
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/375CD0C4687B11F18B8955F26647A888.roa
File: 375CD0C4687B11F18B8955F26647A888.roa (raw, json)
Hash identifier: NFBGXohwTAbP6RYJ9RBlPbPILrA7Ch+/AQAFkCpBYas=
Subject key identifier: 11:07:57:7E:51:C1:BA:76:A1:87:F0:84:E4:DC:E7:F5:4D:B7:D7:02
Certificate issuer: /CN=A91AA1F9/serialNumber=9CC25AD10D14E67326F38EBBDA39C12B8C7DE583
Certificate serial: 02
Authority key identifier: 9C:C2:5A:D1:0D:14:E6:73:26:F3:8E:BB:DA:39:C1:2B:8C:7D:E5:83
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nMJa0Q0U5nMm84672jnBK4x95YM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/375CD0C4687B11F18B8955F26647A888.roa
Signing time: Mon 15 Jun 2026 05:29:44 +0000
ROA not before: Mon 15 Jun 2026 05:29:44 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 137238
IP address blocks: 162.4.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.crl
rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nMJa0Q0U5nMm84672jnBK4x95YM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:24:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA1F9, serialNumber=9CC25AD10D14E67326F38EBBDA39C12B8C7DE583
Validity
Not Before: Jun 15 05:29:44 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a2f8dc8-c921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9d:bf:8d:72:bf:69:06:89:cd:56:a7:ed:74:
bb:ea:f1:96:bb:19:07:94:c4:dd:53:e7:51:cf:94:
a4:cc:e7:4b:54:2c:cb:7d:8c:2b:46:bc:31:6f:a3:
13:40:3e:32:34:ea:f7:d6:d5:ff:f3:b3:4d:0a:27:
54:49:c4:42:84:09:de:46:5f:9c:8a:4e:7e:5d:12:
1e:2d:cd:78:47:d1:d4:55:ec:f1:bd:71:a0:77:fa:
e7:14:d3:a2:0a:43:45:a2:fd:6b:08:ac:bf:31:4d:
56:60:d1:24:7a:1b:68:8d:b4:55:74:c5:1f:0a:3a:
23:c4:58:91:05:80:2b:81:52:23:d6:5c:68:a1:56:
76:a7:14:8d:e8:75:2a:a1:3c:69:ea:76:8e:25:0d:
92:5a:91:df:6e:a8:21:c2:a3:20:3f:62:1f:8a:55:
17:97:5a:59:fc:13:17:26:7b:a5:7f:29:71:3d:9d:
59:e1:71:d1:60:9c:0e:95:52:73:78:af:f3:b7:69:
3b:78:56:28:32:44:69:58:f3:b4:b8:45:91:7b:b2:
18:85:cf:34:b6:e4:8d:77:af:4d:cd:68:49:3e:1c:
f8:b5:44:95:39:d4:44:ba:51:a4:f1:d5:2e:f6:48:
43:82:84:1d:a9:b8:fb:8b:3e:ba:70:32:41:d2:e5:
e4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:07:57:7E:51:C1:BA:76:A1:87:F0:84:E4:DC:E7:F5:4D:B7:D7:02
X509v3 Authority Key Identifier:
keyid:9C:C2:5A:D1:0D:14:E6:73:26:F3:8E:BB:DA:39:C1:2B:8C:7D:E5:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nMJa0Q0U5nMm84672jnBK4x95YM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/375CD0C4687B11F18B8955F26647A888.roa
sbgp-ipAddrBlock: critical
IPv4:
162.4.196.0/24
Signature Algorithm: sha256WithRSAEncryption
86:79:35:56:1b:47:60:d6:c0:42:43:50:0d:1a:5b:6c:cc:a6:
7e:d0:69:bc:4d:0e:c0:0e:e2:8d:ed:cf:fb:9e:c0:0f:bc:b3:
b9:51:c9:a9:8c:20:66:72:16:1f:bc:d7:ff:28:5a:09:41:1b:
02:5f:ab:ca:63:8f:33:8f:4b:15:90:09:bf:46:de:1a:4e:56:
97:e1:9b:f6:14:11:48:62:6f:35:62:76:b3:f9:41:0f:51:3b:
57:c9:e4:a1:72:f7:92:4e:ea:19:c5:6f:9a:19:8e:54:0c:26:
ca:3d:eb:99:37:c9:30:68:7c:b1:3f:19:de:62:83:e6:df:1b:
85:20:50:d6:10:8a:ba:e9:11:75:51:6d:f7:84:92:52:72:1b:
9e:f2:db:b8:07:fd:5a:18:fd:48:fd:da:12:82:a2:fc:67:c5:
3a:c5:97:35:f9:10:12:fd:3f:18:ee:f8:27:4b:1e:cd:04:ec:
4f:52:db:df:0c:bc:cc:79:1e:c3:39:b5:2c:47:33:74:9a:f8:
41:3d:c8:eb:4a:46:01:c6:de:30:a6:1e:74:f5:be:ff:11:85:
5d:68:37:bd:f9:a0:95:8e:ab:0e:5d:db:6a:5f:80:d7:94:a1:
4a:70:76:98:e8:24:cc:a4:d3:f4:d4:f6:85:90:df:6a:2d:36:
af:85:61:a2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 18 05:18:29 2026 by rpki-client