
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/B8E7D994D00711EAB66A1255C4F9AE02.roa
File: B8E7D994D00711EAB66A1255C4F9AE02.roa (raw, json)
Hash identifier: ceidhlKu5HDjsUw7jcr2YLL4PSxhocZYikLNU4m7FQc=
Subject key identifier: 2A:7E:79:4A:FC:5D:F3:39:4A:1F:45:FB:74:82:CE:4E:84:18:10:45
Certificate issuer: /CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39
Certificate serial: 3759
Authority key identifier: AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/B8E7D994D00711EAB66A1255C4F9AE02.roa
Signing time: Tue 14 Jul 2026 15:10:35 +0000
ROA not before: Tue 14 Jul 2026 15:10:35 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 20940
IP address blocks: 220.227.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl
rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:28:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14169 (0x3759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191FA5, serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39
Validity
Not Before: Jul 14 15:10:35 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a56516b-8d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ed:5f:3e:fb:b6:e8:88:0b:1c:67:e1:86:10:
da:23:70:64:9b:13:16:15:5f:aa:39:2b:ae:b2:d1:
ad:29:8b:db:47:45:5d:90:19:32:24:69:61:1a:94:
6f:af:9a:af:ba:4e:82:5d:60:0a:0c:e2:d6:fe:e6:
9a:3a:a2:4c:76:83:23:ed:76:98:d8:e9:aa:e9:29:
6f:4a:6f:68:45:48:d3:55:84:3b:d8:85:3b:27:e1:
93:2e:b8:61:e6:50:b6:36:cb:d0:6e:3b:a6:6f:1b:
42:3e:5d:8f:ec:3b:a5:ce:08:ca:54:0a:db:b6:59:
84:0f:c2:13:a7:4c:ea:1b:c6:4d:5d:4b:1d:76:93:
32:08:74:ab:32:0e:e6:a0:3a:e5:b8:ff:53:7e:b8:
99:be:72:34:96:fc:2d:1c:2a:84:26:fb:dd:a5:69:
d5:fe:3e:ab:2c:34:43:28:2c:d3:14:fc:00:67:71:
d2:a6:d2:e4:19:fe:41:f7:96:2e:e4:49:73:4c:e3:
95:6a:ae:49:65:d3:de:fe:d3:24:58:00:7a:b9:75:
ae:fd:11:5f:2e:0c:bb:6a:9a:57:6f:7d:71:37:7c:
ac:58:88:71:63:e8:09:31:d1:70:13:57:cf:24:8b:
09:af:03:6e:38:ee:94:9a:e8:3a:f4:d7:cc:34:23:
56:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7E:79:4A:FC:5D:F3:39:4A:1F:45:FB:74:82:CE:4E:84:18:10:45
X509v3 Authority Key Identifier:
keyid:AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/B8E7D994D00711EAB66A1255C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
220.227.183.0/24
Signature Algorithm: sha256WithRSAEncryption
77:81:a0:0e:79:ab:9c:7d:c3:cb:80:d8:f7:8b:94:4c:ec:ac:
64:e8:e8:f2:93:32:be:53:2f:0e:11:3b:be:a3:fb:af:53:d1:
90:a3:78:4f:56:a8:91:e6:2a:8b:6b:84:4f:00:38:d7:d2:b8:
aa:0a:a7:ef:89:37:be:ff:78:9f:8b:35:a3:54:c1:6f:49:a8:
05:34:15:95:c6:b8:81:4d:7f:22:d9:50:42:ab:14:c9:0d:08:
da:6b:d5:76:86:2c:eb:12:96:aa:92:8a:67:32:2e:c4:ba:56:
ed:9c:58:da:d1:77:d2:0b:a6:e9:6d:ea:ed:2b:71:8b:fc:d3:
17:51:8c:13:a2:79:6c:a7:4f:04:fa:d3:25:0d:85:9e:7b:55:
97:46:a8:b1:9c:4b:1d:28:7d:4a:a7:fb:95:8d:97:f3:65:33:
52:0a:a5:56:30:de:37:55:7f:16:70:b5:37:f2:47:fb:4a:3d:
65:14:88:f2:48:15:0c:88:c9:e5:d2:10:2e:1a:fe:d6:b0:dc:
29:a0:d0:06:26:33:b1:2b:c3:0e:0f:2e:6f:b7:f2:d5:64:d9:
66:96:2d:b3:e9:36:aa:6b:12:91:10:7d:3c:99:33:32:1e:1b:
59:71:94:8c:ab:71:09:68:d3:b3:65:35:ec:2a:c2:22:e3:84:
4f:7e:13:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:50:45 2026 by rpki-client