
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/0A5B62F2BB1911F198A930FE6511F970.roa
File: 0A5B62F2BB1911F198A930FE6511F970.roa (raw, json)
Hash identifier: Ps7Vm5dJyDU9DORsArDqxMwikJ6TEzpTZaTY7eYWNIQ=
Subject key identifier: E3:99:8B:72:BE:E4:F9:B2:D1:72:D4:5D:C0:22:26:27:51:D2:F6:58
Certificate issuer: /CN=A917B520/serialNumber=393EA78E4D93236E5071FB8AFFAD41D62426AA5D
Certificate serial: 0161
Authority key identifier: 39:3E:A7:8E:4D:93:23:6E:50:71:FB:8A:FF:AD:41:D6:24:26:AA:5D
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/0A5B62F2BB1911F198A930FE6511F970.roa
Signing time: Mon 28 Sep 2026 08:46:05 +0000
ROA not before: Mon 28 Sep 2026 08:46:05 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 150436
IP address blocks: 91.110.0.0/17 maxlen: 24
145.223.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.crl
rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 02:14:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353 (0x161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B520, serialNumber=393EA78E4D93236E5071FB8AFFAD41D62426AA5D
Validity
Not Before: Sep 28 08:46:05 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6aba294d-c332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:44:94:8f:c6:ab:51:1f:96:e0:2d:ab:6b:
d6:06:0f:a2:7c:e7:b4:3b:48:04:dd:43:78:bb:16:
c2:a3:2e:c6:7e:c0:b2:42:20:3d:e1:8b:a2:db:e0:
ec:a1:a4:17:49:27:d8:82:a3:07:70:a8:1f:aa:e7:
ba:32:ae:fc:43:b6:43:db:1f:42:61:2b:f9:a6:36:
6e:f2:36:1a:08:2e:97:18:f7:e9:3a:0d:2a:92:da:
d6:f0:f7:12:5b:4e:15:f5:59:3e:20:d3:07:6d:b9:
c9:0f:70:4b:11:dd:9b:aa:dc:d0:d3:85:55:75:f9:
ed:69:68:af:f7:7e:bc:c8:de:4d:5f:d1:5d:4f:97:
02:8d:d1:ce:62:be:8c:b9:f1:6e:b8:3a:ea:7f:6d:
1b:23:cb:70:cd:70:cf:b2:97:fb:09:c0:5c:0e:4d:
5c:13:14:84:ee:a5:23:23:ee:53:5f:b3:a6:93:f7:
b1:ec:68:78:2a:b7:e2:ff:cb:8b:c8:be:f7:c4:fd:
ad:f4:f9:0a:52:e1:9f:cc:c8:72:52:5c:92:31:57:
a0:0b:44:e6:68:59:7d:19:71:bc:c9:87:09:92:3a:
c6:cf:ca:9d:bf:ec:23:d6:6f:da:1b:12:78:1e:47:
93:9c:e0:c6:d2:4e:ed:6b:59:3d:a7:b0:82:52:70:
07:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:99:8B:72:BE:E4:F9:B2:D1:72:D4:5D:C0:22:26:27:51:D2:F6:58
X509v3 Authority Key Identifier:
keyid:39:3E:A7:8E:4D:93:23:6E:50:71:FB:8A:FF:AD:41:D6:24:26:AA:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/0A5B62F2BB1911F198A930FE6511F970.roa
sbgp-ipAddrBlock: critical
IPv4:
91.110.0.0/17
145.223.128.0/18
Signature Algorithm: sha256WithRSAEncryption
28:83:25:bc:54:0d:b9:f9:4d:a8:a3:69:50:89:69:cf:e4:6c:
a1:e5:d7:b0:aa:4a:61:38:a6:f4:9c:d9:c2:9e:1e:f7:68:d9:
01:ca:ee:80:e1:c9:80:a5:06:95:6d:2d:a5:dc:ce:ce:7e:f9:
26:79:22:34:a8:08:ec:c4:a7:d5:a9:01:9d:28:ae:54:ef:8f:
5f:46:d6:36:db:a4:9b:8c:f5:34:58:9d:b3:78:25:70:9d:20:
6b:73:b2:f9:f9:42:52:5d:79:3d:c3:97:e2:74:a3:2a:26:da:
e1:3c:ca:04:20:4e:db:be:b2:b7:a4:68:7b:eb:6b:77:ff:e1:
b9:c7:22:8b:95:77:cf:2b:ed:af:51:41:ff:7d:9e:a3:61:aa:
3d:ab:72:3f:5d:29:b2:ad:2e:a2:81:2d:48:ea:2b:cc:08:61:
72:e5:de:f8:69:1d:1d:73:14:e7:70:ba:5b:d0:01:4c:db:d7:
79:6f:96:8a:60:25:c6:ed:85:8f:c4:ee:bd:9e:36:88:45:24:
96:7b:fd:77:04:38:15:6b:74:1f:76:33:db:2a:19:13:1f:05:
a9:93:96:6a:64:55:d1:94:55:65:80:ef:7d:cd:36:6b:fe:95:
26:60:ab:65:27:45:ab:d0:c7:16:9c:cf:80:80:f0:bb:8f:ac:
13:b5:85:fd
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I1MjAxMTAvBgNVBAUTKDM5M0VBNzhFNEQ5MzIzNkU1MDcxRkI4QUZGQUQ0MUQ2
MjQyNkFBNUQwHhcNMjYwOTI4MDg0NjA1WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJhMjk0ZC1jMzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr3NElI/Gq1EfluAtq2vWBg+ifOe0O0gE3UN4uxbCoy7GfsCyQiA94Yui2+Ds
oaQXSSfYgqMHcKgfque6Mq78Q7ZD2x9CYSv5pjZu8jYaCC6XGPfpOg0qktrW8PcS
W04V9Vk+INMHbbnJD3BLEd2bqtzQ04VVdfntaWiv9368yN5NX9FdT5cCjdHOYr6M
ufFuuDrqf20bI8twzXDPspf7CcBcDk1cExSE7qUjI+5TX7Omk/ex7Gh4Krfi/8uL
yL73xP2t9PkKUuGfzMhyUlySMVegC0TmaFl9GXG8yYcJkjrGz8qdv+wj1m/aGxJ4
HkeTnODG0k7ta1k9p7CCUnAHqwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFOOZi3K+
5Pmy0XLUXcAiJidR0vZYMB8GA1UdIwQYMBaAFDk+p45NkyNuUHH7iv+tQdYkJqpd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC80Q0ZDMDhEQUI3
NkMxMUVGQjg3NDI3NkVDNEY5QUUwMi9PVDZuamsyVEkyNVFjZnVLXzYxQjFpUW1x
bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL09UNm5qazJUSTI1UWNmdUtfNjFCMWlRbXFsMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0I1MjAvNENGQzA4REFCNzZDMTFFRkI4NzQyNzZFQzRGOUFFMDIvMEE1QjYyRjJC
QjE5MTFGMTk4QTkzMEZFNjUxMUY5NzAucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQHW24AAwQGkd+AMA0GCSqGSIb3DQEBCwUAA4IBAQAogyW8VA25+U2o
o2lQiWnP5Gyh5dewqkphOKb0nNnCnh73aNkByu6A4cmApQaVbS2l3M7OfvkmeSI0
qAjsxKfVqQGdKK5U749fRtY226SbjPU0WJ2zeCVwnSBrc7L5+UJSXXk9w5fidKMq
JtrhPMoEIE7bvrK3pGh762t3/+G5xyKLlXfPK+2vUUH/fZ6jYao9q3I/XSmyrS6i
gS1I6ivMCGFy5d74aR0dcxTncLpb0AFM29d5b5aKYCXG7YWPxO69njaIRSSWe/13
BDgVa3QfdjPbKhkTHwWpk5ZqZFXRlFVlgO99zTZr/pUmYKtlJ0Wr0McWnM+AgPC7
j6wTtYX9
-----END CERTIFICATE-----
Generated at Tue Oct 13 01:16:44 2026 by rpki-client