
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/A7CEC08691E611F0A8D76134C4F9AE02.roa
File: A7CEC08691E611F0A8D76134C4F9AE02.roa (raw, json)
Hash identifier: wYk62Q6Ir+XeXEA2r1rVnPBMrc3HufUoVqQCvgr1iYI=
Subject key identifier: 4D:0C:9B:60:A3:19:C5:23:11:CF:88:7B:76:1E:BB:B8:FA:7F:42:A6
Certificate issuer: /CN=A91F300B/serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3
Certificate serial: DB
Authority key identifier: CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/A7CEC08691E611F0A8D76134C4F9AE02.roa
Signing time: Tue 29 Sep 2026 07:57:08 +0000
ROA not before: Tue 29 Sep 2026 07:57:08 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 141217
IP address blocks: 122.50.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl
rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 07:14:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F300B, serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3
Validity
Not Before: Sep 29 07:57:08 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abb6f53-3ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c6:a3:ed:8e:b5:ca:25:9e:fe:fe:dd:bf:28:
f5:34:86:a2:b1:21:ba:06:62:83:95:11:89:61:81:
56:00:24:f8:76:e7:b5:8b:cf:e5:52:cf:41:ff:a6:
c3:83:9a:df:46:92:75:2e:7c:d5:1a:f1:a6:c4:fd:
b4:82:e1:2f:55:60:0e:2b:f4:db:45:7a:bf:cf:4d:
07:c0:f0:0f:39:b0:fc:20:80:fd:28:e0:8e:50:3d:
d2:23:6c:31:ad:8e:65:2f:d1:30:27:ec:26:16:ee:
0a:d2:0c:bc:14:5a:27:7a:67:44:4b:35:ae:68:6e:
56:96:54:38:1f:76:02:e3:6b:05:e6:4f:48:1b:40:
06:d3:6f:ea:1d:39:d1:3a:3b:bc:4d:86:f3:a0:11:
24:d4:8e:58:77:91:74:88:15:78:ec:9d:df:37:66:
30:18:5d:cc:00:69:5b:b5:c3:30:cd:06:f0:43:86:
0a:b9:9b:ce:e7:2c:21:01:0e:40:00:eb:3c:85:a0:
68:64:1d:1d:b3:b0:6b:1d:dd:6a:c0:a7:ec:c8:d6:
b9:7e:8b:e7:3d:02:36:25:50:cb:f5:b7:79:12:de:
7b:5f:a2:8d:61:0f:ae:a4:14:3f:1e:fe:aa:15:96:
1a:03:a7:45:c2:26:69:81:36:c5:ca:bf:3f:ae:97:
77:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0C:9B:60:A3:19:C5:23:11:CF:88:7B:76:1E:BB:B8:FA:7F:42:A6
X509v3 Authority Key Identifier:
keyid:CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/A7CEC08691E611F0A8D76134C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
122.50.11.0/24
Signature Algorithm: sha256WithRSAEncryption
91:08:72:97:cf:31:24:46:ba:14:a4:bd:80:69:70:e3:8f:8d:
db:a7:a3:6f:56:6e:ac:5f:cb:a6:12:78:e4:5e:83:ec:ca:15:
b6:30:93:9c:9f:c6:d1:76:ae:6b:e7:f3:c5:a5:00:57:10:97:
be:21:71:11:1a:e0:9e:43:3e:c6:fc:b5:14:47:ba:eb:b5:b3:
49:bc:5d:b8:d9:31:65:ec:81:01:93:82:90:0c:89:ca:05:85:
fb:41:22:89:30:b5:a7:0d:79:bc:9b:23:39:e6:ef:c3:d5:12:
64:bf:20:ae:d5:43:e8:6b:c8:6a:f7:d9:f8:e6:2c:e3:a1:d5:
d9:c3:0a:62:39:83:4f:ce:62:f6:d0:00:1d:a4:40:5c:c1:84:
8a:9f:aa:fd:db:a3:3a:17:c2:81:20:92:2e:36:f6:c5:87:79:
62:66:c0:d4:ec:5b:55:d3:59:7c:32:07:09:40:a9:27:18:5d:
b1:0e:bd:de:c0:e2:ca:7e:71:43:7f:72:d5:b3:bc:1d:ce:7a:
cc:a5:46:96:75:60:e5:17:a6:2c:fe:76:ed:25:ba:bd:9a:f4:
df:fc:3c:98:94:3b:27:5c:83:94:ed:5d:d5:16:c5:81:cb:ca:
33:cf:3f:25:88:08:93:55:18:f6:ca:ce:3d:7c:e3:49:d8:9b:
f5:45:fd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:09:45 2026 by rpki-client