
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/91C771A2D02111EA843F372FC4F9AE02.roa
File: 91C771A2D02111EA843F372FC4F9AE02.roa (raw, json)
Hash identifier: OT9brcicmctK+apt1pWBL6MJ8CCpv1ESq3NW6ajmaY8=
Subject key identifier: 73:6C:77:3E:1F:FB:1E:4B:2B:4E:7F:5E:A3:A7:38:CE:51:A3:33:0F
Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Certificate serial: 0C02
Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/91C771A2D02111EA843F372FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:15:42 +0000
ROA not before: Thu 28 Aug 2025 19:40:44 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 198148
IP address blocks: 116.66.212.0/22 maxlen: 22
116.66.216.0/22 maxlen: 22
116.66.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 18:51:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3074 (0xc02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Validity
Not Before: Aug 28 19:40:44 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4824e-0d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6c:ce:da:9f:9c:be:7f:80:02:b6:9e:72:31:
66:aa:4b:d2:e5:35:91:2c:ea:b6:24:22:35:a9:10:
41:6b:96:5c:d8:8e:68:e3:62:13:15:d8:7d:5b:2e:
c7:56:37:9c:73:51:27:dd:25:8c:8e:24:23:4c:fa:
42:1b:4f:0e:41:60:bb:55:50:09:f1:e1:ac:67:5a:
4f:7e:9d:fd:e3:6f:9e:c1:ce:0e:53:ec:af:2e:d7:
d5:b3:c1:bc:62:14:0c:56:26:03:b3:f8:3f:3a:c1:
d6:0e:a2:3c:fa:86:4f:d3:cd:77:85:f4:a6:6a:12:
72:16:af:7a:96:a5:a1:18:e9:98:7c:14:80:7a:61:
b7:42:73:b6:17:b3:15:72:22:09:22:c3:95:97:37:
a3:ac:f4:37:d3:d8:65:b8:f4:09:9a:4f:88:47:70:
bb:18:76:d4:8a:d8:59:b4:0a:d0:e7:7f:41:34:17:
0e:aa:e5:82:bc:db:a7:d9:fc:14:e1:c3:7a:0b:49:
7b:71:17:0a:5d:ad:2a:11:a1:bf:ab:9a:fa:94:8f:
44:85:27:39:97:e5:d5:a9:81:f8:7c:19:b4:d8:68:
57:35:9d:a1:f3:1f:08:5d:77:3b:50:50:77:bf:d7:
0a:50:d4:d3:b6:3b:f6:63:25:e2:2b:81:eb:d1:08:
08:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6C:77:3E:1F:FB:1E:4B:2B:4E:7F:5E:A3:A7:38:CE:51:A3:33:0F
X509v3 Authority Key Identifier:
keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/91C771A2D02111EA843F372FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.66.212.0-116.66.223.255
Signature Algorithm: sha256WithRSAEncryption
be:98:f2:0c:f5:64:95:e0:f5:b4:6b:3f:3a:13:d3:d2:2c:1e:
7e:75:54:aa:27:37:dd:31:19:be:38:1d:a8:02:d8:dd:f8:c5:
ac:e8:a2:58:1f:2d:19:d7:59:9f:19:b3:03:98:80:f7:fe:eb:
7b:09:c4:d7:15:c1:ed:1f:ed:1a:80:64:56:89:80:65:39:ac:
5f:45:4c:df:20:55:c9:da:8d:58:e3:56:5b:32:d1:31:a3:ac:
d1:13:58:b9:d3:5c:ca:2a:25:5d:1f:9a:c3:9c:7c:b4:ca:cb:
09:3d:68:75:b0:00:1b:d7:03:b1:11:80:4e:a7:2c:74:0f:4e:
08:49:65:69:57:e8:a1:be:4b:14:9f:d4:be:dd:76:05:69:73:
3a:34:1a:7b:33:79:03:72:91:90:59:45:8f:5d:0d:d4:e9:01:
1b:15:2b:0a:ad:8b:b0:ec:38:47:63:6f:a3:c0:0a:72:65:7c:
65:f2:47:c6:f9:5d:02:eb:d4:c5:92:22:04:36:87:cf:40:d7:
39:bd:5f:53:05:7c:b1:61:0b:a7:79:58:66:31:58:36:cd:65:
20:e1:a2:ec:49:75:db:12:28:b0:fe:ae:a8:ba:0b:0f:d7:3d:
b7:c1:99:68:0e:62:2c:01:57:a5:61:09:37:5e:cc:0d:dd:1d:
19:a9:85:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:08:37 2026 by rpki-client