
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/07258E36F3C611EE807A6F3EC4F9AE02.roa
File: 07258E36F3C611EE807A6F3EC4F9AE02.roa (raw, json)
Hash identifier: 9ddaJnb2vB/K5havaxcmrS9aclGiXpdtn6ykn2Lek+o=
Subject key identifier: 4D:10:FC:18:8D:85:87:14:74:64:D0:E6:A8:15:1E:DD:50:59:7C:05
Certificate issuer: /CN=A91DEF41/serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98
Certificate serial: 0179
Authority key identifier: 33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/07258E36F3C611EE807A6F3EC4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:57:16 +0000
ROA not before: Fri 23 May 2025 04:56:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 203.170.90.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl
rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 03:52:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 377 (0x179)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEF41, serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98
Validity
Not Before: May 23 04:56:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a5a54c-64af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c7:af:18:e7:da:83:ba:64:3c:a7:0b:9b:b5:
04:ee:4b:92:6c:ab:02:c0:11:cf:26:57:c3:f6:3e:
f3:99:7e:22:50:82:e8:2e:c9:c5:26:0b:f0:94:96:
2d:bd:f7:a7:6a:cf:77:ad:2f:b9:a6:53:39:36:d9:
c2:6d:90:11:47:76:98:ad:20:4f:a2:95:aa:d7:bc:
7f:19:97:ef:3d:5e:31:4e:77:ab:80:fc:f2:36:73:
f8:90:97:d2:55:ef:fa:6c:3d:e3:d0:e3:2a:58:2f:
59:04:01:e0:41:79:84:51:ae:8c:34:37:79:c1:09:
1d:94:b2:7d:de:cd:dc:bf:30:78:80:e9:e9:5f:cd:
ea:a4:ae:aa:71:ae:12:3d:57:73:f4:a9:92:c9:f2:
b7:a5:83:c5:24:51:1d:c1:5c:d9:d2:b5:8b:1a:a9:
82:d7:a0:3b:e7:3a:e7:75:0b:bc:53:48:b2:82:c0:
cc:4e:34:d1:1e:c9:01:a9:20:c2:35:91:7c:1e:ca:
74:7f:db:02:a6:e3:3d:4a:97:e2:bd:ba:03:8f:c6:
48:51:b8:de:a7:04:e1:ee:87:8d:de:11:19:7a:17:
80:21:c5:31:f4:93:c6:22:14:15:3c:06:ff:f2:fa:
7e:96:35:13:a9:2e:00:07:87:ad:18:20:b1:13:48:
45:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:10:FC:18:8D:85:87:14:74:64:D0:E6:A8:15:1E:DD:50:59:7C:05
X509v3 Authority Key Identifier:
keyid:33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/07258E36F3C611EE807A6F3EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.170.90.0/23
Signature Algorithm: sha256WithRSAEncryption
82:50:ed:ce:57:17:4c:eb:8b:fa:0b:e0:13:26:5d:0b:33:1a:
01:45:a3:da:ed:27:2d:de:5d:a6:d8:41:f2:1b:e8:04:9f:21:
df:1c:e2:92:d7:43:97:cb:36:11:c2:75:25:67:c7:a8:eb:bf:
f7:ba:2a:9b:f6:b8:f1:cd:8f:a2:fc:2a:a7:0d:2f:e1:d0:a1:
4e:ca:9e:2c:bc:f5:89:bb:58:2d:fb:fb:9f:1b:04:58:64:16:
0f:98:86:f7:cd:08:0f:54:38:7e:41:31:87:d8:fe:93:86:37:
85:83:b6:77:00:3a:0c:69:eb:b1:b8:f6:d1:4b:10:46:01:a4:
f1:7e:e9:8b:7b:c8:3e:4e:c1:b0:0c:57:44:1e:e4:7e:19:9b:
c6:ba:4a:20:84:cf:76:7f:2e:2f:25:aa:6a:17:ee:c3:aa:c9:
e5:9f:5c:1b:23:a7:c3:59:57:9a:1f:81:90:66:d7:5f:d8:ac:
ad:cc:96:ee:f7:39:93:55:d8:89:d1:44:19:83:b9:bb:e4:b7:
8f:ca:27:85:e6:aa:c0:1d:a9:31:c6:58:41:de:dc:ec:a9:5f:
19:15:bd:f7:5b:d1:05:fb:8d:33:df:1d:64:87:9b:1f:c3:34:
2c:cc:0f:75:f0:90:b8:4e:f2:90:e4:3b:b7:52:60:bf:28:7d:
f6:ae:92:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:34:31 2026 by rpki-client