
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/0B1C46B26C8E11EDA1402673C4F9AE02.roa
File: 0B1C46B26C8E11EDA1402673C4F9AE02.roa (raw, json)
Hash identifier: 0C9mx4bIr2S3KsrxXmmh+6ZkoQeTAaGyUsfLf68eqPo=
Subject key identifier: 56:81:D4:C9:6B:AA:6D:7D:05:C2:91:CF:90:8D:B6:63:0F:D5:C9:6F
Certificate issuer: /CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7
Certificate serial: 02BB
Authority key identifier: 8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/0B1C46B26C8E11EDA1402673C4F9AE02.roa
Signing time: Sun 05 Jul 2026 02:27:59 +0000
ROA not before: Sun 05 Jul 2026 02:27:59 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 396982
IP address blocks: 203.4.188.0/23 maxlen: 24
203.4.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl
rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 02:21:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 699 (0x2bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC4FA, serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7
Validity
Not Before: Jul 5 02:27:59 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a49c12f-2beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:07:e0:c6:23:25:44:24:a1:56:c6:e3:99:3f:
33:6c:67:59:fe:79:3e:fa:4f:9c:21:5c:c5:e8:ef:
c0:0b:0a:5b:07:78:13:a8:56:19:77:d2:d9:c4:96:
19:f4:3c:08:b8:a1:5b:e0:ff:b9:0a:06:d8:67:87:
56:7f:dc:57:af:ab:e1:69:4d:a1:07:22:79:fc:73:
6c:e2:af:86:1c:39:68:65:70:4b:03:05:cc:33:a5:
19:5a:f8:fa:49:20:1e:b7:5f:1c:60:b6:ab:6d:ac:
69:b3:32:18:82:5a:81:6e:b3:a6:57:73:61:87:7e:
00:84:22:69:4a:94:c5:be:77:28:b7:23:0d:c5:b2:
8d:f5:47:18:3e:a3:d8:c2:17:8e:d9:c0:7a:91:aa:
24:da:76:5d:fa:46:2a:50:be:36:9d:58:b4:9b:fc:
aa:0f:66:e3:65:2d:2a:77:51:8c:6f:ee:11:eb:54:
ee:5f:c4:2c:9d:35:4b:6c:7e:55:97:2f:29:32:2c:
71:9a:26:98:c3:af:97:68:99:af:d8:cf:3d:e7:92:
cf:01:da:fd:2b:4e:0f:c7:e0:df:eb:19:6d:ee:65:
e6:74:42:28:aa:6a:43:16:9a:69:0d:bb:cd:20:da:
dc:88:70:71:f7:d3:0c:51:19:75:dc:e4:ce:e7:a2:
df:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:81:D4:C9:6B:AA:6D:7D:05:C2:91:CF:90:8D:B6:63:0F:D5:C9:6F
X509v3 Authority Key Identifier:
keyid:8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/0B1C46B26C8E11EDA1402673C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.4.188.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:63:63:20:d6:6e:ff:3f:6f:ab:b0:4f:1a:3d:96:04:b2:7d:
cb:d9:53:a0:3a:c2:0e:f8:c4:58:8a:7b:31:e4:c7:f1:46:0d:
63:bb:9a:ac:19:d2:6a:97:9c:98:b6:f7:ee:18:94:0d:e8:63:
96:cb:fb:a9:0b:c0:d0:eb:76:f7:b5:e2:7c:5c:9b:e0:a8:f8:
c4:43:9c:95:d3:5a:c5:a6:bd:5e:c6:fe:ae:5b:00:ff:4a:7f:
e0:6d:b6:83:a8:99:cb:34:bd:e0:c7:36:c2:78:5e:32:9b:e0:
d7:b2:4d:90:a3:11:35:3b:e9:8f:14:1b:07:36:ad:ce:81:49:
e3:af:dd:c2:5f:de:bb:24:cc:ab:5e:ea:7e:18:f6:b1:75:1c:
08:a5:8e:b2:c6:ba:86:48:2e:17:e1:35:e1:18:42:3f:f9:49:
33:5f:b3:c4:bd:fa:dd:a3:42:2d:09:7c:e1:b5:72:05:d1:bc:
e0:19:e6:4d:fb:83:d7:2d:c0:db:7b:31:a9:0c:26:4a:ba:c2:
f5:4d:e0:23:f9:cd:f6:86:e9:66:81:b7:7b:21:bd:16:ab:e1:
c6:75:01:c1:84:b2:e3:13:1d:13:f8:26:c2:b2:2b:6d:d4:1d:
d0:ef:04:4a:f4:49:a9:9b:6a:96:02:a3:78:b3:d0:8d:0c:92:
d4:14:cb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:34:14 2026 by rpki-client