
$ rpki-client -vvf rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/F2C40E76FCCF11F08F91A5156B6F56BC.roa
File: F2C40E76FCCF11F08F91A5156B6F56BC.roa (raw, json)
Hash identifier: hjtJk2OsTeC7305w9qgJUbXnV2reFWS44M7SvUt4IwQ=
Subject key identifier: AA:2B:BB:F7:0C:9B:E6:BB:1A:47:18:75:04:68:55:74:13:92:FD:0A
Certificate issuer: /CN=A91736F5/serialNumber=134FC480DF167AE80FB3F4C44DEF6A9BA9995A91
Certificate serial: 18
Authority key identifier: 13:4F:C4:80:DF:16:7A:E8:0F:B3:F4:C4:4D:EF:6A:9B:A9:99:5A:91
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0_EgN8WeugPs_TETe9qm6mZWpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/F2C40E76FCCF11F08F91A5156B6F56BC.roa
Signing time: Thu 29 Jan 2026 05:04:11 +0000
ROA not before: Thu 29 Jan 2026 05:04:11 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 136396
IP address blocks: 144.79.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.crl
rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0_EgN8WeugPs_TETe9qm6mZWpE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 07:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91736F5, serialNumber=134FC480DF167AE80FB3F4C44DEF6A9BA9995A91
Validity
Not Before: Jan 29 05:04:11 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=697aea4b-d23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:fd:f0:3b:ef:d2:c9:2d:46:1b:d8:a8:31:
90:5c:b3:0f:dd:83:76:91:82:c3:5e:24:35:67:07:
e8:f3:27:72:6b:5c:7f:38:1a:10:4d:83:66:5b:44:
1a:dd:88:c9:37:86:e6:6e:73:7a:9f:64:a7:81:c1:
79:15:2a:c8:e4:53:fd:93:2c:c8:24:ca:59:29:1b:
be:6d:2c:73:4b:23:a6:d9:7d:18:57:7b:88:a7:6d:
a5:2d:1b:d9:b5:9c:43:5c:05:10:4f:6e:4a:3a:78:
e8:5b:f5:9a:97:d5:68:60:7b:63:03:cd:d3:df:0d:
74:69:93:7a:36:23:ae:62:94:2e:7a:ee:2c:5c:d6:
3c:47:f8:7d:0b:03:a9:26:15:ca:f4:d4:06:c3:bb:
3f:82:7e:9f:e9:4c:d5:0d:40:4f:8a:d0:24:93:16:
09:66:95:44:18:f6:22:eb:6c:2d:5b:de:7b:f7:04:
20:0c:57:5b:95:cd:69:64:fb:e1:54:d2:e3:fb:fd:
87:15:f4:c6:12:be:1f:13:46:bc:34:70:a0:91:0c:
7c:fb:71:8b:4d:4d:60:91:aa:e2:58:64:39:9c:b8:
1e:79:5e:cc:74:7f:1a:9b:d1:12:1e:f0:ab:c6:ca:
fd:1f:9c:81:53:87:8c:b1:1a:b3:b4:25:c7:5a:bc:
e9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2B:BB:F7:0C:9B:E6:BB:1A:47:18:75:04:68:55:74:13:92:FD:0A
X509v3 Authority Key Identifier:
keyid:13:4F:C4:80:DF:16:7A:E8:0F:B3:F4:C4:4D:EF:6A:9B:A9:99:5A:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0_EgN8WeugPs_TETe9qm6mZWpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/F2C40E76FCCF11F08F91A5156B6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.249.0/24
Signature Algorithm: sha256WithRSAEncryption
53:e2:39:e2:0d:8d:e0:2e:84:7b:72:63:98:a8:fe:93:d7:1b:
f7:aa:e8:f8:94:cf:fe:dd:14:1f:96:fe:61:a7:29:8d:11:c6:
62:d7:37:b7:79:76:34:41:24:90:b9:73:7e:8f:6c:b1:86:d8:
23:1a:b2:f4:c6:f8:10:d7:b7:cb:eb:4e:8b:2b:f2:56:b0:a5:
fd:0d:fb:70:9f:1a:df:34:49:81:52:b9:82:70:21:c2:0a:f4:
27:3b:a6:60:de:da:97:87:77:34:fb:ef:f2:17:26:7d:3e:bf:
77:e0:82:53:73:1d:2a:f5:d6:9e:cb:e0:a6:83:13:a8:9f:71:
2a:8f:10:c0:e8:da:f0:52:62:16:8d:99:ea:49:cb:5d:5b:1d:
9e:8d:b0:02:8e:54:03:cf:48:38:7d:0e:7b:b8:e7:34:8a:be:
89:4d:e5:e7:0c:45:35:63:48:63:1c:cd:6c:78:18:95:e8:1a:
cb:c2:7a:7e:7d:5d:99:33:8e:41:01:58:09:8e:fa:52:ca:93:
35:d5:00:10:1f:03:f2:d8:d6:35:5e:57:ab:40:43:38:d0:ea:
4c:e1:5c:a3:f6:ee:f1:21:44:5c:97:31:8b:c9:64:04:dd:11:
ec:de:01:06:4f:10:0a:f3:43:a1:3e:02:45:a9:6f:52:96:4c:
8e:1c:a1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:35:06 2026 by rpki-client