
$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/86ED876641FA11F1981D4479BF833773.roa
File: 86ED876641FA11F1981D4479BF833773.roa (raw, json)
Hash identifier: I9P9Zja/wzTodju+PZpxgtcdIbcxcs2bbGhuD/szdOg=
Subject key identifier: 4D:C9:7B:44:C5:E6:B2:89:E9:FD:4D:6A:73:68:83:D4:83:31:29:85
Certificate issuer: /CN=A91964B3/serialNumber=E71F870E72BD226E7BFA3AAB1A918AB462326C5F
Certificate serial: 0B
Authority key identifier: E7:1F:87:0E:72:BD:22:6E:7B:FA:3A:AB:1A:91:8A:B4:62:32:6C:5F
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/5x-HDnK9Im57-jqrGpGKtGIybF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/86ED876641FA11F1981D4479BF833773.roa
Signing time: Mon 27 Apr 2026 05:33:42 +0000
ROA not before: Mon 27 Apr 2026 05:33:42 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 9498
IP address blocks: 177.177.112.0/20 maxlen: 24
186.242.160.0/19 maxlen: 24
186.244.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.crl
rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/5x-HDnK9Im57-jqrGpGKtGIybF8.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 05:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91964B3, serialNumber=E71F870E72BD226E7BFA3AAB1A918AB462326C5F
Validity
Not Before: Apr 27 05:33:42 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69eef536-a3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:10:dc:7c:4c:d3:42:2e:db:f2:79:bd:b0:b4:
a9:19:5f:99:9b:56:62:4e:d9:e0:c6:ba:d2:72:2c:
90:89:0c:0f:f0:37:f5:2a:df:95:5c:5a:5e:86:6d:
2f:e2:ac:c2:a8:a6:4d:7c:67:97:0e:88:20:65:73:
2b:a5:a0:72:1e:40:ca:28:cb:37:f9:19:39:32:f0:
b0:21:d3:a8:6e:61:fa:a4:ab:ef:5a:0f:f3:3d:4b:
b8:c7:58:fd:61:83:21:a3:a2:1c:3b:af:f0:33:3d:
b2:c5:2b:1a:79:7e:94:40:c5:fa:b6:58:3a:ed:34:
23:f2:8e:3f:11:a8:88:58:53:8f:c7:b9:cb:58:cc:
4e:72:2f:2a:2f:87:7a:47:89:78:8e:56:2b:20:54:
58:e2:15:9d:0f:0a:19:eb:7a:58:18:97:37:cf:c0:
fe:16:db:a7:61:57:2e:16:60:9a:cc:e3:7c:cc:76:
51:78:bd:89:79:41:43:86:a9:d2:7a:a8:3e:a6:07:
f8:c7:07:fb:ae:87:31:66:10:d3:36:b6:9d:75:9b:
95:d7:e7:e0:f8:7a:70:c4:31:ae:97:b1:6a:8b:2d:
99:b5:8b:16:98:7c:fe:8b:cc:35:43:ab:4d:42:a8:
75:c5:c9:f1:68:75:69:c0:5d:31:12:48:10:b0:5c:
ab:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C9:7B:44:C5:E6:B2:89:E9:FD:4D:6A:73:68:83:D4:83:31:29:85
X509v3 Authority Key Identifier:
keyid:E7:1F:87:0E:72:BD:22:6E:7B:FA:3A:AB:1A:91:8A:B4:62:32:6C:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/5x-HDnK9Im57-jqrGpGKtGIybF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/86ED876641FA11F1981D4479BF833773.roa
sbgp-ipAddrBlock: critical
IPv4:
177.177.112.0/20
186.242.160.0/19
186.244.160.0/19
Signature Algorithm: sha256WithRSAEncryption
88:ac:90:e0:53:74:d1:c9:f8:f8:b4:83:c5:38:f3:44:fa:7f:
e8:50:f1:33:53:ad:c3:62:b1:ba:9f:a7:05:67:c4:a3:8f:6b:
c1:25:ca:fc:76:8a:d3:1d:81:44:d3:52:d2:22:0b:f6:34:09:
51:56:eb:c8:62:b4:80:70:26:53:d8:50:a6:ba:6a:c2:43:ca:
6d:be:84:88:a2:7e:25:a9:04:8f:cf:9a:ad:05:ae:64:20:f6:
89:c0:b7:25:f8:b9:6b:4a:fa:1f:a6:4f:1d:2e:0a:c9:e1:18:
4b:76:18:6e:f7:53:fd:9d:a7:8f:94:68:e1:cf:e9:e7:0c:53:
bf:81:e5:3a:d1:c8:59:3f:c1:2c:c2:5d:c1:df:4f:4e:b0:98:
91:34:ff:6a:35:1c:26:b4:da:10:3c:7d:62:12:7d:f5:2d:43:
6b:f7:a9:2a:e2:fd:86:f0:4e:46:59:c0:b4:31:2d:12:2b:3a:
15:58:c0:2f:35:72:ec:c2:89:b1:80:44:af:1f:e3:68:6a:e5:
22:f6:5f:57:65:4c:33:4f:0c:b0:1e:fe:3a:0e:c7:ff:cc:e0:
a9:1a:47:ff:84:3f:00:c4:aa:75:27:00:a2:40:d2:d4:ca:e9:
0d:f3:a1:7e:c3:ce:a2:81:dc:62:eb:5f:d2:90:f9:05:bd:5e:
39:73:af:73
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
NjRCMzExMC8GA1UEBRMoRTcxRjg3MEU3MkJEMjI2RTdCRkEzQUFCMUE5MThBQjQ2
MjMyNkM1RjAeFw0yNjA0MjcwNTMzNDJaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5ZWVmNTM2LWEzYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDXENx8TNNCLtvyeb2wtKkZX5mbVmJO2eDGutJyLJCJDA/wN/Uq35VcWl6GbS/i
rMKopk18Z5cOiCBlcyuloHIeQMooyzf5GTky8LAh06huYfqkq+9aD/M9S7jHWP1h
gyGjohw7r/AzPbLFKxp5fpRAxfq2WDrtNCPyjj8RqIhYU4/HuctYzE5yLyovh3pH
iXiOVisgVFjiFZ0PChnrelgYlzfPwP4W26dhVy4WYJrM43zMdlF4vYl5QUOGqdJ6
qD6mB/jHB/uuhzFmENM2tp11m5XX5+D4enDEMa6XsWqLLZm1ixaYfP6LzDVDq01C
qHXFyfFodWnAXTESSBCwXKuXAgMBAAGjggJsMIICaDAdBgNVHQ4EFgQUTcl7RMXm
sonp/U1qc2iD1IMxKYUwHwYDVR0jBBgwFoAU5x+HDnK9Im57+jqrGpGKtGIybF8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2NEIzLzU1RTE1NThFM0ZF
OTExRjE4REIyQUYwOTdFRUU1MjhFLzV4LUhEbks5SW01Ny1qcXJHcEdLdEdJeWJG
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG
RDFGRjIvNXgtSERuSzlJbTU3LWpxckdwR0t0R0l5YkY4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NjRCMy81NUUxNTU4RTNGRTkxMUYxOERCMkFGMDk3RUVFNTI4RS84NkVEODc2NjQx
RkExMUYxOTgxRDQ0NzlCRjgzMzc3My5yb2EwKwYIKwYBBQUHAQcBAf8EHDAaMBgE
AgABMBIDBASxsXADBAW68qADBAW69KAwDQYJKoZIhvcNAQELBQADggEBAIiskOBT
dNHJ+Pi0g8U480T6f+hQ8TNTrcNisbqfpwVnxKOPa8Elyvx2itMdgUTTUtIiC/Y0
CVFW68hitIBwJlPYUKa6asJDym2+hIiifiWpBI/Pmq0FrmQg9onAtyX4uWtK+h+m
Tx0uCsnhGEt2GG73U/2dp4+UaOHP6ecMU7+B5TrRyFk/wSzCXcHfT06wmJE0/2o1
HCa02hA8fWISffUtQ2v3qSri/YbwTkZZwLQxLRIrOhVYwC81cuzCibGARK8f42hq
5SL2X1dlTDNPDLAe/joOx//M4KkaR/+EPwDEqnUnAKJA0tTK6Q3zoX7DzqKB3GLr
X9KQ+QW9Xjlzr3M=
-----END CERTIFICATE-----
Generated at Tue Apr 28 00:47:54 2026 by rpki-client