
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/93C20720C45311EBB305C97FC4F9AE02.roa
File: 93C20720C45311EBB305C97FC4F9AE02.roa (raw, json)
Hash identifier: QY18vMFmdChyQyfcfFDEf11M5TcgbHCaIK1U/nLNS74=
Subject key identifier: 99:6A:63:14:72:E0:8E:78:13:95:6A:87:08:77:1F:C9:B0:4E:3B:88
Certificate issuer: /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial: 1447
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/93C20720C45311EBB305C97FC4F9AE02.roa
Signing time: Thu 06 Aug 2026 17:33:53 +0000
ROA not before: Thu 06 Aug 2026 17:33:53 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 38861
IP address blocks: 111.223.96.0/19 maxlen: 24
113.10.64.0/18 maxlen: 24
117.20.128.0/18 maxlen: 24
122.11.128.0/17 maxlen: 24
171.207.0.0/16 maxlen: 24
182.19.128.0/17 maxlen: 24
182.55.0.0/16 maxlen: 24
183.90.0.0/17 maxlen: 24
203.116.0.0/16 maxlen: 24
203.117.0.0/16 maxlen: 24
203.118.0.0/18 maxlen: 24
2406:3000:4::/48 maxlen: 48
2406:3001::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 17:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5191 (0x1447)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Validity
Not Before: Aug 6 17:33:53 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a74c581-f0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:7d:fd:24:a7:74:36:a5:25:88:53:53:f0:
f6:c4:87:8b:f1:ee:fe:2f:c9:4b:23:d4:fd:96:99:
32:22:d6:d9:22:fa:09:12:f5:38:3a:75:80:d8:20:
3a:ee:dd:ac:ec:09:16:52:83:68:0f:d5:1f:85:e7:
c8:db:55:ee:60:3e:af:2a:74:a8:55:58:8b:18:03:
6f:34:c6:8e:d9:5f:e6:18:0a:00:6a:04:2e:85:f9:
a6:97:ff:49:38:93:44:11:5c:35:77:c4:8f:0c:93:
19:3d:61:74:1b:f0:e5:56:0c:02:86:64:54:27:3e:
37:c2:17:be:a3:d5:ef:cd:d4:fb:2b:71:02:7a:b8:
80:8a:2d:b3:89:b2:08:7f:19:6b:71:19:ee:33:a6:
7d:45:bd:6a:e7:4a:29:92:3f:4f:f1:13:74:16:da:
79:2c:b6:dd:fe:a7:bc:be:8a:13:30:8f:dc:67:d6:
3a:ce:ae:ca:26:65:cc:bf:d3:63:92:20:a1:1d:7b:
6c:88:6c:a7:17:39:59:ff:85:43:09:4e:d6:87:a5:
60:ef:99:46:93:4b:53:bd:50:07:e5:9c:f4:b4:1c:
5c:1e:a6:68:af:0d:84:65:a7:be:86:11:46:b3:00:
66:22:28:10:0b:af:87:25:03:35:8a:94:97:ee:c7:
ab:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6A:63:14:72:E0:8E:78:13:95:6A:87:08:77:1F:C9:B0:4E:3B:88
X509v3 Authority Key Identifier:
keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/93C20720C45311EBB305C97FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
111.223.96.0/19
113.10.64.0/18
117.20.128.0/18
122.11.128.0/17
171.207.0.0/16
182.19.128.0/17
182.55.0.0/16
183.90.0.0/17
203.116.0.0-203.118.63.255
IPv6:
2406:3000:4::/48
2406:3001::/32
Signature Algorithm: sha256WithRSAEncryption
1d:13:6f:6b:21:45:b6:ff:b4:61:05:cd:ff:d1:4c:2a:6a:2a:
87:64:45:28:30:9c:62:dc:85:e5:21:82:5e:6f:04:b5:c4:59:
a7:89:b2:5c:85:9b:5c:44:d9:4b:9c:f4:45:be:bd:f3:1b:f4:
ef:75:69:5f:34:0b:77:f0:ea:f5:8c:ed:a2:99:dc:61:e6:1e:
34:86:62:36:10:cc:7d:2f:7b:87:8d:85:d3:c7:82:99:ee:25:
e5:60:c3:6c:87:24:b4:6e:32:00:84:ec:c3:0c:96:83:4c:27:
a3:2c:8a:96:01:5b:d6:04:ff:a9:d4:3d:2c:e2:31:b4:9b:5f:
3c:54:08:81:3f:ae:2a:32:f9:c4:3b:1c:21:26:2d:68:ff:5b:
88:79:18:16:05:65:85:07:43:38:6a:bb:d8:a4:cb:0a:0a:01:
86:e9:ac:76:7d:42:3d:53:92:57:08:d7:93:3e:e2:4b:bc:d3:
be:47:ce:55:79:c1:bc:7a:17:76:51:0a:e7:e2:51:8e:1e:62:
9d:20:a0:db:f1:cb:a7:d2:82:d3:65:ae:c2:a5:e4:bf:43:ea:
c6:30:81:c0:c5:e6:4b:ed:1b:e2:0f:c3:ee:81:d9:19:a2:59:
57:4a:8a:63:5c:fd:51:cc:03:71:57:db:6e:ac:1d:f3:6f:75:
e4:ad:1e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:03:47 2026 by rpki-client