
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/B7BCBAE8C2C311F19B33583F8AEE528E.roa
File: B7BCBAE8C2C311F19B33583F8AEE528E.roa (raw, json)
Hash identifier: 0xqHf7DG05f9ZM0jdlcDxB4WU7nG4rwM9DBJ+EzioMk=
Subject key identifier: 0C:14:EE:FD:88:CC:26:85:A7:FF:B9:64:A0:5C:2B:DD:C6:37:54:03
Certificate issuer: /CN=A91B3087/serialNumber=85100E5A1FBAE5FE1A65CBF15734130A8E541BB2
Certificate serial: EF
Authority key identifier: 85:10:0E:5A:1F:BA:E5:FE:1A:65:CB:F1:57:34:13:0A:8E:54:1B:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/B7BCBAE8C2C311F19B33583F8AEE528E.roa
Signing time: Mon 12 Oct 2026 10:56:29 +0000
ROA not before: Mon 12 Oct 2026 10:56:29 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 154199
IP address blocks: 202.136.74.0/23 maxlen: 23
202.136.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.crl
rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 06:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3087, serialNumber=85100E5A1FBAE5FE1A65CBF15734130A8E541BB2
Validity
Not Before: Oct 12 10:56:29 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6accbcdd-fdb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:62:a7:0b:87:7f:a3:63:0a:a4:c8:11:43:1a:
11:e2:e5:e1:d6:2e:fe:db:30:d5:f7:21:97:b5:0c:
fe:4d:bd:14:c0:cf:84:2a:ac:a1:02:1a:dd:a5:6c:
8a:51:d5:55:c0:79:13:89:07:fc:43:d8:1b:77:36:
67:f0:ab:9d:36:b1:1f:93:a2:d9:2b:67:7a:39:13:
39:70:5b:c7:a2:10:5e:85:ad:b4:9a:5d:7d:44:19:
e3:76:42:b6:1d:e9:7d:68:22:26:d5:68:c9:cf:67:
1a:95:cd:df:97:7f:86:3f:a4:4e:b4:53:f0:a3:24:
ef:76:90:b0:70:a2:dc:2c:59:dc:91:65:15:0c:bc:
a3:b7:30:ac:5f:f0:70:26:be:be:45:ff:61:f8:e1:
b2:ba:55:06:70:f6:1c:27:91:04:11:c1:ac:2b:c2:
04:15:e2:11:70:42:b9:ee:8e:0f:9f:22:20:4f:2f:
02:e2:a0:7c:89:e6:6d:57:fd:31:bd:3a:cd:13:96:
93:e0:8d:81:a0:6d:ca:e2:c1:0d:7e:56:4a:3d:6a:
52:68:1f:34:9e:c9:4a:e4:35:27:b8:ff:cb:7e:df:
db:f4:cd:9b:33:2b:25:29:af:55:88:b2:d4:42:d7:
e0:24:4f:a5:dd:45:a3:df:25:65:c4:f9:35:3a:c2:
16:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:14:EE:FD:88:CC:26:85:A7:FF:B9:64:A0:5C:2B:DD:C6:37:54:03
X509v3 Authority Key Identifier:
keyid:85:10:0E:5A:1F:BA:E5:FE:1A:65:CB:F1:57:34:13:0A:8E:54:1B:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/B7BCBAE8C2C311F19B33583F8AEE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
202.136.74.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:b2:9c:b5:99:f6:80:fd:df:4d:57:b1:94:33:ce:52:b9:9f:
01:3f:b7:49:14:a4:71:0d:76:c4:40:fb:a9:63:ba:12:b1:58:
b0:45:18:aa:ff:e2:c6:09:5c:36:e3:9b:17:a1:9e:cf:e3:1b:
12:74:ad:3c:de:c5:9b:24:59:5f:cc:ff:c3:f8:cc:9c:35:07:
0b:59:33:0b:59:79:2e:df:0d:63:29:8e:da:82:14:aa:a1:b8:
62:c2:c7:84:59:bd:fd:ac:22:f6:21:00:a1:c3:23:65:b2:19:
c3:fe:04:af:d4:5b:c0:57:4a:57:8d:52:29:91:13:be:0b:26:
00:4e:1d:5d:6a:b1:51:35:f1:5c:10:e3:74:b8:46:33:56:67:
df:0f:aa:9c:fb:57:66:43:59:e4:5b:5e:b8:a1:55:da:89:e7:
f9:df:d2:46:56:2b:fa:dd:5d:69:cc:09:48:17:fc:e8:e7:00:
19:5c:cc:22:40:8d:72:47:96:0c:e2:71:96:50:bc:3d:ca:d7:
6e:a2:79:d5:f6:f0:2f:0d:2c:88:00:0a:65:2c:42:66:4f:b0:
1d:31:ee:a1:95:fd:9c:98:41:47:82:08:21:80:3d:f9:84:d6:
ae:33:aa:e8:35:0b:42:97:7d:48:59:93:7a:32:d5:3a:b9:fc:
1b:1e:4a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:12:40 2026 by rpki-client