
$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/9F931B1659B811F19C535564C0833773.roa
File: 9F931B1659B811F19C535564C0833773.roa (raw, json)
Hash identifier: z60HaqbZ1jka7OwRTI9VVn3xZaeALK+nzTOo1/Reyl8=
Subject key identifier: 3F:86:A0:C2:61:20:F0:07:06:00:CD:8C:0F:15:30:3F:AB:37:06:2E
Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial: D0
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/9F931B1659B811F19C535564C0833773.roa
Signing time: Wed 27 May 2026 10:41:31 +0000
ROA not before: Wed 27 May 2026 10:41:31 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 211759
IP address blocks: 74.52.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 20:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208 (0xd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Validity
Not Before: May 27 10:41:31 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a16ca5b-7943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:0e:9f:36:80:5c:1e:90:b7:2c:ba:45:19:
80:43:3b:ae:d8:58:24:71:ed:a7:6b:12:76:f8:b7:
05:9d:96:38:77:4a:fb:04:f0:83:7b:d0:fe:97:c0:
c1:66:1f:ff:3a:8a:cf:93:3a:3e:45:ea:75:aa:51:
c9:7a:83:9f:5d:12:7d:4d:32:40:bb:5e:50:2e:a2:
41:3c:0b:56:74:ea:63:47:d1:0b:fc:48:2c:b2:68:
2b:f1:49:a6:c9:8a:50:21:29:e2:2d:5d:28:fe:69:
ab:a5:c3:e2:24:09:b2:42:91:bf:e8:01:6c:7f:ac:
72:43:9a:6b:91:c7:37:f5:3a:4e:2f:a2:0f:fd:2c:
f4:3c:de:77:27:88:f3:ea:f4:b1:f9:10:9f:0f:45:
65:a7:c4:04:ba:8d:b6:e7:a0:63:91:37:c4:e0:07:
51:68:82:49:db:e7:15:94:94:1e:61:ad:56:be:57:
df:09:3b:e3:11:af:0b:11:41:d3:90:ad:ad:0a:97:
f8:e7:60:c8:cf:72:fd:e8:35:13:b9:86:e7:11:ed:
b4:06:23:f5:48:28:90:fc:fb:d7:4e:e1:92:a0:30:
d9:dd:bb:69:6a:87:f7:ad:ec:dd:b1:fe:56:0f:49:
a0:61:2b:40:f0:8c:1e:90:a6:ff:35:ec:60:ae:05:
74:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:86:A0:C2:61:20:F0:07:06:00:CD:8C:0F:15:30:3F:AB:37:06:2E
X509v3 Authority Key Identifier:
keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/9F931B1659B811F19C535564C0833773.roa
sbgp-ipAddrBlock: critical
IPv4:
74.52.14.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:26:68:57:53:5e:9a:ee:85:d4:21:50:de:28:47:8a:ee:f2:
29:33:0b:dc:78:ac:4c:ba:f9:85:f4:ea:fa:32:f9:22:23:da:
19:2e:2b:cd:66:21:53:62:98:a1:cd:10:dd:f9:3b:51:41:f7:
71:10:fa:da:a1:f6:d6:d3:34:d6:71:0c:64:8f:12:10:ee:b5:
21:cd:82:4e:82:37:3e:d0:0e:6b:c7:61:10:6d:06:76:81:df:
19:b4:e7:e6:1b:6c:ac:5f:96:17:5b:70:cd:f8:4b:b6:b4:ed:
9a:fa:c9:0b:5f:56:30:f3:f6:5e:48:6f:47:f9:ed:73:0d:c6:
ea:41:63:da:58:2c:06:9e:72:ee:83:af:65:65:b1:7c:e1:ff:
66:9e:ba:1b:e8:0e:5b:de:93:72:df:73:45:01:d4:1a:46:17:
fc:58:61:31:c2:af:c6:f4:14:5a:9b:60:79:f4:f2:81:d7:44:
05:e4:a1:b1:fd:0e:43:dd:fe:42:53:47:fe:b7:15:41:0c:1c:
ca:08:4b:39:a5:3a:28:dc:bb:34:da:94:3a:f1:15:d4:03:62:
4d:eb:2d:06:fe:66:5f:a5:88:fc:90:79:b6:84:da:7e:08:f5:
3b:4b:f5:95:b1:53:bf:9a:fa:3d:c6:b0:85:57:42:29:86:56:
25:bd:ed:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:37 2026 by rpki-client