
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/76CBE6E64EA911EC9C441B57C4F9AE02.roa
File: 76CBE6E64EA911EC9C441B57C4F9AE02.roa (raw, json)
Hash identifier: ywVwohGRPq8nXpfC6BCKShasj6R0l2pUrEdM+7+1e6c=
Subject key identifier: 45:8D:55:D4:18:10:28:09:22:A9:77:9E:BC:CC:51:DE:7A:2C:BB:40
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6F13
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/76CBE6E64EA911EC9C441B57C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:36:00 +0000
ROA not before: Fri 02 Oct 2026 15:36:00 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 45554
IP address blocks: 202.47.142.0/24 maxlen: 24
2001:dc8:6000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 10:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28435 (0x6f13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:36:00 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcf5f-7ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1d:e6:63:01:4b:f3:76:42:60:76:8b:36:a2:
05:91:61:37:66:eb:26:2a:66:94:26:e3:30:01:6e:
1c:22:ed:3e:90:09:68:b0:b1:63:0c:e3:fa:37:c5:
f5:17:7d:c0:49:ad:1d:94:4a:da:5b:aa:8f:18:a7:
f5:96:ac:4c:1d:38:e0:dc:2b:41:28:e6:73:c3:69:
0e:bb:40:80:f6:29:7b:03:d6:40:25:39:d6:fe:fe:
ee:aa:9f:18:74:a3:e3:8d:c6:b3:02:fd:b6:e3:49:
88:25:58:b3:88:e4:da:0e:05:d2:a6:f9:bf:de:96:
1b:c2:bd:c1:53:b6:d3:98:1e:0e:90:45:6a:83:14:
6d:a3:e6:f8:4a:82:fe:cf:f9:05:8b:22:f8:14:e8:
9c:6f:0d:ba:07:bb:ce:75:03:50:87:44:b2:f8:2e:
7e:f5:28:14:d8:15:83:86:58:ac:00:28:a1:02:c0:
da:1d:3f:34:45:6c:9d:05:8f:d6:5f:ed:33:03:e6:
e9:1a:33:05:3e:e4:54:10:f8:14:4c:1b:17:cf:85:
8a:35:6b:42:82:e5:a9:20:c1:a2:79:1e:ab:0d:b0:
63:21:9c:4c:86:11:07:bb:73:1e:cc:ec:87:7f:57:
b3:ad:55:3f:06:7e:1a:3f:80:34:24:91:c4:b2:29:
b9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8D:55:D4:18:10:28:09:22:A9:77:9E:BC:CC:51:DE:7A:2C:BB:40
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/76CBE6E64EA911EC9C441B57C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.47.142.0/24
IPv6:
2001:dc8:6000::/48
Signature Algorithm: sha256WithRSAEncryption
1e:9e:3c:da:28:89:c2:e3:77:91:a3:74:53:94:9e:98:ff:82:
10:7e:58:94:87:c2:c5:13:84:18:ab:6b:3e:b9:76:d4:cc:69:
3e:0a:67:04:24:b0:bd:61:9c:ab:80:9f:09:d9:17:a7:53:a5:
77:df:54:38:7a:89:6e:6d:e9:9b:da:61:47:ed:b7:10:97:24:
e7:b3:31:ee:aa:16:1b:ca:5b:bf:b5:34:78:21:1f:83:4f:fe:
ff:e3:c2:28:91:46:7d:bc:69:25:c6:68:68:4b:f0:a2:2b:36:
ac:ab:df:fa:e6:29:79:4d:88:7e:22:0d:83:13:f2:e4:de:43:
49:e0:f2:2c:ff:22:0b:bb:80:04:7c:d6:e8:66:8f:87:9b:db:
af:e7:9d:02:dc:36:8e:16:3a:a0:50:8e:2c:b9:9b:88:cc:8b:
4e:1e:10:dd:52:1e:f7:50:65:d2:72:89:ba:f8:b7:7e:1e:66:
b4:ad:71:b6:b7:6b:0f:1e:65:c3:19:80:45:29:92:e1:6c:a6:
11:6f:60:fc:e6:b9:d2:94:6d:ce:12:ad:09:a5:94:c6:27:37:
8d:d1:77:57:53:f5:2f:fa:5b:1a:96:8c:d9:59:5f:a1:8a:9a:
eb:c6:4d:2e:2f:ae:73:78:42:9a:87:6c:71:55:18:89:8f:c1:
9e:d3:3d:b7
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICbxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYxMDAyMTUzNjAwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2Y1Zi03ZWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6h3mYwFL83ZCYHaLNqIFkWE3ZusmKmaUJuMwAW4cIu0+kAlosLFjDOP6N8X1
F33ASa0dlEraW6qPGKf1lqxMHTjg3CtBKOZzw2kOu0CA9il7A9ZAJTnW/v7uqp8Y
dKPjjcazAv2240mIJViziOTaDgXSpvm/3pYbwr3BU7bTmB4OkEVqgxRto+b4SoL+
z/kFiyL4FOicbw26B7vOdQNQh0Sy+C5+9SgU2BWDhlisACihAsDaHT80RWydBY/W
X+0zA+bpGjMFPuRUEPgUTBsXz4WKNWtCguWpIMGieR6rDbBjIZxMhhEHu3MezOyH
f1ezrVU/Bn4aP4A0JJHEsim5/wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFEWNVdQY
ECgJIql3nrzMUd56LLtAMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNzZDQkU2RTY0
RUE5MTFFQzlDNDQxQjU3QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAyi+OMA8EAgACMAkDBwAgAQ3IYAAwDQYJKoZIhvcNAQELBQADggEB
AB6ePNooicLjd5GjdFOUnpj/ghB+WJSHwsUThBiraz65dtTMaT4KZwQksL1hnKuA
nwnZF6dTpXffVDh6iW5t6ZvaYUfttxCXJOezMe6qFhvKW7+1NHghH4NP/v/jwiiR
Rn28aSXGaGhL8KIrNqyr3/rmKXlNiH4iDYMT8uTeQ0ng8iz/Igu7gAR81uhmj4eb
26/nnQLcNo4WOqBQjiy5m4jMi04eEN1SHvdQZdJyibr4t34eZrStcba3aw8eZcMZ
gEUpkuFsphFvYPzmudKUbc4SrQmllMYnN43Rd1dT9S/6WxqWjNlZX6GKmuvGTS4v
rnN4QpqHbHFVGImPwZ7TPbc=
-----END CERTIFICATE-----
Generated at Sat Oct 24 15:42:40 2026 by rpki-client