
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/268ECB3ED5BD11E894FFC250C4F9AE02.roa
File: 268ECB3ED5BD11E894FFC250C4F9AE02.roa (raw, json)
Hash identifier: +S9KMUljfxQJFwqoopUe9aDl8dajJPyPJ+b4JFYvIxM=
Subject key identifier: AA:1B:26:57:E5:1B:43:B8:F7:FC:CC:1F:26:F1:FD:8A:B2:17:94:97
Certificate issuer: /CN=A91ACD4D/serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C
Certificate serial: 172B
Authority key identifier: 3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/268ECB3ED5BD11E894FFC250C4F9AE02.roa
Signing time: Wed 02 Sep 2026 17:30:30 +0000
ROA not before: Wed 02 Sep 2026 17:30:30 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 45509
IP address blocks: 115.187.88.0/22 maxlen: 22
115.187.88.0/24 maxlen: 24
115.187.89.0/24 maxlen: 24
115.187.90.0/24 maxlen: 24
115.187.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl
rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 16:35:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5931 (0x172b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACD4D, serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C
Validity
Not Before: Sep 2 17:30:30 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a985d36-a36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6f:20:88:bc:62:85:c2:ab:df:64:a7:40:21:
a4:3b:04:e6:3f:0d:ee:a1:cb:50:43:02:3e:88:d3:
99:bf:6b:3a:83:f2:3b:04:cc:68:62:40:d6:67:d0:
d8:4d:64:f5:4a:bd:a5:6a:fa:b7:d1:b8:d6:55:6f:
cd:19:a8:3e:0c:46:68:4c:b1:2c:51:b0:24:1d:10:
b5:0f:15:16:2d:90:5d:69:af:45:e4:8e:9b:f4:af:
ac:95:4d:16:6a:80:cd:0f:61:52:bc:17:d2:d1:43:
24:2d:10:22:2f:b4:78:89:25:4a:fe:e5:03:23:26:
10:97:b4:63:0b:07:93:65:8e:ad:ab:a8:74:93:1f:
11:35:24:68:9d:e1:0d:1a:1a:2d:59:3f:a0:ef:8c:
31:78:f5:ad:3f:32:8d:f6:63:19:16:ed:d9:2c:9e:
4f:6e:81:bc:61:ba:af:6d:b2:c9:26:a0:b7:10:41:
9d:c3:ad:43:52:a6:27:f3:7f:26:f6:4a:34:03:35:
15:39:f1:0a:eb:5c:5d:13:cc:aa:6f:88:a1:7c:ea:
24:c6:c4:58:9e:f0:bd:21:a4:c9:3a:68:da:9b:77:
fc:f0:f1:b4:bc:8f:dd:43:29:37:73:3a:5a:90:18:
ef:30:b3:d5:d5:f6:27:39:8a:76:d0:87:a0:8e:ce:
ce:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1B:26:57:E5:1B:43:B8:F7:FC:CC:1F:26:F1:FD:8A:B2:17:94:97
X509v3 Authority Key Identifier:
keyid:3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/268ECB3ED5BD11E894FFC250C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
115.187.88.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:33:f7:2a:58:ee:1f:45:39:55:9f:a4:89:a8:d8:35:b4:d6:
df:c1:1f:60:42:75:67:d5:8b:39:04:d3:cd:ec:c4:ab:f8:5c:
a6:ec:eb:3a:f2:b3:9a:e4:6e:81:b4:bd:7c:35:e0:6a:7f:dc:
9e:f7:4a:cc:d0:8e:8b:4e:6c:7c:0a:7b:02:c2:19:eb:1d:50:
f2:74:7b:07:3f:ab:81:9a:53:00:c4:bb:af:77:4c:8d:7f:fc:
6a:05:cf:c8:0b:7d:1e:78:c5:60:6e:9f:4b:a1:03:fc:31:55:
4e:d8:3e:62:99:29:b8:74:7d:c4:32:b4:ac:be:5d:33:78:56:
d3:25:d6:01:f7:ae:57:51:90:f1:14:6c:82:93:5d:44:5b:a0:
2d:41:ad:de:54:c6:c4:d5:57:02:d8:a1:60:fe:01:9d:9a:74:
d2:a4:df:d8:7d:4f:88:69:d1:83:04:5a:4f:a5:7c:09:9f:8c:
6d:2a:de:9e:85:81:b0:3e:af:44:82:19:13:38:93:31:ff:1a:
d7:fb:49:43:e2:30:82:7e:89:7c:70:62:df:49:bb:ba:08:87:
ae:94:59:32:2a:58:51:c0:1e:52:13:83:1c:a3:e7:49:21:c3:
73:a0:9f:04:b6:b1:29:0d:78:9b:63:6f:4f:dd:37:7b:6b:10:
d1:c6:87:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:17:48 2026 by rpki-client