
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/469DADAE9B1D11F199542C1F6411F970.roa
File: 469DADAE9B1D11F199542C1F6411F970.roa (raw, json)
Hash identifier: 7ld5vVKkgDVk7iu8ZivqDo4KyiyF+452Quc+9rok5eY=
Subject key identifier: 60:D8:91:D6:5D:B2:2B:7D:86:FA:35:7E:EB:10:DD:CE:AB:D2:EF:3E
Certificate issuer: /CN=A91EB929/serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2
Certificate serial: 01E2
Authority key identifier: A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/469DADAE9B1D11F199542C1F6411F970.roa
Signing time: Tue 18 Aug 2026 15:55:47 +0000
ROA not before: Tue 18 Aug 2026 15:55:47 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 24399
IP address blocks: 202.133.8.0/21 maxlen: 21
203.80.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl
rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 04:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 482 (0x1e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB929, serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2
Validity
Not Before: Aug 18 15:55:47 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a848083-61e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f8:1d:b7:0b:1e:49:7e:c7:e1:ca:6f:ab:51:
00:36:d5:12:0b:cd:08:3f:d7:b7:34:aa:43:4e:34:
6c:8c:54:13:0f:55:8c:1d:8c:c4:a1:06:bd:4f:7f:
7b:c7:3e:42:eb:14:3c:21:e5:ed:dd:37:51:3d:af:
10:71:f3:72:04:ee:e5:d5:26:c6:21:46:b7:9a:15:
9a:23:e4:f4:b4:e8:cf:21:f3:95:a2:38:97:a0:52:
ff:86:8c:11:d7:9c:39:15:2b:f2:4d:ef:3d:c5:b9:
51:4c:f5:05:a0:8b:a5:78:ae:38:18:39:56:43:75:
f7:87:41:67:cf:cf:21:4b:b8:42:09:c4:13:4c:a6:
43:96:d5:7d:fe:b0:81:c2:8a:fd:e0:e8:a0:df:a2:
20:b8:15:93:31:5e:1a:e1:ca:d7:e7:d0:d9:fd:bb:
c5:b5:49:d6:a8:7c:70:21:cb:e9:f9:f8:d8:1b:54:
d7:31:ae:d0:66:f2:54:c8:27:7a:a4:d2:cd:a9:1d:
13:62:02:cd:10:30:8c:11:ac:c6:37:5f:a7:9d:c9:
90:8d:da:a7:ba:b0:af:65:13:24:32:8b:3c:87:2a:
98:f4:ed:bb:6a:9f:10:4a:b5:fb:43:24:cd:88:0d:
25:8a:67:e9:45:e9:55:37:a3:ca:8d:5b:60:3f:ab:
d7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D8:91:D6:5D:B2:2B:7D:86:FA:35:7E:EB:10:DD:CE:AB:D2:EF:3E
X509v3 Authority Key Identifier:
keyid:A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/469DADAE9B1D11F199542C1F6411F970.roa
sbgp-ipAddrBlock: critical
IPv4:
202.133.8.0/21
203.80.184.0/22
Signature Algorithm: sha256WithRSAEncryption
87:94:cc:fa:a3:c0:d2:76:ad:78:2d:32:38:59:4d:0d:59:6c:
3e:9d:61:bd:46:c3:57:b0:ee:28:6f:6e:3b:13:f7:7d:cf:95:
db:15:af:c5:a4:a6:6f:af:ca:8b:ac:9e:c4:d5:92:9b:25:d2:
64:01:be:c0:88:0f:37:1a:a8:ba:ba:da:bb:0d:67:bc:b3:3d:
af:6b:dc:fe:23:23:92:2e:56:62:0b:9c:34:7e:83:10:7c:b9:
75:f9:80:e9:dc:8e:f4:f3:cb:92:6b:b1:c8:68:6a:a2:08:fe:
26:85:cf:15:49:05:7a:94:2b:84:cc:5c:82:68:c8:5b:df:33:
01:f6:bf:4b:e2:a0:da:87:89:51:45:75:57:eb:11:a7:c1:98:
34:fc:9d:71:cf:45:81:3d:70:4c:df:44:0e:55:85:9d:01:a7:
34:a0:24:a3:f6:b1:64:d5:ba:4c:4f:d3:b2:2b:67:d2:be:70:
0e:51:d5:cc:da:6e:38:5d:8b:3a:9f:9a:77:a8:d9:2f:28:1b:
71:40:a1:86:0c:e1:b9:cc:a5:4c:38:c9:e0:f0:a1:a8:12:5c:
4d:e2:5c:ab:28:af:b8:f6:cf:57:6c:f4:9f:b3:d1:27:c2:f6:
78:59:f9:f6:37:c9:d2:2c:93:90:58:06:0f:05:39:88:a8:4f:
f2:9f:d1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:25:22 2026 by rpki-client