
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/B7E86B40595311EC9ECF510BC4F9AE02.roa
File: B7E86B40595311EC9ECF510BC4F9AE02.roa (raw, json)
Hash identifier: 1croOPrDDSi15gJy9kMOgmxedBHQdQKzmQbD3ktXwsY=
Subject key identifier: D8:39:40:26:71:C1:50:B9:DD:7E:E8:53:0C:A2:E8:BD:52:EC:C7:E3
Certificate issuer: /CN=A919C47E/serialNumber=E79E9B5212637E33CA5DCB6176909CE19621BA64
Certificate serial: 055F
Authority key identifier: E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/B7E86B40595311EC9ECF510BC4F9AE02.roa
Signing time: Tue 06 Oct 2026 17:32:42 +0000
ROA not before: Tue 06 Oct 2026 17:32:42 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 138398
IP address blocks: 91.208.208.0/24 maxlen: 24
91.208.228.0/24 maxlen: 24
91.208.230.0/24 maxlen: 24
91.208.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.crl
rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 16:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1375 (0x55f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C47E, serialNumber=E79E9B5212637E33CA5DCB6176909CE19621BA64
Validity
Not Before: Oct 6 17:32:42 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac530b9-cad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4b:3e:e7:69:a4:c2:b2:8b:79:ab:56:39:44:
89:31:5b:69:ef:7b:a2:a4:ae:ec:fa:8c:ea:f3:8b:
1e:e0:34:df:bc:b9:10:4b:18:b8:8a:24:b6:38:2e:
49:dc:40:7c:99:9d:a2:6c:a4:dd:61:79:f5:21:0a:
1c:a7:ae:e6:88:8b:9f:9d:75:78:e8:18:33:53:86:
97:3b:84:50:76:37:31:31:b3:83:c6:68:53:34:43:
88:99:ea:03:7e:b7:57:b8:2e:d8:f6:55:3f:1c:ad:
2e:35:c4:94:48:f6:40:ce:23:42:87:69:7c:59:5a:
08:ea:38:2a:04:c9:46:63:6d:b0:69:29:b9:13:f5:
b9:33:92:63:ae:b6:16:96:dd:ce:7f:c9:78:25:45:
7d:f8:49:e3:6a:44:57:98:cb:27:f1:dc:54:1d:0e:
1f:50:3d:0a:8b:44:3f:ab:3f:3b:42:91:71:70:b5:
c8:af:38:bc:d6:d4:37:c4:55:69:94:a4:23:74:9e:
b4:6f:c5:17:3e:0e:22:84:69:52:bb:05:99:59:f6:
29:57:d7:4e:4a:a6:e0:74:34:f5:49:c1:05:53:62:
41:cf:74:60:ce:86:9f:03:0e:63:17:c6:9c:2f:3e:
7c:b3:df:50:47:99:19:f9:5b:49:4d:e0:14:22:c1:
03:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:39:40:26:71:C1:50:B9:DD:7E:E8:53:0C:A2:E8:BD:52:EC:C7:E3
X509v3 Authority Key Identifier:
keyid:E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/B7E86B40595311EC9ECF510BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
91.208.208.0/24
91.208.228.0/24
91.208.230.0/24
91.208.233.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:46:a2:8c:27:61:aa:14:11:70:dd:c1:45:2d:c9:74:9e:a7:
6c:fa:e9:e8:62:d6:c6:3e:23:ea:be:0e:60:d0:af:e1:b5:d9:
98:75:77:af:1f:38:2f:3f:7b:82:bf:aa:f8:91:e4:f4:0c:10:
80:72:9e:3a:e4:ab:66:75:9d:b1:a9:4c:7f:13:0f:5c:0b:ac:
b9:6d:66:f9:7b:0e:1c:0b:36:f0:2e:e7:1b:d1:76:a6:54:ce:
eb:9b:3b:3f:25:bc:a0:52:4a:3d:3f:55:41:16:19:0a:a4:16:
54:20:71:e9:09:b6:ae:17:34:a4:17:6b:22:38:db:b4:94:03:
d3:72:88:4a:47:d5:2b:72:ff:5a:98:77:00:1b:c9:a2:3e:7c:
34:36:69:7f:6a:4d:51:13:a9:93:a8:01:64:68:6e:9b:bc:2f:
66:c4:6d:80:1a:4e:ed:61:93:76:6c:c0:00:7e:c0:52:82:bd:
aa:cd:99:ca:24:8b:97:44:c1:bb:93:58:5f:10:3c:b9:e1:c2:
df:92:f9:d3:c5:65:e6:4e:19:ad:be:c7:ea:2f:71:8e:c2:72:
e7:84:7c:d6:22:27:10:d8:6b:ac:b5:03:c8:b4:ac:42:74:af:
7d:26:75:ab:b4:f4:0c:3d:af:11:88:94:c9:b6:57:31:8e:b2:
7b:13:91:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:52:55 2026 by rpki-client