
$ rpki-client -vvf rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/1AC14F60FC1C11F0AA0D3BE4396F56BC.roa
File: 1AC14F60FC1C11F0AA0D3BE4396F56BC.roa (raw, json)
Hash identifier: aYDnHlZZ14KegbsrCL1Glj9EDgxGx2Y0U5BoskwOni4=
Subject key identifier: D0:86:98:FD:14:F5:B0:CF:3A:2D:A2:7B:37:01:94:B8:E3:FC:21:10
Certificate issuer: /CN=A91758EC/serialNumber=D827B6843EB7F6B9F0ED5F2FF72344A52C04B49F
Certificate serial: C9
Authority key identifier: D8:27:B6:84:3E:B7:F6:B9:F0:ED:5F:2F:F7:23:44:A5:2C:04:B4:9F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Ce2hD639rnw7V8v9yNEpSwEtJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/1AC14F60FC1C11F0AA0D3BE4396F56BC.roa
Signing time: Sun 05 Jul 2026 08:33:40 +0000
ROA not before: Sun 05 Jul 2026 08:33:40 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 134231
IP address blocks: 165.101.240.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.crl
rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Ce2hD639rnw7V8v9yNEpSwEtJ8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:14:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91758EC, serialNumber=D827B6843EB7F6B9F0ED5F2FF72344A52C04B49F
Validity
Not Before: Jul 5 08:33:40 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4a16e3-daac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6a:f0:9d:1d:00:1d:45:18:d6:46:ea:a7:80:
20:fc:1c:05:8b:8e:60:44:2a:ea:74:59:e7:4d:79:
78:e0:6a:fa:11:97:e3:75:23:4e:1a:0f:69:76:f3:
a4:b1:53:cb:df:7c:b8:ba:71:c8:80:73:20:e2:76:
db:08:6f:3c:9d:d7:b1:1f:fe:dd:b1:81:f0:50:98:
e6:89:0a:69:78:b5:be:65:4b:f3:0b:21:78:f8:89:
89:c7:dd:be:2c:67:7c:5d:d5:ec:23:d8:6e:cf:85:
7a:3a:63:dd:ba:fa:f0:35:49:be:71:f4:60:59:4c:
28:6f:32:71:99:30:65:b7:c8:2a:fe:40:0e:3c:a0:
b8:8d:90:52:cd:3c:f3:a3:ee:ad:f4:fe:f4:45:08:
e9:3f:c2:4a:59:c8:ed:e6:3a:da:36:2b:2a:f1:69:
9b:a9:79:94:54:a0:26:1c:cb:7a:5e:f8:8f:24:29:
89:3c:bb:96:25:9d:ea:19:ea:b1:ac:7e:21:c8:a6:
93:5d:9c:d5:82:0e:ae:b6:c3:f7:ab:23:e1:46:54:
c4:88:37:2f:b6:0f:5c:62:25:79:c5:e1:17:99:d5:
c7:9d:31:b8:f4:93:18:77:6c:a5:bc:d3:73:68:42:
45:d8:a3:53:9f:97:76:83:69:89:b5:93:0d:c5:db:
f3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:86:98:FD:14:F5:B0:CF:3A:2D:A2:7B:37:01:94:B8:E3:FC:21:10
X509v3 Authority Key Identifier:
keyid:D8:27:B6:84:3E:B7:F6:B9:F0:ED:5F:2F:F7:23:44:A5:2C:04:B4:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Ce2hD639rnw7V8v9yNEpSwEtJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/1AC14F60FC1C11F0AA0D3BE4396F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.240.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:cf:bb:8f:bf:cb:15:43:62:39:c0:e9:cb:1e:48:76:5e:5d:
6f:b3:17:5b:38:94:aa:0c:b8:f8:ec:2a:82:1a:6b:a3:55:0d:
3b:94:22:1b:02:08:2d:5c:99:40:ec:2c:02:c9:89:33:30:4e:
d6:b9:2a:e4:e4:5d:fe:63:a3:a6:c6:bb:0e:69:a1:a4:3f:40:
94:30:90:ac:51:86:fe:92:83:19:80:47:19:3e:19:a5:a2:83:
07:9a:bd:af:f5:9e:a0:66:39:88:bf:67:69:c7:2a:60:8e:0c:
7f:39:72:93:3d:65:57:b6:15:db:f0:e4:6d:b1:df:ca:6f:e2:
8f:e5:7a:45:a2:e2:8f:7f:2d:85:0a:bc:9f:84:56:2a:d9:f7:
5f:98:6f:2d:fc:02:bd:83:e3:47:9f:1d:de:51:a4:cb:c3:58:
1f:3a:6c:a8:34:22:e5:34:1d:db:e1:5d:ff:c1:5a:a4:e0:6d:
1c:0f:91:70:f1:c1:f9:e1:d2:7d:a2:17:f4:28:81:5e:c1:23:
bf:b2:4d:fc:72:59:18:5d:aa:6f:36:ff:b9:ac:82:c2:0e:75:
01:9a:6f:15:86:34:2f:d3:02:54:8b:4b:4e:44:95:73:78:c8:
bb:b3:9f:6c:5a:88:82:2a:55:1a:ba:6b:ee:83:ee:2d:c6:06:
03:e2:24:79
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU4RUMxMTAvBgNVBAUTKEQ4MjdCNjg0M0VCN0Y2QjlGMEVENUYyRkY3MjM0NEE1
MkMwNEI0OUYwHhcNMjYwNzA1MDgzMzQwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRhMTZlMy1kYWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3GrwnR0AHUUY1kbqp4Ag/BwFi45gRCrqdFnnTXl44Gr6EZfjdSNOGg9pdvOk
sVPL33y4unHIgHMg4nbbCG88ndexH/7dsYHwUJjmiQppeLW+ZUvzCyF4+ImJx92+
LGd8XdXsI9huz4V6OmPduvrwNUm+cfRgWUwobzJxmTBlt8gq/kAOPKC4jZBSzTzz
o+6t9P70RQjpP8JKWcjt5jraNisq8WmbqXmUVKAmHMt6XviPJCmJPLuWJZ3qGeqx
rH4hyKaTXZzVgg6utsP3qyPhRlTEiDcvtg9cYiV5xeEXmdXHnTG49JMYd2ylvNNz
aEJF2KNTn5d2g2mJtZMNxdvzywIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNCGmP0U
9bDPOi2iezcBlLjj/CEQMB8GA1UdIwQYMBaAFNgntoQ+t/a58O1fL/cjRKUsBLSf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NThFQy82QkY4NkI4NDY2
MzAxMUYwQjlEQzRFNjRDNEY5QUUwMi8yQ2UyaEQ2Mzlybnc3Vjh2OXlORXBTd0V0
SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzJDZTJoRDYzOXJudzdWOHY5eU5FcFN3RXRKOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzU4RUMvNkJGODZCODQ2NjMwMTFGMEI5REM0RTY0QzRGOUFFMDIvMUFDMTRGNjBG
QzFDMTFGMEFBMEQzQkU0Mzk2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBpWXwMA0GCSqGSIb3DQEBCwUAA4IBAQC0z7uPv8sVQ2I5wOnLHkh2
Xl1vsxdbOJSqDLj47CqCGmujVQ07lCIbAggtXJlA7CwCyYkzME7WuSrk5F3+Y6Om
xrsOaaGkP0CUMJCsUYb+koMZgEcZPhmlooMHmr2v9Z6gZjmIv2dpxypgjgx/OXKT
PWVXthXb8ORtsd/Kb+KP5XpFouKPfy2FCryfhFYq2fdfmG8t/AK9g+NHnx3eUaTL
w1gfOmyoNCLlNB3b4V3/wVqk4G0cD5Fw8cH54dJ9ohf0KIFewSO/sk38clkYXapv
Nv+5rILCDnUBmm8VhjQv0wJUi0tORJVzeMi7s59sWoiCKlUaumvug+4txgYD4iR5
-----END CERTIFICATE-----
Generated at Sat Jul 18 05:22:09 2026 by rpki-client