
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/81F4D4289D0111F1865FC6F93911F970.roa
File: 81F4D4289D0111F1865FC6F93911F970.roa (raw, json)
Hash identifier: vNilSf2o8MEDUb8Bu0Eq8/tkof/0XsYv/JowiUpP2c0=
Subject key identifier: 76:EB:E4:45:84:5E:20:37:C6:DD:BD:78:C3:38:AB:61:3A:7D:49:1C
Certificate issuer: /CN=A91ED2BB/serialNumber=A6FF381A2AEBEA6DCCFE0DE65D4196040271FE94
Certificate serial: 0C1A
Authority key identifier: A6:FF:38:1A:2A:EB:EA:6D:CC:FE:0D:E6:5D:41:96:04:02:71:FE:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/81F4D4289D0111F1865FC6F93911F970.roa
Signing time: Fri 21 Aug 2026 01:42:03 +0000
ROA not before: Fri 21 Aug 2026 01:42:03 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 9304
IP address blocks: 203.78.132.0/24 maxlen: 24
203.78.133.0/24 maxlen: 24
203.78.134.0/24 maxlen: 24
203.78.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.crl
rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 18:52:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3098 (0xc1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED2BB, serialNumber=A6FF381A2AEBEA6DCCFE0DE65D4196040271FE94
Validity
Not Before: Aug 21 01:42:03 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a87aceb-d0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fe:20:ed:9f:80:34:34:a4:13:a0:89:a3:6e:
b9:f7:ff:2d:ca:5f:bb:1f:9e:c7:42:0e:79:0c:1a:
0e:ad:17:aa:67:a4:4c:b0:62:e8:52:a0:2f:3d:d5:
15:3d:e0:f4:15:d5:63:bd:b5:be:2e:99:41:bf:e9:
ba:76:93:a3:14:0c:bb:17:55:98:cf:9b:b0:23:52:
bc:32:01:cf:7a:04:27:8e:17:61:c7:1d:65:b7:eb:
6b:ec:2b:d8:b7:b1:b1:f9:a3:66:a8:88:13:fa:ec:
6d:ee:ee:75:93:85:72:7a:70:ef:bc:71:2d:11:b6:
6d:88:34:32:39:df:63:e0:f7:86:c4:75:a9:d9:66:
e9:85:fb:24:5b:fd:b1:96:e1:cc:6e:93:a2:d1:cf:
30:49:c0:e1:49:d9:58:e8:56:36:d7:c3:6b:20:b9:
2c:a2:d7:f7:0e:66:aa:06:5d:1a:32:37:85:93:12:
98:fc:ae:bf:a7:9a:79:bb:b4:0d:bc:7e:72:bc:40:
3d:d0:96:8a:01:0e:6c:e4:95:69:e3:59:cd:51:c1:
dd:df:e9:7f:c1:80:6e:0c:c4:25:4b:ae:c0:c1:a5:
a7:c5:63:a8:44:e9:16:fa:98:a4:1b:36:ff:86:ad:
06:39:9a:78:7a:6b:0b:06:4c:7b:b0:8d:6e:fa:bb:
ce:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:EB:E4:45:84:5E:20:37:C6:DD:BD:78:C3:38:AB:61:3A:7D:49:1C
X509v3 Authority Key Identifier:
keyid:A6:FF:38:1A:2A:EB:EA:6D:CC:FE:0D:E6:5D:41:96:04:02:71:FE:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/81F4D4289D0111F1865FC6F93911F970.roa
sbgp-ipAddrBlock: critical
IPv4:
203.78.132.0/22
Signature Algorithm: sha256WithRSAEncryption
93:3c:de:80:34:9b:eb:c8:21:ef:08:5b:fc:c7:0d:9d:24:a5:
4a:e2:b2:ea:69:42:56:f7:59:86:b8:a5:d1:44:aa:06:a4:e5:
78:3e:7e:cb:be:4e:c6:68:fc:aa:15:e9:ef:00:7d:46:64:71:
0a:a7:56:a0:ac:aa:28:44:e7:93:da:2d:34:f4:dd:af:84:34:
40:ea:2d:af:f1:62:16:b4:91:01:38:3a:ee:f9:b5:22:af:ba:
57:aa:1a:17:01:24:13:9c:7b:29:20:60:ce:4d:74:8a:8a:dd:
08:fc:c8:9a:59:56:1d:d3:54:6b:81:ff:5f:10:52:31:16:b4:
12:66:6d:e7:86:a3:70:81:6a:dc:c5:37:8c:c1:51:ab:f5:ee:
9f:44:7c:69:ce:14:d1:ef:66:eb:b9:2e:e8:a7:f5:98:e5:1c:
0d:45:6d:99:68:28:29:d0:05:17:af:f4:df:b9:e3:5d:68:d9:
c0:b1:56:c4:d2:07:73:b0:e2:05:20:32:f2:f0:cf:47:29:f2:
bc:0d:de:ad:00:db:21:57:97:72:68:3d:59:1f:49:56:b2:6b:
c2:18:ee:f8:a1:1f:80:9c:06:37:b7:2d:4f:39:ed:96:05:35:
2b:bc:37:3e:16:3b:69:b6:6a:76:0f:a3:4f:40:73:01:ac:36:
7d:cb:f2:38
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUQyQkIxMTAvBgNVBAUTKEE2RkYzODFBMkFFQkVBNkRDQ0ZFMERFNjVENDE5NjA0
MDI3MUZFOTQwHhcNMjYwODIxMDE0MjAzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg3YWNlYi1kMGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl/4g7Z+ANDSkE6CJo2659/8tyl+7H57HQg55DBoOrReqZ6RMsGLoUqAvPdUV
PeD0FdVjvbW+LplBv+m6dpOjFAy7F1WYz5uwI1K8MgHPegQnjhdhxx1lt+tr7CvY
t7Gx+aNmqIgT+uxt7u51k4VyenDvvHEtEbZtiDQyOd9j4PeGxHWp2WbphfskW/2x
luHMbpOi0c8wScDhSdlY6FY218NrILksotf3DmaqBl0aMjeFkxKY/K6/p5p5u7QN
vH5yvEA90JaKAQ5s5JVp41nNUcHd3+l/wYBuDMQlS67AwaWnxWOoROkW+pikGzb/
hq0GOZp4emsLBkx7sI1u+rvOPwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHbr5EWE
XiA3xt29eMM4q2E6fUkcMB8GA1UdIwQYMBaAFKb/OBoq6+ptzP4N5l1BlgQCcf6U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDJCQi81N0Q2NDdGQTQx
NzExMUVBOTE0OTVCNkJDNEY5QUUwMi9wdjg0R2lycjZtM01fZzNtWFVHV0JBSnhf
cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3B2ODRHaXJyNm0zTV9nM21YVUdXQkFKeF9wUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUQyQkIvNTdENjQ3RkE0MTcxMTFFQTkxNDk1QjZCQzRGOUFFMDIvODFGNEQ0Mjg5
RDAxMTFGMTg2NUZDNkY5MzkxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCy06EMA0GCSqGSIb3DQEBCwUAA4IBAQCTPN6ANJvryCHvCFv8xw2d
JKVK4rLqaUJW91mGuKXRRKoGpOV4Pn7Lvk7GaPyqFenvAH1GZHEKp1agrKooROeT
2i009N2vhDRA6i2v8WIWtJEBODru+bUir7pXqhoXASQTnHspIGDOTXSKit0I/Mia
WVYd01Rrgf9fEFIxFrQSZm3nhqNwgWrcxTeMwVGr9e6fRHxpzhTR72bruS7op/WY
5RwNRW2ZaCgp0AUXr/TfueNdaNnAsVbE0gdzsOIFIDLy8M9HKfK8Dd6tANshV5dy
aD1ZH0lWsmvCGO74oR+AnAY3ty1POe2WBTUrvDc+Fjtptmp2D6NPQHMBrDZ9y/I4
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:24 2026 by rpki-client