
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/88E11172F99A11EFA825D961C4F9AE02.roa
File: 88E11172F99A11EFA825D961C4F9AE02.roa (raw, json)
Hash identifier: bi6yZUP9Smkax+xVdkGT/x3hFrhWjvPzPQn2lGZjFLA=
Subject key identifier: D9:B5:F0:93:8B:C1:77:E8:EA:B5:38:A8:25:02:D9:BD:31:91:EA:58
Certificate issuer: /CN=A91FD3F6/serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
Certificate serial: CE
Authority key identifier: 9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/88E11172F99A11EFA825D961C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:18:41 +0000
ROA not before: Fri 17 Oct 2025 10:43:10 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 8075
IP address blocks: 203.27.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl
rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 06:33:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206 (0xce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD3F6, serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
Validity
Not Before: Oct 17 10:43:10 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a58e31-a966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:20:8b:0a:39:81:2b:c3:8c:7a:73:78:84:be:
f2:11:91:1f:45:a9:c9:54:45:f3:27:a3:00:e3:c4:
dd:db:c7:71:20:59:96:dd:a4:bc:2f:b8:64:6f:8f:
f3:64:21:c7:09:e1:45:89:5d:10:3d:31:42:61:15:
90:7c:53:68:20:f1:98:22:b7:e6:e3:03:04:cb:e1:
c1:5b:c4:61:14:a1:33:92:ad:da:ca:26:9d:0e:67:
de:0f:96:ed:d8:de:9e:b7:bc:3e:cb:a4:76:ea:53:
cf:67:ec:99:07:66:af:8e:0a:e8:66:98:34:79:26:
6e:ac:5d:f8:8d:f3:69:39:39:13:9e:91:18:8c:3b:
db:bf:db:d4:7b:c0:e6:11:08:bf:c5:74:df:bb:7c:
b5:c0:e4:5d:ad:54:20:73:09:9b:1d:22:bb:7c:fe:
9c:1c:3c:e2:26:5d:9b:e5:ac:13:1f:3e:9f:34:fa:
a6:24:c0:89:4f:1a:e6:10:83:1e:10:f7:f2:4f:ef:
a6:15:a5:b6:8d:66:26:b0:c2:10:0d:bb:2d:48:95:
b4:39:4f:e0:37:02:38:b1:9e:7f:78:2b:22:09:52:
a6:a7:64:4a:80:ce:96:8b:b2:b5:c9:6d:b7:89:05:
6f:ed:8a:c4:1f:14:db:05:2e:88:e9:0a:97:03:46:
3f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B5:F0:93:8B:C1:77:E8:EA:B5:38:A8:25:02:D9:BD:31:91:EA:58
X509v3 Authority Key Identifier:
keyid:9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/88E11172F99A11EFA825D961C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.27.127.0/24
Signature Algorithm: sha256WithRSAEncryption
19:56:01:1b:68:2a:b7:be:1e:24:15:b7:40:36:6b:57:d0:65:
17:6a:47:00:85:52:a1:c4:6c:3f:55:9e:e6:e9:00:9a:f3:41:
b9:35:63:de:63:44:d2:aa:58:d1:58:74:9a:db:fc:aa:82:bc:
69:34:48:bf:eb:9a:90:f8:b3:78:f8:fa:58:ab:24:23:3b:27:
8d:27:22:92:1d:02:7b:66:02:a8:96:1d:79:53:97:15:1c:0c:
ab:6d:c3:32:89:7a:56:ca:d7:8b:1b:d1:b7:fc:db:f1:bc:e2:
92:50:3a:3d:60:6c:2a:71:7b:1e:25:a0:e0:33:58:70:b6:af:
e3:de:ca:65:60:3d:2f:bd:87:e0:12:a1:4b:56:be:11:13:b7:
b8:d3:ba:bb:ce:49:b5:34:68:be:07:df:24:06:88:f3:25:b0:
5d:a3:9b:f1:60:72:31:55:aa:bd:45:85:9a:2d:72:a1:7f:1e:
41:c7:64:49:27:5a:f1:0e:77:3b:2d:31:bb:3a:51:44:cf:ed:
47:37:33:28:f5:b7:ad:d5:5b:b3:45:58:6b:ca:0d:0b:e4:ea:
8d:85:54:dc:7d:44:4c:fd:7d:f0:22:fd:8e:67:54:46:67:5e:
15:68:dd:7d:5a:3c:95:00:14:f4:c6:1c:9c:d4:bf:2b:f7:ff:
20:a2:3d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 19:18:48 2026 by rpki-client