
$ rpki-client -vvf rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/88B4A746725111F189F604128DA30FBC.roa
File: 88B4A746725111F189F604128DA30FBC.roa (raw, json)
Hash identifier: /emz37e0m2LLZWcMUqkDepflFN5315Y0u/7biRL6nWA=
Subject key identifier: CF:A4:3B:49:9C:92:2C:C1:97:77:2B:20:3C:88:03:62:37:FA:0D:C0
Certificate issuer: /CN=A91729D4/serialNumber=AAF21B706B55F1334DCF6B617E9E0F311D5BF733
Certificate serial: 02
Authority key identifier: AA:F2:1B:70:6B:55:F1:33:4D:CF:6B:61:7E:9E:0F:31:1D:5B:F7:33
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qvIbcGtV8TNNz2thfp4PMR1b9zM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/88B4A746725111F189F604128DA30FBC.roa
Signing time: Sat 27 Jun 2026 17:56:34 +0000
ROA not before: Sat 27 Jun 2026 17:56:34 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 136396
IP address blocks: 160.236.24.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.crl
rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qvIbcGtV8TNNz2thfp4PMR1b9zM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 10:29:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91729D4, serialNumber=AAF21B706B55F1334DCF6B617E9E0F311D5BF733
Validity
Not Before: Jun 27 17:56:34 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a400ed2-17ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:93:1a:3c:41:c5:b9:6f:94:f0:bc:fe:ff:
19:7b:4d:b2:b8:d6:2d:8a:ba:15:1d:68:15:3b:df:
8d:98:4e:86:e7:e6:0a:df:54:71:93:35:f9:35:92:
4b:91:97:49:3b:22:e1:c7:b3:56:91:5a:5c:6b:2b:
f5:70:22:df:0c:11:22:ef:9e:93:54:03:43:34:0b:
df:de:93:23:83:53:89:b4:c2:5e:74:e0:52:71:a9:
73:eb:d7:be:d6:af:a5:61:0d:81:f6:98:74:ae:20:
b0:bd:2f:c6:34:f4:e5:8c:64:eb:c1:4b:48:f8:a0:
a1:71:b1:31:d5:72:b3:9f:1d:70:06:3d:9e:af:96:
5c:d7:17:f1:14:f3:19:0f:4c:b8:e4:44:42:64:7c:
83:6d:8a:26:a0:47:49:4d:a2:16:c6:22:45:b4:5c:
e7:82:e1:69:1d:36:54:83:9b:cb:16:d6:01:aa:9a:
ed:9c:bc:a1:37:9e:d1:65:72:ac:50:e2:b4:c1:ee:
6c:ed:a6:77:bb:9f:f9:50:3c:8e:da:99:1d:9b:18:
e4:52:05:b9:7f:79:de:1d:fb:0d:38:7c:5d:41:a1:
ff:02:59:52:16:7b:fd:e3:50:ec:b6:97:85:08:fe:
f7:ef:0b:29:e6:a4:06:5c:5d:f1:0e:09:0e:b7:a3:
80:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A4:3B:49:9C:92:2C:C1:97:77:2B:20:3C:88:03:62:37:FA:0D:C0
X509v3 Authority Key Identifier:
keyid:AA:F2:1B:70:6B:55:F1:33:4D:CF:6B:61:7E:9E:0F:31:1D:5B:F7:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qvIbcGtV8TNNz2thfp4PMR1b9zM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/88B4A746725111F189F604128DA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
160.236.24.0/23
Signature Algorithm: sha256WithRSAEncryption
43:44:d4:29:6d:5a:8f:82:35:4c:b4:7b:b1:8d:0f:cc:9f:7c:
72:71:e3:38:20:49:19:14:bc:81:ec:63:8d:89:f7:82:95:52:
e8:fa:db:24:4d:55:64:f0:1d:f2:cc:d9:ee:48:6c:dd:98:71:
16:41:67:bf:b9:64:e1:8b:89:1b:ad:aa:36:db:af:ca:48:a7:
87:70:41:55:04:ee:a9:41:77:c1:5f:ba:08:33:3b:da:be:f2:
51:d4:53:86:16:bd:c5:ab:f6:e2:a9:2a:8d:2e:f5:b9:d0:5b:
06:ce:9e:85:dc:ed:23:3f:1b:39:fd:a6:39:f0:e7:8b:4b:40:
43:69:40:f2:a5:bc:f8:7f:62:72:33:66:22:fe:21:6c:b8:b9:
bd:3d:2c:26:8d:45:ce:c5:9a:83:4d:c0:14:7d:2c:68:6c:f5:
54:1c:ab:34:be:a9:ed:94:93:32:7b:67:48:ab:35:65:af:ef:
a5:a0:34:97:c2:2f:f1:b4:4d:ae:21:95:da:3a:18:97:f3:04:
d6:6a:d3:77:25:ca:dd:83:fa:2a:29:60:e1:36:61:78:68:a6:
a3:e3:60:1a:2d:b5:8d:b1:fc:20:e6:a9:13:01:ac:54:7a:34:
74:98:2d:62:aa:6d:df:77:aa:e0:a3:02:2a:c4:a6:81:52:a0:
80:32:d6:2c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 10 23:40:30 2026 by rpki-client