
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/81BEA598A33611F188644B746211F970.roa
File: 81BEA598A33611F188644B746211F970.roa (raw, json)
Hash identifier: 7p7hPXX22tD9ADKMV8Jxjv6Fwd8VTeYKGo4DKCVKza4=
Subject key identifier: 7A:B6:D9:74:D9:75:24:04:ED:E9:69:6D:F1:00:74:51:2F:BB:23:D6
Certificate issuer: /CN=A91883D3/serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
Certificate serial: 01A9
Authority key identifier: EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/81BEA598A33611F188644B746211F970.roa
Signing time: Fri 28 Aug 2026 23:16:33 +0000
ROA not before: Fri 28 Aug 2026 23:16:32 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 16509
IP address blocks: 64.251.192.0/21 maxlen: 24
64.251.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl
rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 04:53:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425 (0x1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91883D3, serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
Validity
Not Before: Aug 28 23:16:32 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6a9216d0-aba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:b1:fc:8f:63:44:7d:53:61:66:09:fe:51:
4e:08:ae:69:47:05:90:fe:7e:ae:b2:0f:1d:72:e1:
99:43:11:17:2f:7b:5c:05:54:f6:6c:34:77:e6:69:
62:fc:c0:2a:79:69:36:76:96:91:58:8a:0c:20:dd:
cf:38:b6:f9:09:b9:94:3f:56:04:33:39:e9:eb:3e:
63:07:6a:53:40:c9:df:04:b9:a7:ff:bf:76:b5:70:
64:74:83:13:db:4e:71:d6:b2:94:aa:7b:ce:d0:7b:
b0:23:d0:59:ca:83:10:d1:2e:3c:69:dd:6b:e7:08:
5a:54:68:fd:76:d5:8d:07:93:1f:2a:52:80:ee:cf:
e8:43:67:aa:d9:64:c4:b8:77:ee:ac:a6:92:99:63:
0f:d1:b6:0b:24:db:40:ad:23:07:33:48:63:b4:fd:
ef:96:30:e4:06:b5:92:74:46:f2:16:57:a6:b3:7d:
bb:92:90:a2:9a:ab:f4:53:27:86:3f:65:ef:db:53:
d3:68:12:8c:15:2f:23:3a:11:90:c3:60:8b:cd:ea:
d9:70:d2:a0:ca:62:59:a1:55:88:cc:b7:12:d5:56:
64:a1:c4:e5:e3:0b:74:3f:2a:de:c1:c0:87:82:af:
24:5e:f0:73:77:15:17:50:37:c4:9c:8d:07:1c:fb:
5b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B6:D9:74:D9:75:24:04:ED:E9:69:6D:F1:00:74:51:2F:BB:23:D6
X509v3 Authority Key Identifier:
keyid:EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/81BEA598A33611F188644B746211F970.roa
sbgp-ipAddrBlock: critical
IPv4:
64.251.192.0/21
64.251.204.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:63:e6:a5:3a:93:42:32:58:3e:ee:e2:66:94:b1:ea:42:f3:
a7:f8:37:35:d6:92:76:94:bc:ed:81:b9:7c:c8:65:81:a1:ff:
bf:22:78:8d:b4:1a:fd:94:a9:40:37:50:1f:f7:3e:ee:f6:20:
3c:b4:61:4f:5a:a8:94:17:15:79:dc:c0:29:b7:2c:7d:e1:be:
bd:f5:7e:19:9b:2e:55:a8:a8:0a:b3:1d:2b:1d:e3:2c:03:5f:
40:af:45:81:0c:46:c4:b7:c4:03:3a:d4:c6:5a:61:7f:d7:36:
f0:23:2e:42:eb:cc:7a:df:a9:46:2b:a2:4f:ad:38:7f:81:b2:
19:37:40:b7:2d:4b:86:c7:25:6d:10:c2:2d:3b:dd:ac:0d:ba:
1c:90:fb:8b:24:b0:83:11:a7:da:74:ff:46:96:a0:2c:4a:e4:
9f:c0:53:3f:6a:78:0c:de:f0:28:34:cc:f7:dd:8a:5c:e1:25:
31:7e:06:8e:45:6b:5c:f5:d2:6c:df:5a:5a:af:e2:8c:f9:01:
19:f1:7b:21:f4:ac:0e:47:1b:73:f3:20:fb:c6:90:cc:93:49:
14:90:4b:78:84:24:e0:30:b3:ba:06:28:7e:8d:f6:b0:d0:3f:
b1:3d:d8:28:a8:d5:2f:e9:36:7d:f6:8e:c6:6e:ff:1e:4d:07:
6d:1b:5d:37
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODgzRDMxMTAvBgNVBAUTKEVCM0M4RjI0QkJBREM5NDEzNDg3MUQ2RTVGRDBCN0M1
OEI0OUQzQzkwHhcNMjYwODI4MjMxNjMyWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTkyMTZkMC1hYmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsoSx/I9jRH1TYWYJ/lFOCK5pRwWQ/n6usg8dcuGZQxEXL3tcBVT2bDR35mli
/MAqeWk2dpaRWIoMIN3POLb5CbmUP1YEMznp6z5jB2pTQMnfBLmn/792tXBkdIMT
205x1rKUqnvO0HuwI9BZyoMQ0S48ad1r5whaVGj9dtWNB5MfKlKA7s/oQ2eq2WTE
uHfurKaSmWMP0bYLJNtArSMHM0hjtP3vljDkBrWSdEbyFlems327kpCimqv0UyeG
P2Xv21PTaBKMFS8jOhGQw2CLzerZcNKgymJZoVWIzLcS1VZkocTl4wt0PyrewcCH
gq8kXvBzdxUXUDfEnI0HHPtbQQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFHq22XTZ
dSQE7elpbfEAdFEvuyPWMB8GA1UdIwQYMBaAFOs8jyS7rclBNIcdbl/Qt8WLSdPJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODNEMy84RDAzRUYzNjVF
MzYxMUVGQUM5MkQzMTRDNEY5QUUwMi82enlQSkx1dHlVRTBoeDF1WDlDM3hZdEow
OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzZ6eVBKTHV0eVVFMGh4MXVYOUMzeFl0SjA4ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODgzRDMvOEQwM0VGMzY1RTM2MTFFRkFDOTJEMzE0QzRGOUFFMDIvODFCRUE1OThB
MzM2MTFGMTg4NjQ0Qjc0NjIxMUY5NzAucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQDQPvAAwQCQPvMMA0GCSqGSIb3DQEBCwUAA4IBAQCKY+alOpNCMlg+
7uJmlLHqQvOn+Dc11pJ2lLztgbl8yGWBof+/IniNtBr9lKlAN1Af9z7u9iA8tGFP
WqiUFxV53MAptyx94b699X4Zmy5VqKgKsx0rHeMsA19Ar0WBDEbEt8QDOtTGWmF/
1zbwIy5C68x636lGK6JPrTh/gbIZN0C3LUuGxyVtEMItO92sDbockPuLJLCDEafa
dP9GlqAsSuSfwFM/angM3vAoNMz33Ypc4SUxfgaORWtc9dJs31par+KM+QEZ8Xsh
9KwORxtz8yD7xpDMk0kUkEt4hCTgMLO6Bih+jfaw0D+xPdgoqNUv6TZ99o7Gbv8e
TQdtG103
-----END CERTIFICATE-----
Generated at Thu Oct 8 22:37:42 2026 by rpki-client