
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/B3795CBC64F211ED9AEC046FC4F9AE02.roa
File: B3795CBC64F211ED9AEC046FC4F9AE02.roa (raw, json)
Hash identifier: +L8evKQDJ3nBMOn/L1rAEvoX4ISe7vPvaP460knk1K8=
Subject key identifier: 3D:A3:89:06:7F:35:F0:82:D5:48:66:EC:71:B6:0F:3B:D5:66:3F:16
Certificate issuer: /CN=A91B5CEA/serialNumber=4484D07DA68D53050CDCF6B13C0C0545E6457CE5
Certificate serial: 02C1
Authority key identifier: 44:84:D0:7D:A6:8D:53:05:0C:DC:F6:B1:3C:0C:05:45:E6:45:7C:E5
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/B3795CBC64F211ED9AEC046FC4F9AE02.roa
Signing time: Fri 31 Jul 2026 02:50:59 +0000
ROA not before: Fri 31 Jul 2026 02:50:58 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 133606
IP address blocks: 185.126.46.0/23 maxlen: 24
185.242.38.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.crl
rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 01:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 705 (0x2c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5CEA, serialNumber=4484D07DA68D53050CDCF6B13C0C0545E6457CE5
Validity
Not Before: Jul 31 02:50:58 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a6c0d92-13e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:20:c8:ef:21:6d:19:6f:0f:dc:e7:8c:fa:f1:
72:67:70:0d:8b:32:5f:91:a3:f5:20:82:a7:af:c4:
25:6a:97:ef:f7:50:4d:e6:55:a2:eb:a5:d1:fc:e3:
ca:0f:f8:63:46:9b:17:22:5c:a6:8c:89:0f:d1:89:
5b:74:c3:36:71:94:94:b8:fc:e8:1d:1b:72:a7:1e:
d3:e4:cd:25:2c:29:b0:e3:72:be:62:4a:66:c3:72:
39:9c:b6:cd:e8:3e:c8:cd:e0:1e:5d:15:06:5d:8c:
d2:ea:08:73:f2:c4:ee:bb:e8:97:ac:66:8e:8c:16:
ce:c0:f3:c9:c3:7b:2e:39:5a:6f:48:c2:26:47:4d:
db:13:43:3a:c3:df:4a:93:24:10:2b:6f:c4:60:96:
2a:75:a1:32:ce:12:e1:65:c2:69:c4:82:70:c7:2f:
22:04:f5:2a:67:dc:2c:44:29:39:e6:18:7a:03:4c:
b4:c3:f7:21:a1:cb:2a:88:6e:62:82:8c:25:6f:90:
23:cf:0b:2e:19:f5:a3:cc:3b:37:9b:30:87:4e:1d:
e3:f9:15:f5:a4:41:0f:1a:51:96:2c:4f:21:d7:10:
94:16:59:25:e9:9f:bb:f2:10:cf:b7:69:58:e0:f7:
a4:57:ba:1c:a7:d3:41:88:a8:ca:bb:89:80:2a:7c:
6b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A3:89:06:7F:35:F0:82:D5:48:66:EC:71:B6:0F:3B:D5:66:3F:16
X509v3 Authority Key Identifier:
keyid:44:84:D0:7D:A6:8D:53:05:0C:DC:F6:B1:3C:0C:05:45:E6:45:7C:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/B3795CBC64F211ED9AEC046FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
185.126.46.0/23
185.242.38.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:4e:ae:d7:23:d4:87:2a:ba:a2:c9:2c:4d:f1:40:f9:47:27:
3e:ec:23:f2:c9:fe:21:4f:3c:40:03:90:c1:dc:bb:aa:f9:f1:
29:de:dd:7c:1c:13:1b:90:4d:f5:e7:df:a1:34:a7:86:6c:ae:
aa:90:50:06:51:16:41:67:b8:9d:ff:eb:82:7f:ce:b9:12:5e:
a3:f5:35:b8:e5:71:5e:13:84:7f:d6:7f:13:97:61:54:62:81:
6e:5a:9e:d7:80:8b:15:df:9c:60:5d:63:60:a1:6c:0c:64:48:
31:9a:78:72:34:e5:59:14:ca:70:e5:5c:18:d0:a9:e6:0a:52:
d3:b3:37:1d:fd:d7:05:b0:67:67:e9:f5:f1:bf:10:eb:3a:a9:
79:0f:eb:0f:20:40:cb:3c:3d:f5:71:79:c6:81:e1:7e:47:2b:
53:6a:98:99:26:e7:ee:08:2d:6e:03:20:22:15:43:dc:d6:c7:
20:38:11:b6:ce:4f:73:5c:31:10:2f:0f:91:28:48:10:de:10:
db:9b:60:9e:81:7e:78:cc:70:b9:7a:78:2d:9a:e9:95:43:41:
0c:b7:eb:48:52:aa:8d:f7:5e:10:35:d0:58:69:24:21:a9:76:
14:70:49:85:11:7e:9b:84:0d:6b:02:63:ab:53:96:dc:1c:08:
18:0a:5b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:47:40 2026 by rpki-client