
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/8ED301D0782011F0BDB6E683C4F9AE02.roa
File: 8ED301D0782011F0BDB6E683C4F9AE02.roa (raw, json)
Hash identifier: mlBrSrR3pgA04x8jSnmONOEEm/8z9vhlANdGKFaajRw=
Subject key identifier: A2:CF:8B:3E:73:84:98:B9:46:0C:1D:78:C7:B9:63:D9:3E:47:09:3F
Certificate issuer: /CN=A91127C1/serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6
Certificate serial: 02CC
Authority key identifier: 55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/8ED301D0782011F0BDB6E683C4F9AE02.roa
Signing time: Wed 12 Aug 2026 19:39:30 +0000
ROA not before: Wed 12 Aug 2026 19:39:30 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 681
IP address blocks: 192.73.21.0/24 maxlen: 24
192.107.171.0/24 maxlen: 24
192.107.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl
rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 716 (0x2cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91127C1, serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6
Validity
Not Before: Aug 12 19:39:30 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a7ccbf1-7348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:82:28:6b:4d:f7:b3:95:82:8f:60:f1:74:71:
8a:d5:fc:e0:ce:d8:bb:5d:29:55:29:e0:2b:fa:15:
b3:c9:c2:de:17:e9:ef:cb:c3:ae:b2:81:ee:e0:d9:
e6:62:b8:81:ca:e8:d9:13:a4:f9:10:6b:ad:4d:32:
8b:d0:b5:fd:a3:08:ea:0e:8c:62:1d:7f:ac:07:b2:
97:05:d1:31:a2:07:9c:3b:1f:91:aa:37:b3:df:40:
38:23:48:77:26:75:6b:c5:e0:07:6e:18:52:40:e8:
1a:6c:85:46:b3:b7:cb:99:6a:02:a0:35:20:de:94:
71:0b:4d:66:b6:0c:c8:84:7e:c9:7c:0c:06:0b:75:
42:6a:a8:6a:ea:2c:8a:9c:3f:9e:af:bf:e2:2d:55:
87:0c:cb:42:43:8a:c1:93:c1:7f:99:32:36:03:ef:
d0:3a:5c:ec:f7:a3:c9:ac:18:47:da:49:8a:62:33:
10:fd:8c:da:5c:f5:87:21:9e:20:61:d2:cf:11:05:
f8:8f:a8:dc:20:5e:71:a6:ab:7e:cd:23:4f:70:2d:
01:a4:42:4a:59:fa:ff:fd:9e:fb:9b:3d:68:b4:0f:
eb:86:32:89:c5:ee:0b:88:eb:ec:3f:5b:fc:1e:df:
03:1d:f5:85:9e:1a:93:5e:cd:65:ca:34:81:7c:ed:
39:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CF:8B:3E:73:84:98:B9:46:0C:1D:78:C7:B9:63:D9:3E:47:09:3F
X509v3 Authority Key Identifier:
keyid:55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/8ED301D0782011F0BDB6E683C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
192.73.21.0/24
192.107.171.0-192.107.172.255
Signature Algorithm: sha256WithRSAEncryption
92:a7:bb:aa:e3:d9:e0:36:0d:b9:4d:4f:c6:e2:a1:4b:bc:4d:
24:c1:05:d2:34:4f:b1:8b:08:b2:e7:24:db:4e:ab:82:aa:16:
d7:a3:e4:71:0d:5b:da:34:1a:b4:72:38:14:bc:33:5b:a7:0c:
e3:25:74:cd:1a:cf:aa:da:1e:cd:f6:2a:b0:83:b9:7a:02:75:
70:48:29:3c:1f:b6:7d:37:a8:df:67:79:75:4e:c8:12:b2:d0:
0d:7d:56:ec:93:59:3c:c2:9d:6f:8a:41:b5:00:66:22:1e:22:
3f:a8:3c:42:b7:71:9d:7e:f6:54:e9:e0:8c:9b:43:a7:0a:b4:
d6:5f:5b:5f:a1:cc:48:b9:3a:1c:47:b0:6e:a0:12:71:23:0d:
47:5e:3b:e5:0a:04:cf:d9:7a:a6:91:84:55:a5:c0:d1:30:2f:
81:ab:15:17:de:2e:80:fb:3d:34:39:be:62:e4:ea:69:2c:3f:
d8:18:7d:44:2f:ae:08:61:f4:1a:d7:da:af:39:f5:38:1d:9d:
c2:d1:1a:74:70:52:2e:48:b5:fd:d0:be:ed:79:66:cd:02:b8:
d6:35:81:88:ae:d7:f9:07:98:fe:a5:80:d7:b7:cd:4f:3a:d9:
17:62:70:39:e9:35:77:9f:ca:f2:ef:cb:56:17:17:bc:80:1a:
a9:56:6c:ec
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgICAswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTI3QzExMTAvBgNVBAUTKDU1RkI3QkNDQTc0MDI4NUZDODFBQTM2MEYwMkNFMzJG
OTU4MTZEQjYwHhcNMjYwODEyMTkzOTMwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTdjY2JmMS03MzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1oIoa033s5WCj2DxdHGK1fzgzti7XSlVKeAr+hWzycLeF+nvy8OusoHu4Nnm
YriByujZE6T5EGutTTKL0LX9owjqDoxiHX+sB7KXBdExogecOx+Rqjez30A4I0h3
JnVrxeAHbhhSQOgabIVGs7fLmWoCoDUg3pRxC01mtgzIhH7JfAwGC3VCaqhq6iyK
nD+er7/iLVWHDMtCQ4rBk8F/mTI2A+/QOlzs96PJrBhH2kmKYjMQ/YzaXPWHIZ4g
YdLPEQX4j6jcIF5xpqt+zSNPcC0BpEJKWfr//Z77mz1otA/rhjKJxe4LiOvsP1v8
Ht8DHfWFnhqTXs1lyjSBfO05MQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFKLPiz5z
hJi5RgwdeMe5Y9k+Rwk/MB8GA1UdIwQYMBaAFFX7e8ynQChfyBqjYPAs4y+VgW22
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdDMS9EQ0Y5OEExNjc3
ODExMUVEOTZCMzY0NjRDNEY5QUUwMi9WZnQ3ektkQUtGX0lHcU5nOEN6akw1V0Ji
YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1ZmdDd6S2RBS0ZfSUdxTmc4Q3pqTDVXQmJiWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTI3QzEvRENGOThBMTY3NzgxMTFFRDk2QjM2NDY0QzRGOUFFMDIvOEVEMzAxRDA3
ODIwMTFGMEJEQjZFNjgzQzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa
BAIAATAUAwQAwEkVMAwDBADAa6sDBADAa6wwDQYJKoZIhvcNAQELBQADggEBAJKn
u6rj2eA2DblNT8bioUu8TSTBBdI0T7GLCLLnJNtOq4KqFtej5HENW9o0GrRyOBS8
M1unDOMldM0az6raHs32KrCDuXoCdXBIKTwftn03qN9neXVOyBKy0A19VuyTWTzC
nW+KQbUAZiIeIj+oPEK3cZ1+9lTp4IybQ6cKtNZfW1+hzEi5OhxHsG6gEnEjDUde
O+UKBM/ZeqaRhFWlwNEwL4GrFRfeLoD7PTQ5vmLk6mksP9gYfUQvrghh9BrX2q85
9TgdncLRGnRwUi5Itf3Qvu15Zs0CuNY1gYiu1/kHmP6lgNe3zU862RdicDnpNXef
yvLvy1YXF7yAGqlWbOw=
-----END CERTIFICATE-----
Generated at Sat Sep 19 20:33:07 2026 by rpki-client