
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/D992CDCE2FBC11EB8E017F5CC4F9AE02.roa
File: D992CDCE2FBC11EB8E017F5CC4F9AE02.roa (raw, json)
Hash identifier: 9LuZa38M86RpuIBtOyu8RxTzdNFpAwgeI57izlLPJgA=
Subject key identifier: 21:46:FC:83:3C:C4:D3:A8:31:BF:50:64:B3:81:85:7F:C6:D1:E3:16
Certificate issuer: /CN=A91EE1C4/serialNumber=70BD1E495E250B22E2798296969785A2D77D737F
Certificate serial: 07FD
Authority key identifier: 70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/D992CDCE2FBC11EB8E017F5CC4F9AE02.roa
Signing time: Sat 02 May 2026 21:27:38 +0000
ROA not before: Sat 02 May 2026 21:27:38 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 202.128.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl
rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 May 2026 21:27:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2045 (0x7fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE1C4, serialNumber=70BD1E495E250B22E2798296969785A2D77D737F
Validity
Not Before: May 2 21:27:38 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69f66c4a-d188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c7:04:d8:24:67:3b:43:01:71:a2:42:de:ea:
e3:ce:f5:24:cb:b1:f3:3f:da:8c:d8:67:5d:9a:61:
e6:10:1f:89:35:f4:aa:14:74:4a:b7:c3:37:e2:85:
a9:37:74:a6:e8:39:52:a8:04:8f:10:cb:5d:dd:31:
3b:e2:e3:69:88:ca:3e:ad:d7:1a:d9:05:7f:2f:56:
04:db:fb:e9:4b:75:4d:63:83:48:b5:83:28:42:39:
1c:d8:91:c1:ec:a1:b9:37:76:b5:1c:58:f1:24:55:
08:e6:5b:6d:26:f8:58:ee:ac:8d:13:57:e8:cc:3c:
ef:9f:7d:12:0a:a6:ae:9d:c3:ff:23:70:26:e5:d7:
06:59:4d:1a:dc:e5:de:94:4e:23:3a:cf:59:7c:52:
c6:1c:21:f5:d0:8d:21:de:02:6a:db:5d:57:55:84:
57:7f:23:f2:a5:3e:23:ea:94:6c:fa:23:7f:73:e1:
05:c0:cd:87:db:e5:ed:0b:a6:12:4d:ba:bf:75:ac:
0c:99:fc:ee:0a:27:26:c4:c7:ff:da:6f:ab:23:05:
e1:2e:17:df:40:b1:e8:89:f9:aa:1d:c6:74:91:09:
8e:18:fb:f9:7c:4c:ed:88:8c:36:dc:59:bd:77:d0:
7b:4e:1c:c6:b0:1b:cc:7e:f2:60:d4:54:60:64:8b:
3c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:46:FC:83:3C:C4:D3:A8:31:BF:50:64:B3:81:85:7F:C6:D1:E3:16
X509v3 Authority Key Identifier:
keyid:70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/D992CDCE2FBC11EB8E017F5CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.128.99.0/24
Signature Algorithm: sha256WithRSAEncryption
14:6e:b1:9c:e4:73:d7:1e:13:74:07:cb:77:ff:2e:3c:74:6f:
3d:18:18:f7:d1:06:67:48:4a:df:83:e0:36:53:5a:40:8d:6b:
83:16:14:b5:4f:f0:36:51:8d:ff:e1:cf:d2:7d:fd:44:78:68:
12:83:bd:89:ee:64:a0:69:6f:95:93:5e:cb:48:d9:af:a3:25:
13:28:24:a7:a9:ee:91:74:ba:19:b0:39:77:8e:36:8d:77:f3:
83:5c:4e:0a:d9:71:47:de:1b:01:27:17:be:41:3d:8f:b3:94:
fb:c0:99:00:be:46:bd:1f:df:e3:13:37:fc:47:4f:e6:37:36:
fa:a9:18:c9:f7:33:a7:10:11:af:3b:46:c4:12:62:fa:a4:4a:
08:5a:0c:d9:dd:89:dd:fd:e4:77:e8:bd:14:aa:3c:ef:68:5a:
3a:84:6a:a9:09:ee:50:d3:39:e1:84:c5:8a:76:e5:bc:8f:07:
4d:46:44:b4:89:61:41:42:b8:24:3f:23:04:d0:e8:2b:56:c4:
29:d5:8b:bb:35:08:b4:76:15:9b:17:c4:b2:a3:e1:2f:37:77:
28:8b:5b:aa:f2:5f:b0:ab:e2:0c:50:8f:1f:fb:77:65:70:35:
f6:36:79:db:52:79:f4:0d:df:2d:17:a2:f0:91:55:0c:78:da:
f1:47:25:a8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICB/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUUxQzQxMTAvBgNVBAUTKDcwQkQxRTQ5NUUyNTBCMjJFMjc5ODI5Njk2OTc4NUEy
RDc3RDczN0YwHhcNMjYwNTAyMjEyNzM4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWY2NmM0YS1kMTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx8cE2CRnO0MBcaJC3urjzvUky7HzP9qM2GddmmHmEB+JNfSqFHRKt8M34oWp
N3Sm6DlSqASPEMtd3TE74uNpiMo+rdca2QV/L1YE2/vpS3VNY4NItYMoQjkc2JHB
7KG5N3a1HFjxJFUI5lttJvhY7qyNE1fozDzvn30SCqauncP/I3Am5dcGWU0a3OXe
lE4jOs9ZfFLGHCH10I0h3gJq211XVYRXfyPypT4j6pRs+iN/c+EFwM2H2+XtC6YS
Tbq/dawMmfzuCicmxMf/2m+rIwXhLhffQLHoifmqHcZ0kQmOGPv5fEztiIw23Fm9
d9B7ThzGsBvMfvJg1FRgZIs8QwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCFG/IM8
xNOoMb9QZLOBhX/G0eMWMB8GA1UdIwQYMBaAFHC9HkleJQsi4nmClpaXhaLXfXN/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTFDNC9GQzY3MkI3MjJG
QUYxMUVCOTQxNTVGMzNDNEY5QUUwMi9jTDBlU1Y0bEN5TGllWUtXbHBlRm90ZDlj
MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NMMGVTVjRsQ3lMaWVZS1dscGVGb3RkOWMzOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUUxQzQvRkM2NzJCNzIyRkFGMTFFQjk0MTU1RjMzQzRGOUFFMDIvRDk5MkNEQ0Uy
RkJDMTFFQjhFMDE3RjVDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyoBjMA0GCSqGSIb3DQEBCwUAA4IBAQAUbrGc5HPXHhN0B8t3/y48
dG89GBj30QZnSErfg+A2U1pAjWuDFhS1T/A2UY3/4c/Sff1EeGgSg72J7mSgaW+V
k17LSNmvoyUTKCSnqe6RdLoZsDl3jjaNd/ODXE4K2XFH3hsBJxe+QT2Ps5T7wJkA
vka9H9/jEzf8R0/mNzb6qRjJ9zOnEBGvO0bEEmL6pEoIWgzZ3Ynd/eR36L0Uqjzv
aFo6hGqpCe5Q0znhhMWKduW8jwdNRkS0iWFBQrgkPyME0OgrVsQp1Yu7NQi0dhWb
F8Syo+EvN3coi1uq8l+wq+IMUI8f+3dlcDX2NnnbUnn0Dd8tF6LwkVUMeNrxRyWo
-----END CERTIFICATE-----
Generated at Sun May 3 14:48:09 2026 by rpki-client