
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/142EA3A84FEF11EF9A822A21C4F9AE02.roa
File: 142EA3A84FEF11EF9A822A21C4F9AE02.roa (raw, json)
Hash identifier: lK+6g1dFg3Vz3OBJu6Pg0Z8gk/MbJN6sYU86kkiDIvM=
Subject key identifier: D4:90:48:F9:D7:8A:87:69:19:5B:B6:88:C5:57:E3:9D:28:40:7F:96
Certificate issuer: /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
Certificate serial: 03FD
Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/142EA3A84FEF11EF9A822A21C4F9AE02.roa
Signing time: Mon 02 Mar 2026 05:12:38 +0000
ROA not before: Thu 05 Jun 2025 01:08:19 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 151499
IP address blocks: 202.12.87.0/24 maxlen: 24
202.12.88.0/24 maxlen: 24
202.12.89.0/24 maxlen: 24
202.12.90.0/24 maxlen: 24
203.0.12.0/23 maxlen: 24
203.3.124.0/22 maxlen: 22
203.4.226.0/24 maxlen: 24
203.12.236.0/22 maxlen: 22
203.12.236.0/24 maxlen: 24
203.12.237.0/24 maxlen: 24
203.12.238.0/24 maxlen: 24
203.12.239.0/24 maxlen: 24
203.14.152.0/24 maxlen: 24
203.14.153.0/24 maxlen: 24
203.14.154.0/24 maxlen: 24
203.14.155.0/24 maxlen: 24
203.14.158.0/23 maxlen: 24
203.27.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl
rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 00:52:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1021 (0x3fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E91BC, serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
Validity
Not Before: Jun 5 01:08:19 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a51c46-d76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:39:17:0d:bc:87:06:6f:11:a3:09:33:70:48:
51:7c:1d:1b:f1:79:f7:9e:da:f4:29:5c:1a:f6:38:
69:86:77:2d:4f:c2:7a:0b:1b:f8:b9:49:be:6a:76:
2b:7b:b7:44:a2:29:f6:f1:80:af:0a:39:a0:02:69:
59:65:38:93:e5:9b:57:5b:2d:c5:ff:e3:8c:60:15:
04:de:c4:6b:bd:c3:c4:c0:ee:d0:5e:f5:2f:8c:87:
20:15:48:13:a3:3b:61:8f:bd:18:2f:b3:71:83:fe:
ea:c7:c3:bb:b6:53:b4:db:e7:4f:83:5d:ec:ce:00:
1c:61:dc:ca:2a:e8:67:3a:66:38:06:75:8c:68:79:
57:d0:ff:52:00:76:9d:64:20:77:22:ca:7f:d9:1f:
85:2c:3d:9c:a9:0e:9b:74:8a:d6:d0:fa:1c:e6:d2:
56:9a:be:d1:c1:6d:84:ce:e7:de:12:fc:dd:39:0a:
d6:e0:de:f6:50:7e:87:c0:1c:af:42:5a:06:6d:69:
b8:d6:0e:64:49:6d:cf:52:e8:f2:a0:f5:8f:a0:b8:
59:60:7d:92:06:bc:0f:e1:d3:ae:42:ff:f6:0a:4b:
11:ab:f0:86:2e:0c:d9:ce:ba:51:d5:e8:af:25:69:
18:06:cc:ae:d0:8c:24:4d:e1:c0:ff:c0:60:75:e6:
5b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:90:48:F9:D7:8A:87:69:19:5B:B6:88:C5:57:E3:9D:28:40:7F:96
X509v3 Authority Key Identifier:
keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/142EA3A84FEF11EF9A822A21C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.12.87.0-202.12.90.255
203.0.12.0/23
203.3.124.0/22
203.4.226.0/24
203.12.236.0/22
203.14.152.0/22
203.14.158.0/23
203.27.126.0/24
Signature Algorithm: sha256WithRSAEncryption
47:3d:51:fc:7d:b2:14:87:6d:a9:61:08:fa:49:fd:15:6b:3c:
3e:67:5f:8c:6c:b4:ea:3a:84:d4:cd:cc:98:fd:0b:64:dd:81:
79:e8:50:78:b4:6b:29:a0:2d:82:ea:66:b2:e7:4d:ab:a9:94:
74:5f:4d:be:a1:bd:2c:58:6b:f0:60:f2:19:f3:05:54:64:f9:
7c:0f:87:37:05:d5:0d:59:d9:b2:77:c8:4d:d5:8f:af:f4:a8:
d1:1c:d4:e0:4f:36:ba:48:dc:d8:31:ac:95:b1:39:31:6a:3d:
58:44:15:7e:0f:d7:b3:e4:38:d9:54:a6:38:8d:30:a8:57:a8:
74:84:d3:21:d6:4f:ae:57:68:85:9e:48:82:26:17:d1:da:fb:
8f:32:a2:9f:10:38:33:b3:c1:b5:98:c7:38:b5:f2:c6:11:ec:
87:f2:1b:e4:00:96:ca:89:e9:27:6d:09:3b:51:c9:b2:f2:50:
32:da:d6:de:27:d7:27:90:b6:f6:09:d8:c9:8c:d3:1b:1d:e8:
33:be:f3:7c:72:4c:47:04:22:a6:04:99:3c:58:7f:fe:f6:e2:
ab:e7:02:f3:fa:85:1a:4c:4f:7a:0d:8c:3b:39:e6:ea:98:64:
96:9d:f8:3c:c0:f7:8c:bc:cf:26:3c:a6:9c:4d:bf:7d:bf:bb:
99:ff:13:2e
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgICA/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTkxQkMxMTAvBgNVBAUTKDZENUQ1MEU4OEI5RDY1RThBRkRBMjhDMkNFQTYxNTAx
MjcwMzg2MDgwHhcNMjUwNjA1MDEwODE5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1MWM0Ni1kNzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuDkXDbyHBm8RowkzcEhRfB0b8Xn3ntr0KVwa9jhphnctT8J6Cxv4uUm+anYr
e7dEoin28YCvCjmgAmlZZTiT5ZtXWy3F/+OMYBUE3sRrvcPEwO7QXvUvjIcgFUgT
ozthj70YL7Nxg/7qx8O7tlO02+dPg13szgAcYdzKKuhnOmY4BnWMaHlX0P9SAHad
ZCB3Isp/2R+FLD2cqQ6bdIrW0Poc5tJWmr7RwW2EzufeEvzdOQrW4N72UH6HwByv
QloGbWm41g5kSW3PUujyoPWPoLhZYH2SBrwP4dOuQv/2CksRq/CGLgzZzrpR1eiv
JWkYBsyu0IwkTeHA/8BgdeZbswIDAQABo4ICkjCCAo4wHQYDVR0OBBYEFNSQSPnX
iodpGVu2iMVX450oQH+WMB8GA1UdIwQYMBaAFG1dUOiLnWXor9oows6mFQEnA4YI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTFCQy9BRTQ0RDI0QURC
RTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFplaXYyaWpDenFZVkFTY0Ro
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JWMVE2SXVkWmVpdjJpakN6cVlWQVNjRGhnZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTkxQkMvQUU0NEQyNEFEQkU5MTFFQzk1MTEwNTE1QzRGOUFFMDIvMTQyRUEzQTg0
RkVGMTFFRjlBODIyQTIxQzRGOUFFMDIucm9hMFEGCCsGAQUFBwEHAQH/BEIwQDA+
BAIAATA4MAwDBADKDFcDBADKDFoDBAHLAAwDBALLA3wDBADLBOIDBALLDOwDBALL
DpgDBAHLDp4DBADLG34wDQYJKoZIhvcNAQELBQADggEBAEc9Ufx9shSHbalhCPpJ
/RVrPD5nX4xstOo6hNTNzJj9C2TdgXnoUHi0aymgLYLqZrLnTauplHRfTb6hvSxY
a/Bg8hnzBVRk+XwPhzcF1Q1Z2bJ3yE3Vj6/0qNEc1OBPNrpI3NgxrJWxOTFqPVhE
FX4P17PkONlUpjiNMKhXqHSE0yHWT65XaIWeSIImF9Ha+48yop8QODOzwbWYxzi1
8sYR7IfyG+QAlsqJ6SdtCTtRybLyUDLa1t4n1yeQtvYJ2MmM0xsd6DO+83xyTEcE
IqYEmTxYf/724qvnAvP6hRpMT3oNjDs55uqYZJad+DzA94y8zyY8ppxNv32/u5n/
Ey4=
-----END CERTIFICATE-----
Generated at Wed Mar 4 13:00:19 2026 by rpki-client