
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/A5E4936C536111F1A0C5D0B89C833773.roa
File: A5E4936C536111F1A0C5D0B89C833773.roa (raw, json)
Hash identifier: Cqf9EBDdKuPCoFj/sxtnkgfHJ9m3cj9AlwHVQnt00tw=
Subject key identifier: 2F:D1:F8:78:47:FF:49:B3:E2:B0:F1:8E:F5:46:42:7C:6D:25:18:39
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 2388
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/A5E4936C536111F1A0C5D0B89C833773.roa
Signing time: Fri 02 Oct 2026 15:17:24 +0000
ROA not before: Fri 02 Oct 2026 15:17:24 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 142025
IP address blocks: 138.252.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 14:34:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9096 (0x2388)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Oct 2 15:17:24 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcb04-850b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b6:dc:20:b6:df:f6:b1:b0:7e:56:75:c8:67:
f0:99:d0:bd:cd:d0:8c:43:e7:04:cc:24:f3:d9:5c:
d3:8a:9e:f1:d6:1a:cb:90:85:6d:fa:69:a6:0b:51:
ff:54:ae:ba:29:e0:94:f2:05:60:0a:71:18:13:25:
2e:d0:90:b6:61:58:e6:a7:16:15:54:80:05:13:3b:
cd:3a:79:ca:c9:c2:a4:d5:55:7d:67:43:97:9f:cb:
53:fb:ef:88:cd:3e:2b:55:23:de:49:17:a5:f6:53:
e6:08:14:a7:8f:20:df:c7:2a:d9:e4:16:01:0d:3a:
5a:e4:2b:cf:7c:65:39:ed:7f:eb:b1:99:e6:6f:15:
03:e9:32:4b:7a:8b:9f:ef:81:36:b8:bd:ec:29:6a:
18:34:53:74:43:37:05:92:09:2c:8f:be:a5:c4:5e:
74:94:3d:9d:c8:de:2d:c5:07:b2:44:c6:aa:49:d1:
84:88:19:e6:37:05:2e:bf:82:d5:a4:4f:da:2a:4b:
ef:f5:c6:f7:57:cd:8a:69:31:60:54:9f:88:b5:57:
7e:64:d4:52:cd:ec:92:0c:72:88:09:63:f0:58:32:
4e:1f:47:ae:e7:d4:48:ee:56:06:53:d8:28:61:f6:
fa:e4:29:7d:f5:d6:63:25:48:b2:2c:5b:90:19:e8:
31:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D1:F8:78:47:FF:49:B3:E2:B0:F1:8E:F5:46:42:7C:6D:25:18:39
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/A5E4936C536111F1A0C5D0B89C833773.roa
sbgp-ipAddrBlock: critical
IPv4:
138.252.142.0/23
Signature Algorithm: sha256WithRSAEncryption
56:26:2c:5f:38:3d:5c:60:06:ec:18:a9:af:22:4c:88:28:b4:
58:59:d3:3d:42:a9:78:c0:6c:75:e0:6d:e4:ca:c0:d2:43:20:
6a:36:16:17:d8:b3:9b:8b:37:58:56:9d:93:a8:e8:35:9d:9d:
91:09:6c:9b:95:70:c8:04:6c:04:2b:f4:90:9b:1e:ec:27:d4:
04:f8:5f:e0:e4:33:c0:51:3d:82:58:15:72:57:61:27:ee:27:
7b:0f:2a:0c:fd:b6:d5:c7:ba:9e:f8:fc:94:f2:8d:ad:5a:29:
c5:d5:c2:8e:49:89:fc:9c:f2:77:a6:4d:50:ea:fc:d2:4a:cf:
12:9c:a2:ba:98:23:16:6b:da:0a:10:3b:59:8d:75:44:fa:b8:
48:cc:ea:f5:3b:3e:d4:c1:11:59:44:9e:50:1c:ca:bb:ef:fe:
f0:26:e5:90:ba:3c:e7:d9:3d:1c:7a:ab:7f:e6:e0:a3:f6:4f:
ab:32:64:5d:6a:80:29:ba:91:e6:c9:1c:e5:66:c9:67:be:27:
08:5e:e3:ba:72:a0:29:ab:3b:fa:c8:02:c4:ce:f7:3c:1a:6e:
38:b5:d4:7c:e8:3f:f3:26:48:3b:b3:80:47:ff:f8:68:5a:b3:
fb:2d:b1:87:47:1a:ca:7f:e2:fb:b5:af:01:42:f2:27:e7:b8:
68:84:68:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 05:31:28 2026 by rpki-client