
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/9EFE48D0A69B11F1A765D2433411F970.roa
File: 9EFE48D0A69B11F1A765D2433411F970.roa (raw, json)
Hash identifier: 2UrnpJXet7VCklAYIcXnXQOboG+3YKzzoeIW7h4GmNY=
Subject key identifier: 83:FA:F0:43:C8:FB:1F:42:34:77:90:4B:90:BA:DD:B4:73:51:EA:CB
Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Certificate serial: 239B
Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/9EFE48D0A69B11F1A765D2433411F970.roa
Signing time: Wed 02 Sep 2026 06:57:54 +0000
ROA not before: Wed 02 Sep 2026 06:57:54 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 63099
IP address blocks: 220.158.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9115 (0x239b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Validity
Not Before: Sep 2 06:57:54 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6a97c8f2-77f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:33:ef:19:64:86:15:b2:86:74:45:dc:38:30:
61:76:39:f2:80:11:c6:2f:25:43:60:9f:4d:64:37:
26:60:d8:b5:49:d9:e9:e8:09:1a:ce:8b:6f:16:50:
36:e4:e7:5a:5d:66:b5:29:f2:e2:b0:9a:bb:39:02:
06:9c:d6:8e:4d:88:d8:f3:b8:db:a1:c5:b1:89:30:
b6:80:61:e8:2a:0f:54:c1:e0:cc:33:96:83:03:6f:
47:ce:31:4c:f0:04:be:bf:77:b2:51:ae:e7:fc:c0:
91:b6:7b:c0:90:e6:31:fd:6f:a8:49:34:87:83:65:
4f:ca:30:4e:0c:d4:fa:7f:3c:b4:c9:e5:e7:ae:61:
d6:b9:8c:b5:ea:c4:3e:18:1f:3f:36:dc:8e:f7:8c:
ff:2f:c3:0f:88:b1:e5:35:ba:24:ee:c8:73:a9:dd:
64:fb:bc:dc:e6:68:c9:90:22:7c:1c:99:5d:7b:a5:
97:a4:48:2d:cd:b7:16:98:e9:a7:88:56:a4:4d:35:
24:f3:67:df:04:ef:7e:9b:fa:12:88:7f:03:fc:18:
d9:ed:7a:25:5d:08:28:02:ea:aa:5b:72:51:d5:72:
18:f6:0e:0b:d4:fa:05:dd:59:10:1e:67:e2:e8:89:
03:4a:92:18:b6:52:e8:60:a9:f8:9c:01:a7:2e:3f:
94:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FA:F0:43:C8:FB:1F:42:34:77:90:4B:90:BA:DD:B4:73:51:EA:CB
X509v3 Authority Key Identifier:
keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/9EFE48D0A69B11F1A765D2433411F970.roa
sbgp-ipAddrBlock: critical
IPv4:
220.158.206.0/24
Signature Algorithm: sha256WithRSAEncryption
29:66:09:d5:4d:6f:cb:db:59:59:2f:77:12:48:e4:3b:78:39:
ec:de:cf:93:79:c6:d0:7a:66:ad:39:09:f9:26:a9:b0:83:37:
19:c1:45:22:05:16:95:20:ec:5b:76:ed:33:ab:1b:36:27:4f:
88:e6:d3:b2:c6:9e:d0:46:eb:da:18:63:7a:c6:de:9b:65:04:
14:26:4e:02:ac:e7:c4:da:38:18:0a:06:a0:e4:00:f8:04:b9:
dd:ff:56:2a:84:54:11:9a:69:e3:a6:43:b6:b8:9e:18:14:1e:
ca:98:db:68:c1:a8:15:ab:7f:07:52:9d:51:f8:99:67:d0:92:
81:03:2b:67:66:41:36:b0:2d:9e:13:63:fb:ed:c9:27:df:b7:
a0:f3:c2:1f:bc:58:35:a6:75:c7:82:3e:20:49:26:5e:a5:fb:
87:14:71:1c:30:b5:71:6b:a5:a3:94:6a:2d:55:a4:cd:2c:7d:
c5:6a:5c:75:75:ee:13:1e:da:49:f0:5e:e0:d0:0c:89:c2:58:
79:f0:48:a3:e4:a0:31:e1:b8:2c:fb:42:66:ad:ff:6c:5b:8d:
a2:47:82:77:f4:05:9f:93:2f:0e:d6:42:c8:4c:81:65:f7:f7:
57:29:d3:82:75:c1:0a:3f:fc:e8:3a:42:85:32:32:5f:32:ef:
e7:56:d6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 08:41:04 2026 by rpki-client