8:26:59:73:0c:1d:ff:0a:
39:63:ce:0e:f6:d5:61:a9:c2:06:9a:05:6e:24:25:
c8:18:a2:7f:e4:fb:dc:43:7a:83:87:67:c0:4a:b1:
af:52:6b:56:50:3b:b8:f2:e5:ea:ef:09:84:90:dd:
33:e0:b5:97:36:bc:4a:7b:2d:2b:76:77:e1:45:1d:
ec:02:20:11:0e:89:55:3c:94:cf:f1:d8:a3:a1:37:
79:13:56:da:04:8c:40:46:15:9c:77:3f:93:89:3e:
e1:54:04:8f:b4:47:39:96:8a:3f:51:fd:db:d6:1b:
a8:b5:41:58:f8:5a:e5:ad:d1:0b:97:5a:7b:e1:0d:
a5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:78:79:47:F0:6A:C7:48:F1:CF:97:DF:02:20:00:F2:86:C5:B3:D0
X509v3 Authority Key Identifier:
keyid:E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/2154A9349EC011F1B15E06384311F970.roa
sbgp-ipAddrBlock: critical
IPv4:
202.125.72.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:9b:1f:7a:a1:6a:46:8d:fb:79:18:4c:18:64:9b:77:46:cc:
e0:0d:16:5b:a7:b3:77:c0:f7:96:ec:53:c5:1a:72:59:43:c2:
6a:24:a7:5d:c3:e8:8a:0f:df:b7:0c:9b:ed:04:f6:4b:1f:55:
06:ea:48:79:75:2d:9c:2c:55:a8:32:7a:e2:32:60:d3:75:30:
bb:c1:52:cf:13:17:c9:70:d2:2e:99:14:fa:e0:b4:ea:2a:dc:
4d:46:4a:43:eb:aa:fa:a1:64:24:de:83:02:1c:8c:76:46:8a:
5c:8f:6d:7e:38:1d:1f:02:29:4e:c5:15:f8:8e:38:5b:7d:ec:
6b:2b:c6:ab:95:c6:70:0b:eb:33:7a:d0:37:4f:e3:42:8d:d8:
8e:2f:64:bf:1a:90:7c:2b:43:cb:51:e5:af:84:17:4c:0b:47:
c6:25:d9:64:63:a7:33:b7:97:af:7c:f2:e7:2b:04:d9:0c:7a:
a7:5c:df:09:09:ab:3b:92:cc:25:f8:86:74:97:c2:16:75:9c:
bb:fb:d2:cb:c6:90:d8:9b:33:26:03:ec:5c:7a:c8:e5:26:08:
55:0c:8f:d2:b4:24:60:45:4c:37:eb:42:f3:3c:2d:f3:2d:28:
e0:2b:c2:e9:48:d3:6e:5c:76:55:f7:4e:fb:7a:a1:2e:52:20:
32:5a:f8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 20:05:46 2026 by rpki-client