
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/14E0C65A4BFD11EAAB81FE0DC4F9AE02.roa
File: 14E0C65A4BFD11EAAB81FE0DC4F9AE02.roa (raw, json)
Hash identifier: JR0lf9Tz8IbMxdEKbfKHP0TINFSDMM0kEkaesNKxFow=
Subject key identifier: 4A:7B:D4:6B:57:BC:D7:F9:5B:9F:AD:DE:8D:8C:5D:92:A5:20:CF:BA
Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial: 2857
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/14E0C65A4BFD11EAAB81FE0DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:38:48 +0000
ROA not before: Tue 08 Apr 2025 15:53:26 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 132508
IP address blocks: 27.110.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 15:42:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10327 (0x2857)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Validity
Not Before: Apr 8 15:53:26 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a487b7-4d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:27:f7:9f:9f:58:19:53:d6:e5:b6:54:95:f2:
d6:f5:10:8d:fa:74:88:ae:25:ca:bf:0e:df:13:31:
a0:d8:47:8c:21:a0:87:e4:33:6d:fe:9d:38:a8:88:
69:dd:ce:ea:0a:1a:7f:dc:1a:ca:6c:d1:28:6b:6a:
c4:6d:74:de:8c:29:39:3c:cf:47:04:6e:8a:42:fc:
00:91:b7:40:8b:d6:e2:4b:1f:af:c1:c6:b7:ab:1d:
61:28:90:49:02:ab:04:41:20:af:22:05:33:6b:17:
ed:dc:14:8f:78:45:0d:9c:80:e3:1d:7a:ad:e7:97:
c2:9b:50:13:96:94:a5:4d:43:3a:47:2a:ba:19:29:
1d:2c:72:c8:04:8c:bf:aa:b1:ba:9b:66:20:55:50:
ea:87:06:35:76:b4:b9:06:64:11:b8:ed:43:02:8e:
81:d2:d1:0a:47:ad:fa:96:c8:41:db:1d:77:4e:e1:
84:37:6d:d2:07:11:5b:92:82:83:6f:f6:7b:a9:c6:
07:69:2a:2d:f2:85:3b:f9:bf:f0:9f:dd:19:14:1f:
d2:66:52:a7:a9:fa:41:6c:57:28:d1:91:7a:f7:f6:
a2:95:e2:50:80:57:ce:e6:e0:d4:6f:0a:62:89:2c:
6a:09:03:dd:f0:b5:2b:44:36:f8:d9:c3:05:0b:a9:
ab:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7B:D4:6B:57:BC:D7:F9:5B:9F:AD:DE:8D:8C:5D:92:A5:20:CF:BA
X509v3 Authority Key Identifier:
keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/14E0C65A4BFD11EAAB81FE0DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.110.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:f2:c1:7b:4d:83:f5:38:4a:7b:b1:08:a1:21:d7:79:af:ae:
8a:1a:0e:ee:f8:6d:fe:aa:b4:82:f5:c5:22:28:c1:65:9a:12:
5a:50:79:7a:49:04:c5:a9:d7:80:69:be:71:3b:cb:f4:54:95:
71:b2:0c:b6:b8:05:c9:43:7d:07:13:cb:d5:75:dc:bf:54:fb:
83:d2:86:73:2d:de:ad:c1:75:e8:ac:f2:3d:65:50:91:bd:ac:
b7:80:29:16:ef:b4:da:1d:44:d7:bd:42:b6:63:c8:44:d4:09:
31:d2:84:14:5e:0a:63:44:5c:a4:1f:3d:ff:9a:ed:fe:0c:2a:
ee:75:45:37:6e:88:35:23:cc:52:2c:09:24:c0:1d:5b:d7:5a:
a1:9c:70:99:49:aa:0a:11:bd:db:ed:53:c0:c9:8a:a1:6a:a1:
28:3f:dd:07:f4:a7:53:90:34:15:46:c3:ab:3b:a8:a9:41:a1:
60:d7:52:c0:77:93:d8:4f:cc:6b:9d:78:bb:3e:36:b5:76:2e:
8a:a2:31:5f:c9:2a:11:5d:21:34:9c:1c:d1:61:22:1d:d2:2b:
46:ad:2f:6b:db:41:c9:ec:8b:10:72:c2:50:c6:56:0f:bc:70:
ff:2f:0b:bc:b3:ee:38:0a:d4:f3:fc:c8:63:c5:77:a2:ce:0b:
47:e9:4b:c3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICKFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw
NDU5MjhBQjgwHhcNMjUwNDA4MTU1MzI2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODdiNy00ZDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtSf3n59YGVPW5bZUlfLW9RCN+nSIriXKvw7fEzGg2EeMIaCH5DNt/p04qIhp
3c7qChp/3BrKbNEoa2rEbXTejCk5PM9HBG6KQvwAkbdAi9biSx+vwca3qx1hKJBJ
AqsEQSCvIgUzaxft3BSPeEUNnIDjHXqt55fCm1ATlpSlTUM6Ryq6GSkdLHLIBIy/
qrG6m2YgVVDqhwY1drS5BmQRuO1DAo6B0tEKR636lshB2x13TuGEN23SBxFbkoKD
b/Z7qcYHaSot8oU7+b/wn90ZFB/SZlKnqfpBbFco0ZF69/aileJQgFfO5uDUbwpi
iSxqCQPd8LUrRDb42cMFC6mrSwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEp71GtX
vNf5W5+t3o2MXZKlIM+6MB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz
OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np
cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REZCNzAvMjk4MzY0N0M4MzhGMTFFNTg2RkM1ODEyQzRGOUFFMDIvMTRFMEM2NUE0
QkZEMTFFQUFCODFGRTBEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAG26BMA0GCSqGSIb3DQEBCwUAA4IBAQCx8sF7TYP1OEp7sQihIdd5
r66KGg7u+G3+qrSC9cUiKMFlmhJaUHl6SQTFqdeAab5xO8v0VJVxsgy2uAXJQ30H
E8vVddy/VPuD0oZzLd6twXXorPI9ZVCRvay3gCkW77TaHUTXvUK2Y8hE1Akx0oQU
XgpjRFykHz3/mu3+DCrudUU3bog1I8xSLAkkwB1b11qhnHCZSaoKEb3b7VPAyYqh
aqEoP90H9KdTkDQVRsOrO6ipQaFg11LAd5PYT8xrnXi7Pja1di6KojFfySoRXSE0
nBzRYSId0itGrS9r20HJ7IsQcsJQxlYPvHD/Lwu8s+44CtTz/MhjxXeizgtH6UvD
-----END CERTIFICATE-----
Generated at Sun Mar 8 03:23:08 2026 by rpki-client