
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/0A86FD7C95E011F0B2B5CE77C4F9AE02.roa
File: 0A86FD7C95E011F0B2B5CE77C4F9AE02.roa (raw, json)
Hash identifier: nIFqZcYQzvUw9rWWmUdOcQmv9gsLxHiy5GBW+wQ7RnQ=
Subject key identifier: 22:F0:6E:4B:01:76:C2:BC:36:88:89:DD:88:F1:7A:FD:54:F5:3F:6A
Certificate issuer: /CN=A91951AF/serialNumber=18ECE629EEF3B6A2696EBAB34B3FB02EF8A8B887
Certificate serial: D0
Authority key identifier: 18:EC:E6:29:EE:F3:B6:A2:69:6E:BA:B3:4B:3F:B0:2E:F8:A8:B8:87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/0A86FD7C95E011F0B2B5CE77C4F9AE02.roa
Signing time: Sat 03 Oct 2026 07:55:51 +0000
ROA not before: Sat 03 Oct 2026 07:55:51 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 9829
IP address blocks: 45.117.84.0/24 maxlen: 24
45.117.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.crl
rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 07:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208 (0xd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91951AF, serialNumber=18ECE629EEF3B6A2696EBAB34B3FB02EF8A8B887
Validity
Not Before: Oct 3 07:55:51 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ac0b507-dde7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:35:d8:06:12:a7:2d:a0:c1:ca:05:e3:fb:12:
d9:3d:c9:3d:4f:ac:90:11:e1:11:24:59:dd:ea:91:
69:ef:1a:c9:5e:d1:c2:be:b8:24:c4:b9:5e:06:a8:
50:13:7c:b1:66:8d:6f:07:f5:eb:a5:17:3e:23:5a:
53:b1:51:4c:7e:75:70:d3:6f:78:5c:61:61:67:ec:
69:59:7f:f1:94:21:18:87:27:13:db:5e:72:e2:8e:
a7:f4:e7:b4:c8:18:63:53:9d:02:6c:90:f7:94:09:
65:a2:a5:bf:3a:a7:c9:31:e0:c7:43:0e:ff:cd:eb:
7d:f3:1f:62:78:ef:6b:0f:f0:16:24:80:d7:fc:fe:
4a:d5:6f:42:5f:56:e8:b8:f6:e5:24:79:c6:dd:32:
27:e9:5d:f9:2c:55:ed:62:f9:80:01:11:2c:ab:1b:
0f:a8:f4:02:fb:3e:64:0d:e4:d6:84:ca:a1:5c:94:
0f:ac:3d:cb:2c:70:17:29:1d:77:45:ce:42:0f:cb:
8b:2d:30:74:21:19:f0:74:81:b3:63:31:bf:d3:51:
e3:aa:60:01:46:14:b0:53:3e:ce:23:90:36:18:b1:
cd:0b:96:15:dc:ba:e4:03:c1:11:87:aa:72:d5:3a:
5b:d0:2c:3f:4e:20:50:2e:a0:fc:da:ee:01:f2:b7:
d7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F0:6E:4B:01:76:C2:BC:36:88:89:DD:88:F1:7A:FD:54:F5:3F:6A
X509v3 Authority Key Identifier:
keyid:18:EC:E6:29:EE:F3:B6:A2:69:6E:BA:B3:4B:3F:B0:2E:F8:A8:B8:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/0A86FD7C95E011F0B2B5CE77C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.117.84.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:9c:3d:53:fa:99:39:26:90:bd:29:a0:ca:db:7f:0d:0d:bc:
da:8b:e3:06:54:08:c4:f7:fb:fa:cd:d9:35:fb:07:25:12:62:
fb:0a:5f:d6:87:0c:00:2c:63:6a:3d:d1:c0:44:04:ff:df:45:
0b:15:5c:51:1e:11:cb:05:c1:5e:ba:32:e9:54:75:96:f8:e1:
ff:0e:de:aa:98:19:56:3b:21:05:23:f9:99:7f:46:81:42:99:
7a:2b:48:43:b3:ab:55:38:cd:e8:57:41:8c:84:3c:6d:0a:a0:
ba:d5:8e:eb:14:08:7e:57:bb:c9:26:1d:e5:cd:87:49:4b:a4:
dc:06:48:67:bc:1e:97:70:2b:fb:35:b2:91:e7:5a:7c:d0:39:
b2:8a:0a:c9:62:cd:d4:d5:34:e9:d6:72:d8:6a:62:e6:8a:95:
3b:d5:a4:57:ce:ff:d7:82:21:3d:da:19:65:05:30:e3:b5:45:
37:a3:d4:61:9c:1c:78:95:1f:d5:4e:40:37:a9:e3:de:e8:8e:
95:bf:e0:41:c5:90:f5:b8:20:3d:12:92:ae:6a:18:4b:5f:97:
b4:55:fa:bc:5c:de:0c:b9:70:80:4f:a7:30:fd:0b:dd:3f:c5:
70:fe:93:e0:42:71:f9:d6:97:ad:ea:3a:ec:ea:0b:60:0a:81:
4d:60:85:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:51:04 2026 by rpki-client