
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/B90F0122BC0A11F180E45ED03811F970.roa
File: B90F0122BC0A11F180E45ED03811F970.roa (raw, json)
Hash identifier: 0zMn7oQWtYdz8w6HsA5/B9Y3AkNUxnKXExnRalSOq3E=
Subject key identifier: 5E:07:6D:3C:3E:36:9F:CF:60:87:8F:1F:AD:D9:FB:D8:FC:26:EA:4A
Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial: 0168
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/B90F0122BC0A11F180E45ED03811F970.roa
Signing time: Tue 06 Oct 2026 15:16:07 +0000
ROA not before: Tue 06 Oct 2026 15:16:07 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 132839
IP address blocks: 74.52.4.0/24 maxlen: 24
74.52.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360 (0x168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Validity
Not Before: Oct 6 15:16:07 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ac510b7-92fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1a:24:14:85:86:2a:8e:32:fa:0e:4b:12:56:
56:54:0a:18:72:6a:2b:2f:46:00:5a:d0:0c:15:6a:
70:a5:d1:b9:f4:6d:9a:5a:9a:9e:b8:0f:df:20:4c:
47:d9:b9:0d:59:71:d8:b7:78:75:ec:7a:ef:37:4b:
3c:ab:46:c9:ec:b3:e7:40:38:a7:37:65:4b:3e:28:
b2:d2:b6:3c:71:17:1d:4e:1b:42:f3:c1:dc:6b:2b:
51:74:9c:cb:1a:76:6d:1e:35:4b:f4:64:5e:86:be:
ce:17:4f:63:98:f0:05:18:f8:ef:3f:c9:6d:ad:21:
a3:3d:3d:43:65:d6:e9:42:a5:1f:b3:30:f6:d9:aa:
8e:25:3d:83:5a:88:0c:6b:5f:b4:68:31:ae:2e:ef:
50:ee:91:58:ee:d5:38:0b:18:ce:c6:3e:cb:fe:59:
57:42:40:58:30:75:6c:eb:0f:aa:21:9a:7a:93:9d:
b6:51:1d:6d:95:4c:d2:9f:05:03:71:65:56:4b:49:
cd:b8:28:c3:ec:39:15:ff:a8:55:ef:03:03:31:50:
c9:93:97:ad:a8:60:76:9a:28:29:7e:f2:f7:9e:15:
32:dc:65:ab:c3:e4:32:9d:b9:f3:8d:76:3a:c3:24:
c6:5d:73:61:63:a4:88:5d:5c:76:47:4b:da:f0:b6:
9b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:07:6D:3C:3E:36:9F:CF:60:87:8F:1F:AD:D9:FB:D8:FC:26:EA:4A
X509v3 Authority Key Identifier:
keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/B90F0122BC0A11F180E45ED03811F970.roa
sbgp-ipAddrBlock: critical
IPv4:
74.52.4.0/24
74.52.24.0/22
Signature Algorithm: sha256WithRSAEncryption
50:e9:6a:65:4b:25:be:c0:21:a5:ab:80:bf:bc:65:53:3b:83:
cb:f0:86:62:d1:80:27:23:ec:b1:4b:2e:e6:16:fd:f6:b3:56:
ab:22:8e:bb:0c:fa:d9:42:a6:1b:59:3f:fa:d2:9f:55:0c:ce:
7a:5a:06:03:73:f6:a6:c7:b2:69:99:cf:6b:c3:10:4c:17:9a:
4e:00:a8:8c:36:15:b4:e4:3a:c2:d3:ab:40:48:f6:c3:c5:67:
19:ad:22:b1:c1:63:31:78:41:34:0b:7b:12:d4:3c:02:05:01:
6a:c2:3e:6c:7b:75:e6:6c:de:7f:e3:f1:c3:82:f2:26:2b:f8:
e1:35:a7:f9:66:cf:9a:2e:01:f8:9c:a6:6e:f8:7f:22:03:5b:
3c:40:bb:33:58:cf:9b:fc:4b:e8:6c:b6:f1:46:6a:25:dd:b7:
02:96:ef:5d:16:aa:34:ef:67:38:1f:be:01:9b:3f:2b:d1:62:
76:39:4f:b2:d0:7f:62:cd:21:ce:04:e2:cf:b4:98:a3:97:0a:
72:51:98:3f:1c:9f:35:7d:58:9a:d6:18:3b:38:1b:ad:86:80:
e7:70:16:f4:84:b5:d3:4e:79:2c:5a:08:3a:eb:49:6a:26:0a:
85:8c:86:8d:84:dd:56:aa:ca:7b:fb:fe:e0:fc:22:11:c0:d6:
e3:22:17:76
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM4RTcxMTAvBgNVBAUTKDNENjIxNkQ1NUNCNTRGQzlCNTcwRjlGMjVGOUFERDBG
Mzc2OUI0REUwHhcNMjYxMDA2MTUxNjA3WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWM1MTBiNy05MmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2BokFIWGKo4y+g5LElZWVAoYcmorL0YAWtAMFWpwpdG59G2aWpqeuA/fIExH
2bkNWXHYt3h17HrvN0s8q0bJ7LPnQDinN2VLPiiy0rY8cRcdThtC88HcaytRdJzL
GnZtHjVL9GRehr7OF09jmPAFGPjvP8ltrSGjPT1DZdbpQqUfszD22aqOJT2DWogM
a1+0aDGuLu9Q7pFY7tU4CxjOxj7L/llXQkBYMHVs6w+qIZp6k522UR1tlUzSnwUD
cWVWS0nNuCjD7DkV/6hV7wMDMVDJk5etqGB2migpfvL3nhUy3GWrw+QynbnzjXY6
wyTGXXNhY6SIXVx2R0va8Lab6QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFF4HbTw+
Np/PYIePH63Z+9j8JupKMB8GA1UdIwQYMBaAFD1iFtVctU/JtXD58l+a3Q83abTe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9DNjJCMjk4Njkz
NDIxMUYwQTk4Nzc4M0JDNEY5QUUwMi9QV0lXMVZ5MVQ4bTFjUG55WDVyZER6ZHB0
TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BXSVcxVnkxVDhtMWNQbnlYNXJkRHpkcHRONC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTM4RTcvQzYyQjI5ODY5MzQyMTFGMEE5ODc3ODNCQzRGOUFFMDIvQjkwRjAxMjJC
QzBBMTFGMTgwRTQ1RUQwMzgxMUY5NzAucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQASjQEAwQCSjQYMA0GCSqGSIb3DQEBCwUAA4IBAQBQ6WplSyW+wCGl
q4C/vGVTO4PL8IZi0YAnI+yxSy7mFv32s1arIo67DPrZQqYbWT/60p9VDM56WgYD
c/amx7Jpmc9rwxBMF5pOAKiMNhW05DrC06tASPbDxWcZrSKxwWMxeEE0C3sS1DwC
BQFqwj5se3XmbN5/4/HDgvImK/jhNaf5Zs+aLgH4nKZu+H8iA1s8QLszWM+b/Evo
bLbxRmol3bcClu9dFqo072c4H74Bmz8r0WJ2OU+y0H9izSHOBOLPtJijlwpyUZg/
HJ81fVia1hg7OButhoDncBb0hLXTTnksWgg660lqJgqFjIaNhN1Wqsp7+/7g/CIR
wNbjIhd2
-----END CERTIFICATE-----
Generated at Tue Oct 6 21:08:31 2026 by rpki-client