
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/662A2F2286B411E6BAEB2614C4F9AE02.roa
File: 662A2F2286B411E6BAEB2614C4F9AE02.roa (raw, json)
Hash identifier: y6ZiKIpbO8nVe1RhgWjLdE8kQETpbK+AjZQf/Ewa3Fk=
Subject key identifier: B4:23:89:12:32:31:A8:ED:48:9B:62:32:97:FD:3A:6C:11:5C:D2:8B
Certificate issuer: /CN=A91DC5BE/serialNumber=ADA8AED32B15B87E611252D29D1E1D5BDE581646
Certificate serial: 360D
Authority key identifier: AD:A8:AE:D3:2B:15:B8:7E:61:12:52:D2:9D:1E:1D:5B:DE:58:16:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/662A2F2286B411E6BAEB2614C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:18:12 +0000
ROA not before: Fri 27 Nov 2020 14:20:07 +0000
ROA not after: Mon 31 Mar 2031 00:00:00 +0000
asID: 18368
IP address blocks: 203.119.86.0/24 maxlen: 24
2001:dd8:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.crl
rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Mar 2026 14:16:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13837 (0x360d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC5BE, serialNumber=ADA8AED32B15B87E611252D29D1E1D5BDE581646
Validity
Not Before: Nov 27 14:20:07 2020 GMT
Not After : Mar 31 00:00:00 2031 GMT
Subject: CN=69a474d4-caca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d3:32:09:81:28:8c:f0:51:43:89:4b:1e:29:
98:90:f6:40:c7:05:aa:a8:67:0f:56:ac:be:00:83:
39:b9:75:30:3c:d6:27:f1:42:c6:f4:c1:f1:5c:89:
2a:94:43:6d:63:0b:c4:14:83:bf:63:63:c7:7d:9b:
a2:85:b7:c1:34:19:72:19:46:b8:df:d0:05:bb:a5:
68:3a:0e:19:e0:c2:a0:ef:43:41:24:94:18:e7:39:
b1:f2:34:db:ed:59:60:e5:66:73:3c:86:25:86:23:
f1:e8:5d:7d:29:38:24:43:67:6a:1c:c9:95:5e:69:
96:e3:9e:9a:85:9d:2a:f8:01:f8:99:c2:92:57:21:
0c:ae:d4:ba:43:9f:0f:b3:66:6c:f6:b2:9c:78:ee:
39:7e:21:dd:da:23:aa:fd:ef:c3:20:b9:c4:53:63:
ae:b0:69:7a:6b:7b:f9:8b:9d:03:35:5a:30:78:9c:
b9:1e:16:82:fe:40:fb:78:57:50:8a:f5:45:da:c4:
b7:57:eb:a2:b8:98:4f:60:27:9a:5a:37:9d:eb:19:
2f:f6:06:66:bc:9e:07:fe:a9:b2:75:99:81:66:17:
51:fe:88:d4:74:58:96:24:b3:29:bb:ee:cd:f2:c6:
49:45:92:6c:46:66:bd:4a:ee:f5:43:98:be:b9:ef:
62:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:23:89:12:32:31:A8:ED:48:9B:62:32:97:FD:3A:6C:11:5C:D2:8B
X509v3 Authority Key Identifier:
keyid:AD:A8:AE:D3:2B:15:B8:7E:61:12:52:D2:9D:1E:1D:5B:DE:58:16:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/662A2F2286B411E6BAEB2614C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.119.86.0/24
IPv6:
2001:dd8:6::/48
Signature Algorithm: sha256WithRSAEncryption
b8:04:5e:3d:ac:7a:2c:c4:eb:44:e7:82:3e:49:3a:05:6f:b9:
23:ec:4d:ae:1c:83:16:8e:cf:9b:7a:04:aa:7f:f0:dd:d9:46:
e8:75:ad:45:a8:27:2b:7c:9b:9a:e2:58:98:57:b4:03:81:d9:
ba:4f:b2:ba:64:18:ea:27:12:93:3a:7f:11:c4:1a:3b:69:e0:
01:6a:53:fa:0c:04:ff:11:6b:b6:69:cf:10:9c:6c:91:ed:a4:
f4:5a:de:07:51:46:b6:49:75:cf:34:08:6b:c2:cd:c3:98:97:
66:d8:35:6b:02:db:d1:79:22:af:1b:47:9d:7a:d2:a9:a0:cd:
b9:35:78:06:1f:b0:a2:33:93:43:87:52:05:46:7e:e2:5c:95:
c0:b2:6c:30:46:76:53:8f:91:ca:41:79:6b:5e:e4:d8:21:00:
ae:4d:e3:5e:61:7b:03:32:c9:ea:11:72:39:88:0e:7c:be:1e:
b3:72:35:15:94:c3:3a:7e:b7:77:4a:ef:25:72:0a:bb:a7:04:
9e:0f:cd:50:61:e0:28:78:b7:bd:3f:2f:a5:f2:b6:ee:22:63:
56:0b:68:19:e8:6a:79:e6:38:76:3f:25:33:90:d9:ee:ec:60:
87:af:a1:e1:00:1d:fd:28:b8:37:e5:9d:62:ab:fd:04:89:54:
83:d8:5f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 23:28:12 2026 by rpki-client