
$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/D5C188B88DBD11E9877F5B11C4F9AE02.roa
File: D5C188B88DBD11E9877F5B11C4F9AE02.roa (raw, json)
Hash identifier: GeaS1wm5HUzDhRPnFMwxNijLtG7Ej2e1/5+Wkd8XMhE=
Subject key identifier: 72:CF:88:F1:EA:02:77:B3:85:D9:3B:E8:DB:5A:69:6B:86:2C:B7:4C
Certificate issuer: /CN=A91697FA/serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67
Certificate serial: 357E
Authority key identifier: 27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/D5C188B88DBD11E9877F5B11C4F9AE02.roa
Signing time: Thu 30 Jul 2026 15:10:38 +0000
ROA not before: Thu 30 Jul 2026 15:10:38 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 7693
IP address blocks: 140.149.0.0/16 maxlen: 16
140.149.0.0/17 maxlen: 17
140.149.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl
rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Aug 2026 14:22:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13694 (0x357e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91697FA, serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67
Validity
Not Before: Jul 30 15:10:38 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a6b696e-1c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:13:41:39:3d:eb:d4:3d:2a:a5:00:57:de:2b:
2c:9b:84:38:c3:6b:19:bc:4c:76:22:3e:86:ce:08:
d6:c3:bb:3c:d3:44:09:8c:ba:57:d5:de:52:83:98:
22:e8:60:96:b6:87:c4:fc:10:2f:36:24:90:ee:a8:
20:56:61:d2:fb:25:10:96:a1:c1:5c:17:ca:eb:e5:
56:39:d1:be:31:e6:d9:5b:8e:e0:04:96:41:13:f9:
ec:43:5f:11:a4:f6:91:3d:3a:a7:28:cd:71:fe:0c:
7f:8a:51:51:17:90:ea:79:b8:fc:d9:9e:1d:dd:64:
14:5b:67:8d:73:6e:26:cc:39:b3:55:ce:ef:eb:02:
df:b4:69:3c:1a:d8:f1:e7:7d:32:26:c0:3c:06:57:
80:e5:e8:05:37:ad:60:4e:f8:10:bf:d0:f4:4a:7f:
f2:5f:41:53:08:a4:81:24:91:af:34:5a:79:09:25:
7f:00:a4:0f:c5:c9:14:4e:e1:41:03:48:ee:0d:f6:
52:eb:a8:12:a3:0e:b3:ed:ff:1a:fa:19:af:e3:e6:
9b:c6:28:15:07:f2:5e:ad:cb:18:94:c4:32:d0:23:
84:22:cf:94:32:5a:b0:39:34:4d:ba:a3:80:cd:0a:
7f:12:99:cd:8d:48:65:66:e3:86:62:3a:14:f1:be:
dc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CF:88:F1:EA:02:77:B3:85:D9:3B:E8:DB:5A:69:6B:86:2C:B7:4C
X509v3 Authority Key Identifier:
keyid:27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/D5C188B88DBD11E9877F5B11C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
140.149.0.0/16
Signature Algorithm: sha256WithRSAEncryption
56:b1:14:c9:d4:d7:36:ef:c8:23:41:b4:e8:cc:dd:1e:03:f2:
01:ff:fb:da:bd:e4:25:67:62:c3:97:0c:86:fc:52:19:af:67:
84:1b:82:db:74:7c:e2:1b:b1:13:69:ea:c5:3f:2a:d9:f0:8e:
85:a2:56:1b:9c:31:11:30:64:a4:fc:a8:0e:bb:0e:d4:1c:3c:
2b:16:d2:a1:21:19:a5:0c:61:f2:ca:81:1e:dd:fa:54:69:38:
e4:cf:eb:07:93:58:15:0a:b5:17:75:b2:c0:d1:12:e0:d2:dc:
00:64:84:83:dc:bf:f2:78:c8:dd:92:95:94:68:a1:2a:ba:81:
9f:31:90:49:10:3c:f6:f9:10:bb:62:29:32:8b:b2:4d:7d:e9:
5c:d1:b2:a2:d5:a0:57:f3:18:b6:89:1d:60:b0:8f:9f:70:3a:
f8:0e:68:8c:2a:8c:1e:92:44:6f:ca:f7:3e:a8:7b:8b:72:f5:
33:e1:df:57:45:0d:86:cf:21:25:13:54:2a:d6:b0:d8:6f:e4:
ec:af:a1:12:19:06:a6:1d:fd:d0:3e:36:51:e8:7c:ba:42:f9:
2a:80:d9:da:f3:9f:74:8c:dd:c3:fc:d2:11:c7:a9:17:ff:27:
eb:b2:a4:af:72:56:a2:af:70:0b:88:35:7f:73:df:90:dd:91:
53:16:e0:52
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Aug 4 22:25:32 2026 by rpki-client