
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/F20BD4DEDD5C11EFAA80BB1AC4F9AE02.roa
File: F20BD4DEDD5C11EFAA80BB1AC4F9AE02.roa (raw, json)
Hash identifier: aRva8pGWfYj5DsMq3R40rv0MUtezzZywAbZ+BrpHCAQ=
Subject key identifier: F8:7E:27:43:5A:2E:63:39:E1:F0:EB:7C:4C:57:29:81:2E:C6:FA:82
Certificate issuer: /CN=A91FC4FB/serialNumber=FF20BC379D89A0DB3BE6FCF290FA3DD52EB7FA20
Certificate serial: D9
Authority key identifier: FF:20:BC:37:9D:89:A0:DB:3B:E6:FC:F2:90:FA:3D:D5:2E:B7:FA:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/F20BD4DEDD5C11EFAA80BB1AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:14:25 +0000
ROA not before: Fri 09 Jan 2026 05:27:54 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 200195
IP address blocks: 45.123.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.crl
rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:49:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC4FB, serialNumber=FF20BC379D89A0DB3BE6FCF290FA3DD52EB7FA20
Validity
Not Before: Jan 9 05:27:54 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a457d1-03ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4f:80:f0:a7:0e:3b:4c:a9:23:2a:9a:99:ce:
df:83:da:97:02:2f:37:62:35:fe:1c:e3:1b:92:32:
60:01:bf:72:ad:6b:53:94:a2:7d:7b:b8:1f:a8:c9:
97:9a:0d:eb:46:34:7a:0e:1f:5d:50:e3:46:30:e2:
0c:e5:74:19:91:12:75:c8:dc:d3:d2:2a:da:fa:24:
26:1f:c7:da:70:39:89:1a:bd:cd:68:f5:b8:11:37:
41:1e:27:ec:43:69:15:be:66:9a:be:ff:2a:30:8d:
96:3e:4e:68:1f:3e:d6:41:95:a5:ac:a5:9f:8b:1b:
30:ff:e1:bd:98:44:9a:79:3d:0b:d1:ac:68:28:cb:
d0:54:8b:50:3e:ae:5c:98:fd:32:70:a9:dc:e4:97:
8e:fa:b0:89:f3:f2:68:f0:f3:47:c1:c1:26:2b:77:
e9:c2:8d:25:08:83:5f:bf:dd:85:b1:4a:48:6f:de:
85:b1:fa:10:e7:b5:4c:66:e9:e3:8e:ad:30:cc:ec:
be:68:26:5f:c2:58:02:53:30:b2:db:07:27:69:79:
8b:2d:f6:b8:19:22:39:0c:8f:20:ff:b7:1f:07:f6:
44:f9:ed:31:60:33:16:a1:dc:3a:f3:d3:0b:20:a0:
bc:7a:7d:48:e4:45:1d:a3:67:a7:df:76:a1:d5:f1:
91:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7E:27:43:5A:2E:63:39:E1:F0:EB:7C:4C:57:29:81:2E:C6:FA:82
X509v3 Authority Key Identifier:
keyid:FF:20:BC:37:9D:89:A0:DB:3B:E6:FC:F2:90:FA:3D:D5:2E:B7:FA:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/F20BD4DEDD5C11EFAA80BB1AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.123.190.0/24
Signature Algorithm: sha256WithRSAEncryption
62:cd:99:ad:d3:28:8c:8a:35:02:0b:2d:3c:d9:06:d2:6c:11:
aa:2e:2e:8a:a3:fb:06:26:90:c6:bc:05:63:0d:2f:7e:ae:ae:
8d:c9:f1:c0:ff:35:73:e6:2a:4d:e9:ad:cd:c3:b3:c2:cd:5e:
f5:8e:14:53:ec:66:ca:92:e4:99:c3:56:2f:5a:8c:65:e3:a3:
c1:71:f0:94:a5:cb:5b:40:9c:4f:43:2d:d6:f1:c2:14:55:bc:
51:f4:07:3c:2f:b2:63:9a:3f:1c:4d:52:6a:d4:15:c9:fe:0b:
e3:7f:a7:af:95:ec:04:a1:0a:d9:c3:8f:68:d8:5c:85:c1:99:
fa:d1:bb:ef:94:f0:69:b5:5b:4e:7e:61:87:6e:03:d1:b4:ed:
ea:dc:82:dc:d6:03:2a:89:e6:98:7d:d9:59:62:81:38:b3:3a:
bf:f7:2d:34:7f:4e:fe:fb:be:89:2b:ec:2c:96:56:9e:29:b9:
d0:97:67:c6:56:ef:9a:39:1a:31:e3:25:14:cb:bb:e4:f0:34:
f4:46:0f:71:96:0e:ea:d4:c5:d4:75:42:73:5d:a1:04:67:f6:
04:be:75:f3:f1:55:f2:9a:4c:ed:7e:d1:e0:78:68:5b:6d:f3:
eb:3b:ab:8e:d8:cb:fa:e8:89:75:b1:7d:0e:77:cd:37:5a:79:
f4:9c:e7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 17:20:15 2026 by rpki-client