
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/89327BEACEF311F1B660064D1B66CEF9.roa
File: 89327BEACEF311F1B660064D1B66CEF9.roa (raw, json)
Hash identifier: yxEL3j+Rk8I7950MRO+nV9/LHdDi07l+CJ+SCJvupR0=
Subject key identifier: 0D:19:9F:1F:D8:E1:14:18:C5:8D:AB:F9:F2:F5:CE:1E:EA:61:05:9A
Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial: 017E
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/89327BEACEF311F1B660064D1B66CEF9.roa
Signing time: Fri 23 Oct 2026 15:08:00 +0000
ROA not before: Fri 23 Oct 2026 15:08:00 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 142115
IP address blocks: 72.57.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 20:34:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382 (0x17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Validity
Not Before: Oct 23 15:08:00 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6adb7850-ec53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:89:4b:10:a3:f7:b0:8d:b4:d4:5d:51:74:53:
18:28:6d:4a:67:5c:3e:bc:59:f5:2d:28:7e:51:8d:
45:4c:be:19:76:1a:04:60:1d:b1:ed:4d:2c:e5:70:
cb:c2:b2:ef:17:d5:b7:3c:df:be:dd:4a:5b:4b:35:
f1:1f:96:b7:9e:5b:2a:b4:a5:f6:48:b6:98:62:ed:
f0:d0:3d:66:dd:e5:81:aa:d2:5b:3e:8b:e7:de:ea:
65:90:76:34:a6:c9:04:e3:15:eb:e4:51:db:93:08:
0e:29:9a:53:68:1e:46:22:b2:83:fe:bf:2e:f1:fb:
57:d9:cf:70:85:82:2e:fb:3f:7e:83:e4:f5:27:c7:
02:93:8e:5b:ac:3f:68:bf:3c:0e:0d:0c:1f:05:98:
fc:53:68:a5:38:ff:0b:86:24:b6:31:b5:7f:3f:22:
fc:59:67:e7:91:6f:17:62:39:90:2b:67:c5:1c:59:
51:de:2f:fd:d5:b3:76:46:b6:cf:7a:70:5d:6e:79:
0f:66:84:af:83:4b:d6:66:ce:0f:c4:9d:19:9a:0a:
e0:b9:99:3b:a6:38:46:85:5c:45:7d:3d:12:5f:d8:
47:ca:03:56:6d:f2:65:0c:88:d3:31:d7:f3:f5:cf:
59:f0:8e:a7:5f:49:14:e7:60:c2:89:c7:7a:3e:80:
c9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:19:9F:1F:D8:E1:14:18:C5:8D:AB:F9:F2:F5:CE:1E:EA:61:05:9A
X509v3 Authority Key Identifier:
keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/89327BEACEF311F1B660064D1B66CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
72.57.133.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:29:15:47:38:93:9f:ee:4e:c1:be:3f:26:4a:ea:fe:b6:91:
14:a9:36:9e:73:6e:8a:e8:d6:76:c7:17:e6:c3:74:0a:0a:49:
65:51:42:12:38:75:66:06:05:a6:cd:93:11:7f:ef:69:ce:cd:
2c:3c:11:0b:6e:02:d0:7b:df:48:3b:58:3d:bb:64:01:1f:95:
fb:0f:7f:13:5d:23:bd:58:6a:8b:0d:70:5d:2a:64:38:69:4d:
be:a6:21:17:d0:01:2f:c8:c3:19:11:68:ee:5c:03:8f:03:bc:
5b:b4:fd:5a:84:f6:fd:8a:26:02:c6:87:66:de:91:fc:d7:67:
f8:5c:1e:5b:4e:48:90:1d:86:c9:9f:56:61:35:e9:fc:31:c0:
78:0b:7b:3b:20:b1:e6:ae:ec:5e:87:66:31:71:a0:a5:6f:5e:
c9:e3:2e:52:fa:07:20:98:54:49:9f:0f:d4:15:5f:34:20:2a:
e4:79:a9:5f:81:f9:27:46:c0:77:4e:01:b3:da:e1:d2:69:92:
f6:2b:0b:53:78:2e:52:95:6b:2c:32:1e:49:da:0d:42:03:37:
63:8b:4e:2b:bd:f4:16:75:a9:b2:8d:3f:f1:b0:5a:d4:99:63:
0d:1c:e1:8e:07:96:2a:76:9b:40:48:2f:37:02:bf:3e:81:a2:
c8:60:dc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:52:39 2026 by rpki-client