
$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/E8E194B8A5CC11EC85A86A1FC4F9AE02.roa
File: E8E194B8A5CC11EC85A86A1FC4F9AE02.roa (raw, json)
Hash identifier: bD2C5/DgW70VY50hOjBpLKvWt5B7bnvlv0UfjlxEnfk=
Subject key identifier: 41:1B:D4:CD:4C:84:41:3E:F1:E6:32:E0:F1:FB:A0:11:1C:AF:37:E4
Certificate issuer: /CN=A91342C5/serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
Certificate serial: 043A
Authority key identifier: 4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/E8E194B8A5CC11EC85A86A1FC4F9AE02.roa
Signing time: Sun 19 Apr 2026 00:32:59 +0000
ROA not before: Sun 19 Apr 2026 00:32:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142005
IP address blocks: 85.113.86.0/23 maxlen: 24
193.149.158.0/23 maxlen: 24
193.149.166.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl
rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 00:15:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1082 (0x43a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91342C5, serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
Validity
Not Before: Apr 19 00:32:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69e422bb-6ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:89:bc:e5:3e:e8:95:bc:e7:e7:0c:77:6f:a7:
02:a1:19:8b:bc:3e:59:ba:ae:f3:8b:60:73:26:c9:
e4:aa:fe:90:05:3c:36:5d:04:e0:01:c4:21:5d:8a:
60:9d:06:41:99:1c:79:68:ff:af:cc:96:74:ba:dc:
ae:4b:d1:96:f2:0e:13:6b:5f:36:d3:41:5a:0f:2e:
25:1e:a6:f7:65:71:e3:cb:21:5b:a4:3c:bd:0b:cd:
47:b8:8b:10:89:7d:9e:fa:19:3d:fc:0b:21:7b:b0:
29:5e:7b:b5:74:41:74:f7:74:09:7d:9a:ca:c6:4a:
45:80:fc:1f:1f:d2:12:81:79:29:79:6d:c5:96:88:
b3:fe:77:11:2d:b5:3b:79:e3:38:50:96:f5:0f:9d:
9a:73:43:14:1b:32:b6:1e:dc:40:7f:55:18:de:a5:
f8:dc:00:b9:8c:75:59:0f:30:e4:b1:0d:42:14:eb:
e6:87:13:6b:0d:4c:55:fa:38:f2:91:73:ae:62:2c:
0c:0e:75:68:78:59:f0:fe:40:0e:4d:a1:f1:a1:db:
e6:16:39:fa:41:73:05:09:61:9b:98:1b:3b:3b:99:
79:89:47:20:de:08:e5:30:7f:b7:97:88:89:9a:b5:
71:15:50:f0:08:98:4d:24:92:53:c5:11:a0:ae:52:
46:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1B:D4:CD:4C:84:41:3E:F1:E6:32:E0:F1:FB:A0:11:1C:AF:37:E4
X509v3 Authority Key Identifier:
keyid:4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/E8E194B8A5CC11EC85A86A1FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
85.113.86.0/23
193.149.158.0/23
193.149.166.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:f6:5c:e4:71:f5:06:87:88:4a:e2:f7:a6:79:88:0b:5b:aa:
26:1f:c7:aa:78:b0:bb:b8:bd:d5:0f:61:c1:4c:68:5b:eb:b2:
90:77:fb:86:4b:ad:7f:de:49:93:d2:78:53:af:30:9c:05:10:
db:51:2b:83:e4:bc:6f:64:d5:30:71:c0:f1:5a:2b:25:2c:95:
c2:14:45:88:ee:47:98:51:24:d4:6f:b9:d0:16:55:d4:66:8e:
02:a3:2f:f9:81:78:04:cc:c9:c1:f1:cd:ad:07:9e:3f:25:9c:
9b:cd:71:d7:58:fc:5c:36:74:a6:c0:30:0d:35:60:c2:0d:43:
48:67:06:6f:f8:fd:01:a0:2e:68:22:d6:6d:a3:d9:b6:93:9a:
cc:9c:89:2d:a1:41:74:49:2b:35:e9:97:15:62:d5:cd:d0:cc:
e3:9f:d3:0e:d1:10:4d:15:99:5c:74:0a:d7:27:4d:2f:e8:d8:
48:5e:4e:cd:aa:cc:f8:e8:93:20:c6:61:7a:89:b0:a7:a0:13:
81:1c:3b:b1:0e:b5:5d:39:cc:51:de:5d:a3:02:f0:4c:59:1b:
d7:f1:be:0d:a8:2f:94:0f:29:56:5b:51:c6:36:11:dc:2c:23:
1c:8b:fb:28:f6:93:8d:a9:bb:77:df:67:30:83:1d:ca:1c:2b:
45:48:b8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 01:41:57 2026 by rpki-client