
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/1ECF684E387B11F1BDE8C228B8833773.roa
File: 1ECF684E387B11F1BDE8C228B8833773.roa (raw, json)
Hash identifier: wpIG5Mf53y4bmJfHAaok3Ne4FnPip0P/QZYb5ljnS2k=
Subject key identifier: 4E:56:5A:9D:D8:11:7D:59:7A:3C:CA:B1:D8:0E:B1:99:09:B4:23:D4
Certificate issuer: /CN=A91A4B9D/serialNumber=3C388E29FAA1A1FEEA38979F206F4668ADA8C89E
Certificate serial: 2C
Authority key identifier: 3C:38:8E:29:FA:A1:A1:FE:EA:38:97:9F:20:6F:46:68:AD:A8:C8:9E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDiOKfqhof7qOJefIG9GaK2oyJ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/1ECF684E387B11F1BDE8C228B8833773.roa
Signing time: Tue 16 Jun 2026 15:13:30 +0000
ROA not before: Tue 16 Jun 2026 15:13:29 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 133159
IP address blocks: 66.226.144.0/20 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.crl
rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDiOKfqhof7qOJefIG9GaK2oyJ4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 15:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B9D, serialNumber=3C388E29FAA1A1FEEA38979F206F4668ADA8C89E
Validity
Not Before: Jun 16 15:13:29 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a316819-7be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e5:1c:ec:a2:1b:f8:d0:6d:2f:db:f6:49:43:
7b:53:ca:39:1d:04:61:97:0e:7f:c2:c1:74:4a:ac:
76:fc:d9:53:f1:3e:de:05:60:64:a8:90:64:92:47:
0c:ff:d8:5d:6d:e9:e1:72:4a:bf:c2:4b:ff:bb:02:
03:4e:8d:2d:07:2f:cc:6a:8e:a2:1f:61:00:ab:6c:
8a:53:27:af:8b:5e:d2:b9:1c:22:33:2b:75:fb:92:
1c:d6:9d:67:d0:cd:cc:f8:85:07:a9:db:5f:bc:9a:
81:be:7d:e6:e3:d0:f6:e6:8d:2b:e0:8d:05:bc:d7:
ab:c0:9a:19:87:bd:f1:c5:b7:72:15:85:35:cd:42:
5c:21:bd:8b:fe:fa:fe:94:52:ae:7a:7c:e4:16:a0:
06:3c:72:26:65:f0:b7:4a:d9:3d:41:65:5f:50:ef:
25:c6:61:33:aa:a5:7f:67:10:50:44:8d:c6:96:31:
75:46:91:e7:6f:4c:15:44:47:06:55:8f:58:9a:15:
d5:92:97:37:6f:20:e6:85:5e:a3:a5:a1:dc:31:b5:
eb:6f:62:e5:18:b5:97:25:79:ea:66:e7:6b:8a:c0:
c1:5f:57:6b:c7:5f:26:e9:53:11:8e:39:fb:9e:91:
65:08:25:85:96:67:30:cd:48:57:50:9e:e4:94:4c:
20:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:56:5A:9D:D8:11:7D:59:7A:3C:CA:B1:D8:0E:B1:99:09:B4:23:D4
X509v3 Authority Key Identifier:
keyid:3C:38:8E:29:FA:A1:A1:FE:EA:38:97:9F:20:6F:46:68:AD:A8:C8:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDiOKfqhof7qOJefIG9GaK2oyJ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/1ECF684E387B11F1BDE8C228B8833773.roa
sbgp-ipAddrBlock: critical
IPv4:
66.226.144.0/20
Signature Algorithm: sha256WithRSAEncryption
ac:cf:17:cd:c5:c4:ee:3e:46:16:52:2f:25:d7:7d:ba:04:9d:
9f:38:80:c9:54:bd:e1:16:50:12:67:7b:84:4d:36:1e:dd:81:
b1:74:93:0f:62:ab:3c:60:bf:92:8e:e7:c9:6d:3d:04:4f:86:
31:bc:c0:cc:12:09:9d:e8:56:10:20:ec:f7:a4:31:55:eb:d6:
d7:b1:52:fa:e9:3d:ec:b5:38:76:af:f8:7e:57:9b:76:aa:38:
be:26:99:86:34:37:58:2a:f6:10:02:50:6d:62:f2:1d:08:c1:
63:40:90:7e:bc:89:94:97:b7:c5:88:7f:86:e6:4c:ca:e3:21:
b5:07:ea:78:5c:8a:fd:00:9c:c8:35:97:59:c6:28:5f:6c:be:
8b:05:2c:58:8d:c7:1a:0e:8d:db:07:c2:4b:3f:8c:2e:eb:51:
40:9f:10:06:e6:52:d1:0a:d6:a3:f4:8c:d5:62:51:78:f3:25:
0b:df:d9:cd:04:fb:db:76:56:8d:9f:76:a9:82:cb:6b:aa:a6:
4a:5b:b3:2a:b5:bf:6e:36:e7:d3:0e:46:96:18:fa:92:d1:5c:
16:fc:02:b5:0c:4a:f9:e6:a0:ed:10:21:be:9d:35:fe:4f:68:
ef:2c:e3:f0:e0:37:77:00:db:72:98:68:1d:93:8c:a3:ae:7a:
46:47:5a:4f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 18 04:32:21 2026 by rpki-client